You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
39171 lines
5.3 MiB
39171 lines
5.3 MiB
Mar 29 04:02:08 splunk3 sendmail[9529]: n2TB28r5009529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:03:08 splunk3 sendmail[9860]: n2TB38lL009860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:03:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:04:08 splunk3 sendmail[10109]: n2TB48Zl010109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:05:08 splunk3 sendmail[10353]: n2TB58ox010353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:05:15 splunk3 sendmail[10387]: n2TB5Fgt010387: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291105.n2TB5Fhd022063@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:05:15 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44669
|
|
Mar 29 04:05:15 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:05:15 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 04:05:15 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 04:05:15 splunk3 sendmail[10388]: n2TB5Fgt010387: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:06:08 splunk3 sendmail[10626]: n2TB689j010626: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:06:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:07:08 splunk3 sendmail[10873]: n2TB78Sf010873: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:08:08 splunk3 sendmail[11112]: n2TB88R6011112: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:08:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:09:08 splunk3 sendmail[11357]: n2TB98QF011357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:10:02 splunk3 sendmail[11650]: n2TBA2TC011650: from=root, size=292, class=0, nrcpts=1, msgid=<200903291110.n2TBA2TC011650@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 04:10:02 splunk3 sendmail[11655]: n2TBA2nt011655: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903291110.n2TBA2TC011650@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 04:10:02 splunk3 sendmail[11650]: n2TBA2TC011650: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TBA2nt011655 Message accepted for delivery)
|
|
Mar 29 04:10:04 splunk3 sendmail[11656]: n2TBA2nt011655: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:10:08 splunk3 sendmail[11702]: n2TBA8Hr011702: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:10:16 splunk3 sendmail[11736]: n2TBAG4j011736: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291110.n2TBAGI5022678@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:10:16 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44727
|
|
Mar 29 04:10:16 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:10:16 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:10:16 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:10:16 splunk3 spamd[16743]: spamd: processing message <200903291110.n2TBAGI5022678@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:10:18 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 29 04:10:18 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44727,mid=<200903291110.n2TBAGI5022678@virt2.int.splunk.com>,bayes=0.112314724537097,autolearn=no
|
|
Mar 29 04:10:18 splunk3 sendmail[11737]: n2TBAG4j011736: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:11:08 splunk3 sendmail[11966]: n2TBB8Cw011966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 04:11:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:12:08 splunk3 sendmail[12210]: n2TBC8sB012210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:13:08 splunk3 sendmail[12449]: n2TBD8IJ012449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:13:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:14:08 splunk3 sendmail[12688]: n2TBE8i7012688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:15:08 splunk3 sendmail[12927]: n2TBF8J4012927: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:15:16 splunk3 sendmail[12947]: n2TBFGUI012947: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291115.n2TBFGMN023507@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:15:16 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44783
|
|
Mar 29 04:15:16 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:15:16 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:15:16 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:15:16 splunk3 spamd[16743]: spamd: processing message <200903291115.n2TBFGMN023507@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:15:18 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 04:15:18 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44783,mid=<200903291115.n2TBFGMN023507@virt2.int.splunk.com>,bayes=0.112314724537097,autolearn=no
|
|
Mar 29 04:15:18 splunk3 sendmail[12948]: n2TBFGUI012947: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:15:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:16:08 splunk3 sendmail[13176]: n2TBG85r013176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:16:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:17:08 splunk3 sendmail[13460]: n2TBH8er013460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:18:08 splunk3 sendmail[13690]: n2TBI8kK013690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:18:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:19:08 splunk3 sendmail[13934]: n2TBJ8tH013934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:19:49 splunk3 sendmail[13397]: n2TBGtHZ013397: from=<shimonv@malwaredomains.com>, size=5757, class=0, nrcpts=1, msgid=<5e65019dbd85$8295b9ee$20ea374c@malwaredomains.com>, proto=ESMTP, daemon=MTA, relay=[62.120.26.181]
|
|
Mar 29 04:19:49 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44835
|
|
Mar 29 04:19:49 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:19:49 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:19:49 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:19:49 splunk3 spamd[16743]: spamd: processing message <5e65019dbd85$8295b9ee$20ea374c@malwaredomains.com> for spamme:501
|
|
Mar 29 04:19:51 splunk3 spamd[16743]: spamd: identified spam (33.9/5.0) for spamme:501 in 1.3 seconds, 6040 bytes.
|
|
Mar 29 04:19:51 splunk3 spamd[16743]: spamd: result: Y 33 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_BOGUSMX,DNS_FROM_RFC_POST,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL scantime=1.3,size=6040,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44835,mid=<5e65019dbd85$8295b9ee$20ea374c@malwaredomains.com>,bayes=1,autolearn=spam
|
|
Mar 29 04:19:51 splunk3 sendmail[14091]: n2TBGtHZ013397: to=<spamme@splunkit.com>, delay=00:00:14, xdelay=00:00:02, mailer=local, pri=35935, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:19:51 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:20:08 splunk3 sendmail[14179]: n2TBK8tF014179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:20:17 splunk3 sendmail[14202]: n2TBKHOw014202: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291120.n2TBKHm0024140@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:20:17 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44840
|
|
Mar 29 04:20:17 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:20:17 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:20:17 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:20:17 splunk3 spamd[16743]: spamd: processing message <200903291120.n2TBKHm0024140@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:20:19 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 04:20:19 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44840,mid=<200903291120.n2TBKHm0024140@virt2.int.splunk.com>,bayes=0.112310245159753,autolearn=no
|
|
Mar 29 04:20:19 splunk3 sendmail[14203]: n2TBKHOw014202: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:20:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:21:08 splunk3 sendmail[14433]: n2TBL8Zw014433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:21:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:22:08 splunk3 sendmail[16442]: n2TBM8xU016442: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:23:08 splunk3 sendmail[1173]: n2TBN8H6001173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:23:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:24:08 splunk3 sendmail[20835]: n2TBO8iL020835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:25:08 splunk3 sendmail[22892]: n2TBP8Jh022892: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:25:18 splunk3 sendmail[22933]: n2TBPIR8022933: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291125.n2TBPHjn028109@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:25:18 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44895
|
|
Mar 29 04:25:18 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:25:18 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:25:18 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:25:18 splunk3 spamd[16743]: spamd: processing message <200903291125.n2TBPHjn028109@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:25:20 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 04:25:20 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44895,mid=<200903291125.n2TBPHjn028109@virt2.int.splunk.com>,bayes=0.112310245159753,autolearn=no
|
|
Mar 29 04:25:20 splunk3 sendmail[22934]: n2TBPIR8022933: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:25:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:26:08 splunk3 sendmail[23143]: n2TBQ8bQ023143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 04:26:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:27:08 splunk3 sendmail[23389]: n2TBR874023389: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:28:08 splunk3 sendmail[23626]: n2TBS8ml023626: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:28:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:29:08 splunk3 sendmail[23869]: n2TBT8SP023869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:30:08 splunk3 sendmail[24110]: n2TBU8Zq024110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:30:19 splunk3 sendmail[24146]: n2TBUJwX024146: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291130.n2TBUIVh028729@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:30:19 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44952
|
|
Mar 29 04:30:19 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:30:19 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:30:19 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:30:19 splunk3 spamd[16743]: spamd: processing message <200903291130.n2TBUIVh028729@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:30:21 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 04:30:21 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44952,mid=<200903291130.n2TBUIVh028729@virt2.int.splunk.com>,bayes=0.112310245159753,autolearn=no
|
|
Mar 29 04:30:21 splunk3 sendmail[24148]: n2TBUJwX024146: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:30:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:31:08 splunk3 sendmail[24364]: n2TBV8gw024364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:31:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:32:08 splunk3 sendmail[24602]: n2TBW8mo024602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:33:08 splunk3 sendmail[24841]: n2TBX8Ae024841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:33:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:34:08 splunk3 sendmail[25078]: n2TBY8Ij025078: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:35:08 splunk3 sendmail[25316]: n2TBZ8qZ025316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:35:19 splunk3 sendmail[25352]: n2TBZJFP025352: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291135.n2TBZJaY029480@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:35:19 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45007
|
|
Mar 29 04:35:19 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:35:19 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:35:19 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:35:19 splunk3 spamd[16743]: spamd: processing message <200903291135.n2TBZJaY029480@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:35:21 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 29 04:35:21 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45007,mid=<200903291135.n2TBZJaY029480@virt2.int.splunk.com>,bayes=0.112310245159753,autolearn=no
|
|
Mar 29 04:35:21 splunk3 sendmail[25353]: n2TBZJFP025352: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:35:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:36:08 splunk3 sendmail[25566]: n2TBa8HZ025566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:36:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:37:08 splunk3 sendmail[25811]: n2TBb8kk025811: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:37:54 splunk3 sendmail[25987]: n2TBbsJa025987: from=<3kV3PSRQKBggowwotmitmz10-vwzmxt6owwotm.kwu0xiuum0xt2vsq1.kwu@alerts.bounces.google.com>, size=2492, class=0, nrcpts=1, msgid=<00151750db1c8379fd0466406573@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.166]
|
|
Mar 29 04:37:54 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45041
|
|
Mar 29 04:37:54 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:37:54 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:37:54 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:37:54 splunk3 spamd[16743]: spamd: processing message <00151750db1c8379fd0466406573@google.com> for spamme:501
|
|
Mar 29 04:37:57 splunk3 spamd[16743]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.2 seconds, 2922 bytes.
|
|
Mar 29 04:37:57 splunk3 spamd[16743]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.2,size=2922,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45041,mid=<00151750db1c8379fd0466406573@google.com>,bayes=1.11022302462516e-16,autolearn=ham
|
|
Mar 29 04:37:57 splunk3 sendmail[25988]: n2TBbsJa025987: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=32703, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:37:57 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:38:08 splunk3 sendmail[26053]: n2TBc81h026053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:38:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:39:08 splunk3 sendmail[26295]: n2TBd85o026295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:40:08 splunk3 sendmail[26536]: n2TBe8Zl026536: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:40:20 splunk3 sendmail[26576]: n2TBeK7a026576: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291140.n2TBeJIm030113@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:40:20 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45064
|
|
Mar 29 04:40:20 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:40:20 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:40:20 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:40:20 splunk3 spamd[16743]: spamd: processing message <200903291140.n2TBeJIm030113@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:40:22 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 04:40:22 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45064,mid=<200903291140.n2TBeJIm030113@virt2.int.splunk.com>,bayes=0.112342619947712,autolearn=no
|
|
Mar 29 04:40:22 splunk3 sendmail[26577]: n2TBeK7a026576: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:40:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:41:08 splunk3 sendmail[26790]: n2TBf89I026790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 04:41:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:42:08 splunk3 sendmail[27033]: n2TBg82W027033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:43:08 splunk3 sendmail[27272]: n2TBh8dn027272: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:43:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:44:08 splunk3 sendmail[27511]: n2TBi8oR027511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:45:08 splunk3 sendmail[27749]: n2TBj8vl027749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:45:20 splunk3 sendmail[27787]: n2TBjKod027787: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291145.n2TBjKTi030731@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:45:20 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45120
|
|
Mar 29 04:45:20 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:45:20 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:45:20 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:45:20 splunk3 spamd[16743]: spamd: processing message <200903291145.n2TBjKTi030731@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:45:22 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 29 04:45:22 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45120,mid=<200903291145.n2TBjKTi030731@virt2.int.splunk.com>,bayes=0.112342619947712,autolearn=no
|
|
Mar 29 04:45:22 splunk3 sendmail[27788]: n2TBjKod027787: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:45:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:46:08 splunk3 sendmail[27996]: n2TBk8CH027996: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:46:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:47:08 splunk3 sendmail[28241]: n2TBl8vH028241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:48:08 splunk3 sendmail[28476]: n2TBm87j028476: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:48:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:49:08 splunk3 sendmail[28719]: n2TBn8uc028719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:50:08 splunk3 sendmail[28958]: n2TBo82q028958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:50:22 splunk3 sendmail[28997]: n2TBoMKk028997: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291150.n2TBoLI9031345@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:50:22 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45176
|
|
Mar 29 04:50:22 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:50:22 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:50:22 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:50:22 splunk3 spamd[16743]: spamd: processing message <200903291150.n2TBoLI9031345@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:50:24 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 04:50:24 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45176,mid=<200903291150.n2TBoLI9031345@virt2.int.splunk.com>,bayes=0.112342619947712,autolearn=no
|
|
Mar 29 04:50:24 splunk3 sendmail[28998]: n2TBoMKk028997: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:50:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:51:08 splunk3 sendmail[29212]: n2TBp8Y4029212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:51:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:52:08 splunk3 sendmail[29450]: n2TBq8tn029450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:53:08 splunk3 sendmail[29692]: n2TBr89X029692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:53:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:54:08 splunk3 sendmail[29935]: n2TBs8mM029935: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:55:08 splunk3 sendmail[30184]: n2TBt8HX030184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:55:22 splunk3 sendmail[30241]: n2TBtM86030241: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291155.n2TBtM7q031952@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 04:55:22 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45240
|
|
Mar 29 04:55:22 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 04:55:22 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 04:55:22 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 04:55:22 splunk3 spamd[16743]: spamd: processing message <200903291155.n2TBtM7q031952@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 04:55:24 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 04:55:24 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45240,mid=<200903291155.n2TBtM7q031952@virt2.int.splunk.com>,bayes=0.112342619947712,autolearn=no
|
|
Mar 29 04:55:24 splunk3 sendmail[30242]: n2TBtM86030241: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 04:55:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 04:56:08 splunk3 sendmail[30423]: n2TBu8HC030423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 04:56:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 04:57:08 splunk3 sendmail[30670]: n2TBv86N030670: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:58:08 splunk3 sendmail[30907]: n2TBw84d030907: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 04:58:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 04:59:08 splunk3 sendmail[31145]: n2TBx8Zw031145: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:00:00 splunk3 sendmail[31351]: n2TC00ww031351: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903291200.n2TC00ww031351@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 05:00:00 splunk3 sendmail[31353]: n2TC00ww031351: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 05:00:00 splunk3 sendmail[31353]: n2TC00ww031351: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 05:00:00 splunk3 sendmail[31353]: n2TC00ww031351: n2TC00ww031353: postmaster notify: User unknown
|
|
Mar 29 05:00:02 splunk3 sendmail[31353]: n2TC00ww031353: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:00:04 splunk3 sendmail[31450]: n2TC04tM031450: from=root, size=291, class=0, nrcpts=1, msgid=<200903291200.n2TC04tM031450@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 05:00:04 splunk3 sendmail[31454]: n2TC045u031454: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903291200.n2TC04tM031450@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 05:00:04 splunk3 sendmail[31450]: n2TC04tM031450: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TC045u031454 Message accepted for delivery)
|
|
Mar 29 05:00:05 splunk3 sendmail[31455]: n2TC045u031454: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:00:08 splunk3 sendmail[31479]: n2TC08rX031479: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:00:23 splunk3 sendmail[31539]: n2TC0NVb031539: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291200.n2TC0NDq032595@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:00:23 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45304
|
|
Mar 29 05:00:23 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:00:23 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 05:00:23 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 05:00:23 splunk3 sendmail[31540]: n2TC0NVb031539: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:00:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:01:05 splunk3 sendmail[31691]: n2TC11uT031691: from=root, size=443, class=0, nrcpts=1, msgid=<200903291201.n2TC11uT031691@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 05:01:05 splunk3 sendmail[31712]: n2TC15PX031712: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903291201.n2TC11uT031691@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 05:01:05 splunk3 sendmail[31691]: n2TC11uT031691: to=root, ctladdr=root (0/0), delay=00:00:04, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TC15PX031712 Message accepted for delivery)
|
|
Mar 29 05:01:07 splunk3 sendmail[31714]: n2TC15PX031712: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:01:08 splunk3 sendmail[31739]: n2TC18f8031739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:01:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:02:08 splunk3 sendmail[31980]: n2TC28NJ031980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:03:08 splunk3 sendmail[32216]: n2TC38lC032216: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:03:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:04:08 splunk3 sendmail[32455]: n2TC48Yb032455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:05:08 splunk3 sendmail[32704]: n2TC58IT032704: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:05:23 splunk3 sendmail[32759]: n2TC5Nni032759: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903291205.n2TC5Nbl000813@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:05:23 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45361
|
|
Mar 29 05:05:23 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:05:23 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 05:05:23 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 05:05:23 splunk3 sendmail[32760]: n2TC5Nni032759: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:05:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:06:08 splunk3 sendmail[473]: n2TC68EQ000473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:06:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:07:08 splunk3 sendmail[717]: n2TC788v000717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:08:08 splunk3 sendmail[956]: n2TC88lV000956: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:08:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:09:08 splunk3 sendmail[1199]: n2TC98ov001199: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:10:02 splunk3 sendmail[1520]: n2TCA243001520: from=root, size=292, class=0, nrcpts=1, msgid=<200903291210.n2TCA243001520@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 05:10:02 splunk3 sendmail[1524]: n2TCA2LE001524: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903291210.n2TCA243001520@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 05:10:02 splunk3 sendmail[1520]: n2TCA243001520: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TCA2LE001524 Message accepted for delivery)
|
|
Mar 29 05:10:03 splunk3 sendmail[1525]: n2TCA2LE001524: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:10:08 splunk3 sendmail[1550]: n2TCA8Uf001550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:10:24 splunk3 sendmail[1609]: n2TCAOiY001609: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291210.n2TCANSL001441@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:10:24 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45417
|
|
Mar 29 05:10:24 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:10:24 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:10:24 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:10:24 splunk3 spamd[16743]: spamd: processing message <200903291210.n2TCANSL001441@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:10:26 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 29 05:10:26 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45417,mid=<200903291210.n2TCANSL001441@virt2.int.splunk.com>,bayes=0.169268000865553,autolearn=no
|
|
Mar 29 05:10:26 splunk3 sendmail[1610]: n2TCAOiY001609: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:10:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:11:08 splunk3 sendmail[1797]: n2TCB83j001797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 05:11:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:12:08 splunk3 sendmail[2042]: n2TCC8XX002042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:13:08 splunk3 sendmail[2280]: n2TCD85K002280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:13:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:14:08 splunk3 sendmail[2516]: n2TCE8Nf002516: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:15:08 splunk3 sendmail[2780]: n2TCF8FE002780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:15:24 splunk3 sendmail[2840]: n2TCFO0k002840: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291215.n2TCFOqM002270@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:15:25 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45474
|
|
Mar 29 05:15:25 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:15:25 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:15:25 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:15:25 splunk3 spamd[16743]: spamd: processing message <200903291215.n2TCFOqM002270@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:15:27 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 29 05:15:27 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45474,mid=<200903291215.n2TCFOqM002270@virt2.int.splunk.com>,bayes=0.169268000865553,autolearn=no
|
|
Mar 29 05:15:27 splunk3 sendmail[2841]: n2TCFO0k002840: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:15:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:16:08 splunk3 sendmail[3031]: n2TCG8C3003031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:16:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:17:08 splunk3 sendmail[3278]: n2TCH8Wl003278: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:18:08 splunk3 sendmail[3514]: n2TCI8si003514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:18:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:19:08 splunk3 sendmail[3787]: n2TCJ8F8003787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:20:08 splunk3 sendmail[4044]: n2TCK8dA004044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:20:25 splunk3 sendmail[4105]: n2TCKPxN004105: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291220.n2TCKOV3002902@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:20:25 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45529
|
|
Mar 29 05:20:25 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:20:25 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:20:25 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:20:25 splunk3 spamd[16743]: spamd: processing message <200903291220.n2TCKOV3002902@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:20:27 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 29 05:20:27 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45529,mid=<200903291220.n2TCKOV3002902@virt2.int.splunk.com>,bayes=0.169268000865553,autolearn=no
|
|
Mar 29 05:20:27 splunk3 sendmail[4106]: n2TCKPxN004105: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:20:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:21:08 splunk3 sendmail[4299]: n2TCL8p6004299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:21:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:22:08 splunk3 sendmail[4549]: n2TCM8O1004549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:23:08 splunk3 sendmail[4794]: n2TCN85K004794: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:23:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:24:08 splunk3 sendmail[5042]: n2TCO8UV005042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:25:08 splunk3 sendmail[5323]: n2TCP8fU005323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:25:25 splunk3 sendmail[5387]: n2TCPPGj005387: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291225.n2TCPPRB003505@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:25:25 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45585
|
|
Mar 29 05:25:25 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:25:25 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:25:25 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:25:25 splunk3 spamd[16743]: spamd: processing message <200903291225.n2TCPPRB003505@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:25:27 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 29 05:25:27 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45585,mid=<200903291225.n2TCPPRB003505@virt2.int.splunk.com>,bayes=0.169268000865553,autolearn=no
|
|
Mar 29 05:25:27 splunk3 sendmail[5388]: n2TCPPGj005387: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:25:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:26:08 splunk3 sendmail[5569]: n2TCQ8vW005569: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 05:26:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:27:08 splunk3 sendmail[5812]: n2TCR84n005812: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:28:08 splunk3 sendmail[6047]: n2TCS8W9006047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:28:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:28:27 splunk3 sendmail[5931]: n2TCRd3v005931: from=<sushilaf@domainnews.com>, size=5710, class=0, nrcpts=1, msgid=<f5b3019dbf61$fc7ae54d$073a8003@domainnews.com>, proto=ESMTP, daemon=MTA, relay=6.124.32.95.c10008-a77.dsl-dynamic.vsi.ru [95.32.124.6]
|
|
Mar 29 05:28:27 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45617
|
|
Mar 29 05:28:27 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:28:27 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:28:27 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:28:27 splunk3 spamd[16743]: spamd: processing message <f5b3019dbf61$fc7ae54d$073a8003@domainnews.com> for spamme:501
|
|
Mar 29 05:28:30 splunk3 spamd[16743]: spamd: identified spam (43.2/5.0) for spamme:501 in 2.7 seconds, 6059 bytes.
|
|
Mar 29 05:28:30 splunk3 spamd[16743]: spamd: result: Y 43 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_IPADDR2,HELO_DYNAMIC_SPLIT_IP,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,RCVD_NUMERIC_HELO,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL scantime=2.7,size=6059,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45617,mid=<f5b3019dbf61$fc7ae54d$073a8003@domainnews.com>,bayes=1,autolearn=spam
|
|
Mar 29 05:28:30 splunk3 sendmail[6126]: n2TCRd3v005931: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:03, mailer=local, pri=35960, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:28:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:29:08 splunk3 sendmail[6295]: n2TCT8NJ006295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:30:08 splunk3 sendmail[6546]: n2TCU8rf006546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:30:25 splunk3 sendmail[6604]: n2TCUPWR006604: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291230.n2TCUPVv004131@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:30:26 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45643
|
|
Mar 29 05:30:26 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:30:26 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:30:26 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:30:26 splunk3 spamd[16743]: spamd: processing message <200903291230.n2TCUPVv004131@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:30:28 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 29 05:30:28 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45643,mid=<200903291230.n2TCUPVv004131@virt2.int.splunk.com>,bayes=0.169262627771622,autolearn=no
|
|
Mar 29 05:30:28 splunk3 sendmail[6605]: n2TCUPWR006604: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:30:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:31:08 splunk3 sendmail[6793]: n2TCV8WG006793: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:31:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:32:08 splunk3 sendmail[7032]: n2TCW8R4007032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:33:08 splunk3 sendmail[7272]: n2TCX8NO007272: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:33:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:34:08 splunk3 sendmail[7508]: n2TCY8dM007508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:35:08 splunk3 sendmail[7763]: n2TCZ8vj007763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:35:26 splunk3 sendmail[7823]: n2TCZQ7w007823: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291235.n2TCZQhJ004871@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:35:26 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45698
|
|
Mar 29 05:35:26 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:35:26 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:35:26 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:35:26 splunk3 spamd[16743]: spamd: processing message <200903291235.n2TCZQhJ004871@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:35:28 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 29 05:35:28 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45698,mid=<200903291235.n2TCZQhJ004871@virt2.int.splunk.com>,bayes=0.169262627771622,autolearn=no
|
|
Mar 29 05:35:28 splunk3 sendmail[7824]: n2TCZQ7w007823: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:35:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:35:38 splunk3 sendmail[7889]: n2TCZbSx007889: from=<spamme@splunkit.com>, size=1905, class=0, nrcpts=1, msgid=<200903291235.n2TCZbSx007889@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=c-71-202-159-51.hsd1.ca.comcast.net [71.202.159.51]
|
|
Mar 29 05:35:38 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45701
|
|
Mar 29 05:35:38 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:35:38 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:35:38 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:35:38 splunk3 spamd[16743]: spamd: processing message <200903291235.n2TCZbSx007889@splunk3.splunkit.com> for spamme:501
|
|
Mar 29 05:35:44 splunk3 spamd[16743]: spamd: identified spam (16.4/5.0) for spamme:501 in 6.3 seconds, 2328 bytes.
|
|
Mar 29 05:35:44 splunk3 spamd[16743]: spamd: result: Y 16 - BAYES_80,HELO_DYNAMIC_IPADDR,HTML_IMAGE_ONLY_20,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URI_NOVOWEL scantime=6.3,size=2328,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45701,mid=<200903291235.n2TCZbSx007889@splunk3.splunkit.com>,bayes=0.906479096416651,autolearn=no
|
|
Mar 29 05:35:44 splunk3 sendmail[7890]: n2TCZbSx007889: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:06, xdelay=00:00:06, mailer=local, pri=32251, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:35:44 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:36:08 splunk3 sendmail[8011]: n2TCa8HB008011: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:36:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:37:08 splunk3 sendmail[8257]: n2TCb8DJ008257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:38:08 splunk3 sendmail[8496]: n2TCc8qf008496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:38:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:39:08 splunk3 sendmail[8734]: n2TCd8IH008734: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:40:08 splunk3 sendmail[8985]: n2TCe8E5008985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:40:26 splunk3 sendmail[9044]: n2TCeQ4i009044: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291240.n2TCeQA6005505@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:40:26 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45755
|
|
Mar 29 05:40:26 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:40:27 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:40:27 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:40:27 splunk3 spamd[16743]: spamd: processing message <200903291240.n2TCeQA6005505@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:40:29 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 29 05:40:29 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45755,mid=<200903291240.n2TCeQA6005505@virt2.int.splunk.com>,bayes=0.169262627771622,autolearn=no
|
|
Mar 29 05:40:29 splunk3 sendmail[9057]: n2TCeQ4i009044: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:40:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:41:08 splunk3 sendmail[9227]: n2TCf8p5009227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 05:41:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:42:08 splunk3 sendmail[9467]: n2TCg88n009467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:43:08 splunk3 sendmail[9718]: n2TCh85i009718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:43:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:44:08 splunk3 sendmail[9957]: n2TCi8G7009957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:45:08 splunk3 sendmail[10205]: n2TCj88D010205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:45:27 splunk3 sendmail[10279]: n2TCjRuo010279: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291245.n2TCjReu006132@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:45:27 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45811
|
|
Mar 29 05:45:27 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:45:27 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:45:27 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:45:27 splunk3 spamd[16743]: spamd: processing message <200903291245.n2TCjReu006132@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:45:29 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 29 05:45:29 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45811,mid=<200903291245.n2TCjReu006132@virt2.int.splunk.com>,bayes=0.169262627771622,autolearn=no
|
|
Mar 29 05:45:29 splunk3 sendmail[10280]: n2TCjRuo010279: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:46:08 splunk3 sendmail[10445]: n2TCk8e8010445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:46:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:47:08 splunk3 sendmail[10692]: n2TCl8xP010692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:48:08 splunk3 sendmail[10924]: n2TCm8DE010924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:48:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:49:08 splunk3 sendmail[11165]: n2TCn87U011165: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:50:08 splunk3 sendmail[11416]: n2TCo8GA011416: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:50:28 splunk3 sendmail[11492]: n2TCoSAk011492: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291250.n2TCoS7w006730@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:50:28 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45867
|
|
Mar 29 05:50:28 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:50:28 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:50:28 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:50:28 splunk3 spamd[16743]: spamd: processing message <200903291250.n2TCoS7w006730@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:50:30 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Mar 29 05:50:30 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45867,mid=<200903291250.n2TCoS7w006730@virt2.int.splunk.com>,bayes=0.169262627771622,autolearn=no
|
|
Mar 29 05:50:30 splunk3 sendmail[11493]: n2TCoSAk011492: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:50:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:51:08 splunk3 sendmail[11662]: n2TCp8CK011662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:51:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:52:08 splunk3 sendmail[11902]: n2TCq85x011902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:53:08 splunk3 sendmail[12146]: n2TCr8gt012146: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:53:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:54:08 splunk3 sendmail[12384]: n2TCs8Zd012384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:55:08 splunk3 sendmail[12628]: n2TCt8jW012628: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:55:29 splunk3 sendmail[12703]: n2TCtT1E012703: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291255.n2TCtSpk007369@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 05:55:29 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45922
|
|
Mar 29 05:55:29 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 05:55:29 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 05:55:29 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 05:55:29 splunk3 spamd[16743]: spamd: processing message <200903291255.n2TCtSpk007369@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 05:55:31 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 29 05:55:31 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45922,mid=<200903291255.n2TCtSpk007369@virt2.int.splunk.com>,bayes=0.169262627771622,autolearn=no
|
|
Mar 29 05:55:31 splunk3 sendmail[12704]: n2TCtT1E012703: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 05:55:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 05:56:08 splunk3 sendmail[12867]: n2TCu8rl012867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 05:56:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 05:57:08 splunk3 sendmail[13113]: n2TCv8Ca013113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:58:08 splunk3 sendmail[13390]: n2TCw8Oc013390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 05:58:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 05:59:08 splunk3 sendmail[13630]: n2TCx8J1013630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:00:04 splunk3 sendmail[13908]: n2TD04tM013908: from=root, size=291, class=0, nrcpts=1, msgid=<200903291300.n2TD04tM013908@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 06:00:04 splunk3 sendmail[13912]: n2TD04uE013912: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903291300.n2TD04tM013908@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 06:00:04 splunk3 sendmail[13908]: n2TD04tM013908: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TD04uE013912 Message accepted for delivery)
|
|
Mar 29 06:00:05 splunk3 sendmail[13913]: n2TD04uE013912: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:00:06 splunk3 sendmail[13929]: n2TD06Wa013929: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903291300.n2TD06Wa013929@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 06:00:06 splunk3 sendmail[13931]: n2TD06Wa013929: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 06:00:06 splunk3 sendmail[13931]: n2TD06Wa013929: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 06:00:06 splunk3 sendmail[13931]: n2TD06Wa013929: n2TD06Wa013931: postmaster notify: User unknown
|
|
Mar 29 06:00:07 splunk3 sendmail[13931]: n2TD06Wa013931: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:00:08 splunk3 sendmail[13964]: n2TD08m1013964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:00:29 splunk3 sendmail[14041]: n2TD0TxH014041: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291300.n2TD0Tj8007985@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:00:29 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45987
|
|
Mar 29 06:00:29 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:00:29 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 06:00:29 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 06:00:29 splunk3 sendmail[14042]: n2TD0TxH014041: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:00:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:01:01 splunk3 sendmail[14184]: n2TD11Cm014184: from=root, size=443, class=0, nrcpts=1, msgid=<200903291301.n2TD11Cm014184@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 06:01:02 splunk3 sendmail[14187]: n2TD11Vl014187: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903291301.n2TD11Cm014184@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 06:01:02 splunk3 sendmail[14184]: n2TD11Cm014184: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TD11Vl014187 Message accepted for delivery)
|
|
Mar 29 06:01:03 splunk3 sendmail[14188]: n2TD11Vl014187: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:01:09 splunk3 sendmail[14223]: n2TD19eg014223: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:01:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:02:09 splunk3 sendmail[14459]: n2TD29HY014459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:03:09 splunk3 sendmail[14698]: n2TD39jq014698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:03:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:04:09 splunk3 sendmail[14938]: n2TD49VI014938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:05:00 splunk3 sendmail[15136]: n2TD508d015136: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291305.n2TD50Ac008594@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:05:00 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46032
|
|
Mar 29 06:05:00 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:05:00 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 06:05:00 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 06:05:00 splunk3 sendmail[15137]: n2TD508d015136: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:05:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:05:09 splunk3 sendmail[15192]: n2TD59eY015192: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:06:09 splunk3 sendmail[15425]: n2TD69b3015425: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:06:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:07:09 splunk3 sendmail[15672]: n2TD79Ad015672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:08:09 splunk3 sendmail[15912]: n2TD89Yd015912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:08:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:09:09 splunk3 sendmail[16152]: n2TD99Jj016152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:10:00 splunk3 sendmail[16342]: n2TDA0ad016342: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291310.n2TDA0GM009203@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:10:00 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46087
|
|
Mar 29 06:10:00 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:10:00 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 06:10:00 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 06:10:00 splunk3 sendmail[16343]: n2TDA0ad016342: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:10:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:10:02 splunk3 sendmail[16462]: n2TDA2ir016462: from=root, size=292, class=0, nrcpts=1, msgid=<200903291310.n2TDA2ir016462@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 06:10:02 splunk3 sendmail[16467]: n2TDA2Ju016467: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903291310.n2TDA2ir016462@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 06:10:02 splunk3 sendmail[16462]: n2TDA2ir016462: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TDA2Ju016467 Message accepted for delivery)
|
|
Mar 29 06:10:03 splunk3 sendmail[16468]: n2TDA2Ju016467: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:10:09 splunk3 sendmail[16508]: n2TDA9Ip016508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:11:09 splunk3 sendmail[16748]: n2TDB9iA016748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 06:11:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:12:09 splunk3 sendmail[16990]: n2TDC9a6016990: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:13:09 splunk3 sendmail[17229]: n2TDD9FT017229: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:13:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:14:09 splunk3 sendmail[17467]: n2TDE9uU017467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:15:01 splunk3 sendmail[17677]: n2TDF1Rv017677: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291315.n2TDF1Pa010003@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:15:01 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46145
|
|
Mar 29 06:15:01 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:15:01 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:15:01 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:15:01 splunk3 spamd[16743]: spamd: processing message <200903291315.n2TDF1Pa010003@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 06:15:03 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 06:15:03 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46145,mid=<200903291315.n2TDF1Pa010003@virt2.int.splunk.com>,bayes=0.112338140002087,autolearn=no
|
|
Mar 29 06:15:03 splunk3 sendmail[17678]: n2TDF1Rv017677: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:15:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:15:09 splunk3 sendmail[17722]: n2TDF9wO017722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:16:09 splunk3 sendmail[17955]: n2TDG9I1017955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:16:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:17:09 splunk3 sendmail[18198]: n2TDH9DT018198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:18:09 splunk3 sendmail[18435]: n2TDI9jU018435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:18:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:19:09 splunk3 sendmail[18677]: n2TDJ9Bm018677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:20:01 splunk3 sendmail[18894]: n2TDK1Q5018894: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291320.n2TDK198010653@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:20:01 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46200
|
|
Mar 29 06:20:01 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:20:01 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:20:01 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:20:01 splunk3 spamd[16743]: spamd: processing message <200903291320.n2TDK198010653@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 06:20:03 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 29 06:20:03 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46200,mid=<200903291320.n2TDK198010653@virt2.int.splunk.com>,bayes=0.112338140002087,autolearn=no
|
|
Mar 29 06:20:03 splunk3 sendmail[18895]: n2TDK1Q5018894: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:20:09 splunk3 sendmail[18933]: n2TDK9A8018933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:21:09 splunk3 sendmail[19173]: n2TDL9Gf019173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:21:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:22:09 splunk3 sendmail[19416]: n2TDM9MJ019416: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:23:09 splunk3 sendmail[19655]: n2TDN9Sb019655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:23:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:24:09 splunk3 sendmail[19893]: n2TDO9oY019893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:25:02 splunk3 sendmail[20107]: n2TDP27S020107: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291325.n2TDP13u011281@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:25:02 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46256
|
|
Mar 29 06:25:02 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:25:02 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:25:02 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:25:02 splunk3 spamd[16743]: spamd: processing message <200903291325.n2TDP13u011281@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 06:25:04 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 06:25:04 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46256,mid=<200903291325.n2TDP13u011281@virt2.int.splunk.com>,bayes=0.112338140002087,autolearn=no
|
|
Mar 29 06:25:04 splunk3 sendmail[20108]: n2TDP27S020107: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:25:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:25:09 splunk3 sendmail[20149]: n2TDP90O020149: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:26:09 splunk3 sendmail[20383]: n2TDQ9VG020383: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 06:26:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:27:09 splunk3 sendmail[20630]: n2TDR9P3020630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:28:09 splunk3 sendmail[20867]: n2TDS9W9020867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:28:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:29:09 splunk3 sendmail[21108]: n2TDT9mR021108: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:30:03 splunk3 sendmail[21319]: n2TDU3JY021319: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291330.n2TDU2Bk011904@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:30:03 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46312
|
|
Mar 29 06:30:03 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:30:03 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:30:03 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:30:03 splunk3 spamd[16743]: spamd: processing message <200903291330.n2TDU2Bk011904@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 06:30:05 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 06:30:05 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46312,mid=<200903291330.n2TDU2Bk011904@virt2.int.splunk.com>,bayes=0.112338140002087,autolearn=no
|
|
Mar 29 06:30:05 splunk3 sendmail[21320]: n2TDU3JY021319: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:30:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:30:09 splunk3 sendmail[21359]: n2TDU9Ch021359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:31:09 splunk3 sendmail[21597]: n2TDV9BM021597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:31:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:32:09 splunk3 sendmail[21838]: n2TDW9UD021838: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:33:09 splunk3 sendmail[22077]: n2TDX9XE022077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:33:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:33:42 splunk3 sendmail[22219]: n2TDXfV7022219: from=<3tXjPSRQKBkcpxxpunjun021-wx0nyu7pxxpun.lxv1yjvvn1yu3wtr2.lxv@alerts.bounces.google.com>, size=5666, class=0, nrcpts=1, msgid=<0015175768349ce8b00466420377@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 29 06:33:42 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46356
|
|
Mar 29 06:33:42 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:33:42 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:33:42 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:33:42 splunk3 spamd[16743]: spamd: processing message <0015175768349ce8b00466420377@google.com> for spamme:501
|
|
Mar 29 06:33:44 splunk3 spamd[16743]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.2 seconds, 6101 bytes.
|
|
Mar 29 06:33:44 splunk3 spamd[16743]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.2,size=6101,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46356,mid=<0015175768349ce8b00466420377@google.com>,bayes=0,autolearn=ham
|
|
Mar 29 06:33:44 splunk3 sendmail[22220]: n2TDXfV7022219: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=35882, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:33:44 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:34:09 splunk3 sendmail[22320]: n2TDY96r022320: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:35:03 splunk3 sendmail[22535]: n2TDZ3rA022535: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291335.n2TDZ3BD012653@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:35:03 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46369
|
|
Mar 29 06:35:03 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:35:03 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:35:03 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:35:03 splunk3 spamd[16743]: spamd: processing message <200903291335.n2TDZ3BD012653@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 06:35:05 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 06:35:05 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46369,mid=<200903291335.n2TDZ3BD012653@virt2.int.splunk.com>,bayes=0.112361487772571,autolearn=no
|
|
Mar 29 06:35:05 splunk3 sendmail[22536]: n2TDZ3rA022535: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:35:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:35:09 splunk3 sendmail[22566]: n2TDZ9nx022566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:36:09 splunk3 sendmail[22811]: n2TDa9p3022811: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:36:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:37:09 splunk3 sendmail[23053]: n2TDb9F8023053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:38:09 splunk3 sendmail[23292]: n2TDc9pK023292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:38:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:39:09 splunk3 sendmail[23535]: n2TDd9lX023535: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:40:04 splunk3 sendmail[23754]: n2TDe4h5023754: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291340.n2TDe3lZ013286@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:40:04 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46425
|
|
Mar 29 06:40:04 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:40:04 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:40:04 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:40:04 splunk3 spamd[16743]: spamd: processing message <200903291340.n2TDe3lZ013286@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 06:40:06 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 06:40:06 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46425,mid=<200903291340.n2TDe3lZ013286@virt2.int.splunk.com>,bayes=0.112361487772571,autolearn=no
|
|
Mar 29 06:40:06 splunk3 sendmail[23755]: n2TDe4h5023754: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:40:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:40:09 splunk3 sendmail[23782]: n2TDe9nj023782: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:41:09 splunk3 sendmail[24030]: n2TDf9pQ024030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 06:41:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:42:09 splunk3 sendmail[24272]: n2TDg9uY024272: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:43:09 splunk3 sendmail[24513]: n2TDh9L7024513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:43:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:44:09 splunk3 sendmail[24746]: n2TDi93E024746: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:45:04 splunk3 sendmail[24963]: n2TDj48V024963: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291345.n2TDj4Fh013897@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:45:04 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46481
|
|
Mar 29 06:45:04 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:45:04 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:45:04 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:45:04 splunk3 spamd[16743]: spamd: processing message <200903291345.n2TDj4Fh013897@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 06:45:06 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 06:45:06 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46481,mid=<200903291345.n2TDj4Fh013897@virt2.int.splunk.com>,bayes=0.112361487772571,autolearn=no
|
|
Mar 29 06:45:06 splunk3 sendmail[24964]: n2TDj48V024963: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:45:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:45:09 splunk3 sendmail[24989]: n2TDj9VG024989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:46:09 splunk3 sendmail[25235]: n2TDk95l025235: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:46:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:47:09 splunk3 sendmail[25478]: n2TDl9Gh025478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:48:09 splunk3 sendmail[25714]: n2TDm9xr025714: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:48:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:49:09 splunk3 sendmail[25959]: n2TDn9uM025959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:50:05 splunk3 sendmail[26174]: n2TDo5OB026174: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291350.n2TDo4JS014505@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:50:05 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46537
|
|
Mar 29 06:50:05 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:50:05 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:50:05 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:50:05 splunk3 spamd[16743]: spamd: processing message <200903291350.n2TDo4JS014505@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 06:50:07 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 06:50:07 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46537,mid=<200903291350.n2TDo4JS014505@virt2.int.splunk.com>,bayes=0.112361487772571,autolearn=no
|
|
Mar 29 06:50:07 splunk3 sendmail[26175]: n2TDo5OB026174: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:50:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:50:09 splunk3 sendmail[26207]: n2TDo90H026207: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:51:09 splunk3 sendmail[26451]: n2TDp9DU026451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:51:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:52:09 splunk3 sendmail[26692]: n2TDq9nE026692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:53:09 splunk3 sendmail[26937]: n2TDr9II026937: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:53:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:54:09 splunk3 sendmail[27174]: n2TDs91v027174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:55:05 splunk3 sendmail[27393]: n2TDt5sf027393: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291355.n2TDt5LR015121@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 06:55:05 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46592
|
|
Mar 29 06:55:05 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:55:05 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:55:05 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:55:05 splunk3 spamd[16743]: spamd: processing message <200903291355.n2TDt5LR015121@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 06:55:07 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 06:55:07 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46592,mid=<200903291355.n2TDt5LR015121@virt2.int.splunk.com>,bayes=0.112361487772571,autolearn=no
|
|
Mar 29 06:55:07 splunk3 sendmail[27395]: n2TDt5sf027393: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:55:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 06:55:09 splunk3 sendmail[27420]: n2TDt9Gr027420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:56:09 splunk3 sendmail[27665]: n2TDu9DJ027665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 06:56:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 06:57:09 splunk3 sendmail[27912]: n2TDv9Os027912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:58:09 splunk3 sendmail[28144]: n2TDw9o7028144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:58:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 06:59:09 splunk3 sendmail[28384]: n2TDx9Vl028384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 06:59:45 splunk3 sendmail[28361]: n2TDx2UJ028361: from=<shidanc@zdnetasia.com>, size=5787, class=0, nrcpts=1, msgid=<521d019dc067$52e8d7f3$821722ad@zdnetasia.com>, proto=ESMTP, daemon=MTA, relay=[77.64.80.133]
|
|
Mar 29 06:59:45 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46646
|
|
Mar 29 06:59:45 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 06:59:45 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 06:59:45 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 06:59:45 splunk3 spamd[16743]: spamd: processing message <521d019dc067$52e8d7f3$821722ad@zdnetasia.com> for spamme:501
|
|
Mar 29 06:59:47 splunk3 spamd[16743]: spamd: identified spam (35.7/5.0) for spamme:501 in 2.8 seconds, 6063 bytes.
|
|
Mar 29 06:59:47 splunk3 spamd[16743]: spamd: result: Y 35 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL scantime=2.8,size=6063,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46646,mid=<521d019dc067$52e8d7f3$821722ad@zdnetasia.com>,bayes=1,autolearn=spam
|
|
Mar 29 06:59:47 splunk3 sendmail[28523]: n2TDx2UJ028361: to=<spamme@splunkit.com>, delay=00:00:09, xdelay=00:00:02, mailer=local, pri=35968, dsn=2.0.0, stat=Sent
|
|
Mar 29 06:59:47 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:00:04 splunk3 sendmail[28667]: n2TE04w1028667: from=root, size=291, class=0, nrcpts=1, msgid=<200903291400.n2TE04w1028667@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 07:00:04 splunk3 sendmail[28671]: n2TE04T9028671: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903291400.n2TE04w1028667@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 07:00:04 splunk3 sendmail[28667]: n2TE04w1028667: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TE04T9028671 Message accepted for delivery)
|
|
Mar 29 07:00:05 splunk3 sendmail[28672]: n2TE04T9028671: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:00:06 splunk3 sendmail[28697]: n2TE056A028697: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291400.n2TE051W015756@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:00:06 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46651
|
|
Mar 29 07:00:06 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:00:06 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 07:00:06 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 07:00:06 splunk3 sendmail[28698]: n2TE056A028697: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:00:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:00:09 splunk3 sendmail[28704]: n2TE098g028704: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:00:11 splunk3 sendmail[28733]: n2TE0BU9028733: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903291400.n2TE0BU9028733@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 07:00:11 splunk3 sendmail[28735]: n2TE0BU9028733: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 07:00:11 splunk3 sendmail[28735]: n2TE0BU9028733: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 07:00:11 splunk3 sendmail[28735]: n2TE0BU9028733: n2TE0BU9028735: postmaster notify: User unknown
|
|
Mar 29 07:00:13 splunk3 sendmail[28735]: n2TE0BU9028735: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:01:09 splunk3 sendmail[28974]: n2TE19vU028974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:01:10 splunk3 sendmail[28949]: n2TE113g028949: from=root, size=443, class=0, nrcpts=1, msgid=<200903291401.n2TE113g028949@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 07:01:10 splunk3 sendmail[28976]: n2TE1Ag7028976: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903291401.n2TE113g028949@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 07:01:10 splunk3 sendmail[28949]: n2TE113g028949: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TE1Ag7028976 Message accepted for delivery)
|
|
Mar 29 07:01:12 splunk3 sendmail[28977]: n2TE1Ag7028976: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:01:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:02:09 splunk3 sendmail[29217]: n2TE29DE029217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:03:09 splunk3 sendmail[29457]: n2TE39X7029457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:03:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:04:09 splunk3 sendmail[29695]: n2TE49XX029695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:05:06 splunk3 sendmail[29926]: n2TE56te029926: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291405.n2TE56pB016441@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:05:06 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46714
|
|
Mar 29 07:05:06 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:05:06 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 07:05:06 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 07:05:06 splunk3 sendmail[29927]: n2TE56te029926: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:05:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:05:09 splunk3 sendmail[29933]: n2TE59sF029933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:06:09 splunk3 sendmail[30176]: n2TE69Md030176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:06:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:07:09 splunk3 sendmail[30422]: n2TE794C030422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:08:09 splunk3 sendmail[30663]: n2TE89PV030663: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:08:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:09:09 splunk3 sendmail[30905]: n2TE99SR030905: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:10:02 splunk3 sendmail[31214]: n2TEA29V031214: from=root, size=292, class=0, nrcpts=1, msgid=<200903291410.n2TEA29V031214@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 07:10:02 splunk3 sendmail[31219]: n2TEA2Kt031219: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903291410.n2TEA29V031214@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 07:10:02 splunk3 sendmail[31214]: n2TEA29V031214: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TEA2Kt031219 Message accepted for delivery)
|
|
Mar 29 07:10:03 splunk3 sendmail[31220]: n2TEA2Kt031219: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:10:06 splunk3 sendmail[31252]: n2TEA6BG031252: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291410.n2TEA6w1017054@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:10:06 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46771
|
|
Mar 29 07:10:06 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:10:06 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:10:06 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:10:06 splunk3 spamd[16743]: spamd: processing message <200903291410.n2TEA6w1017054@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:10:08 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 07:10:08 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46771,mid=<200903291410.n2TEA6w1017054@virt2.int.splunk.com>,bayes=0.112357007935519,autolearn=no
|
|
Mar 29 07:10:08 splunk3 sendmail[31253]: n2TEA6BG031252: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:10:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:10:09 splunk3 sendmail[31258]: n2TEA9Af031258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:11:09 splunk3 sendmail[31507]: n2TEB9Uw031507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 07:11:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:12:09 splunk3 sendmail[31744]: n2TEC9vP031744: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:13:09 splunk3 sendmail[31984]: n2TED9OB031984: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:13:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:14:09 splunk3 sendmail[32223]: n2TEE965032223: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:15:07 splunk3 sendmail[32459]: n2TEF7Fi032459: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291415.n2TEF76C017857@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:15:07 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46827
|
|
Mar 29 07:15:07 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:15:07 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:15:07 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:15:07 splunk3 spamd[16743]: spamd: processing message <200903291415.n2TEF76C017857@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:15:09 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 07:15:09 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46827,mid=<200903291415.n2TEF76C017857@virt2.int.splunk.com>,bayes=0.112357007935519,autolearn=no
|
|
Mar 29 07:15:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:15:09 splunk3 sendmail[32460]: n2TEF7Fi032459: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:15:09 splunk3 sendmail[32468]: n2TEF9C1032468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:16:09 splunk3 sendmail[32710]: n2TEG90k032710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:16:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:17:09 splunk3 sendmail[489]: n2TEH9Wb000489: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:18:09 splunk3 sendmail[725]: n2TEI9PK000725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:18:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:19:09 splunk3 sendmail[963]: n2TEJ9Pe000963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:20:08 splunk3 sendmail[1202]: n2TEK8Mj001202: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291420.n2TEK86m018489@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:20:08 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46883
|
|
Mar 29 07:20:08 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:20:08 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:20:08 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:20:08 splunk3 spamd[16743]: spamd: processing message <200903291420.n2TEK86m018489@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:20:09 splunk3 sendmail[1208]: n2TEK9fV001208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:20:10 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 07:20:10 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46883,mid=<200903291420.n2TEK86m018489@virt2.int.splunk.com>,bayes=0.112357007935519,autolearn=no
|
|
Mar 29 07:20:10 splunk3 sendmail[1203]: n2TEK8Mj001202: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:20:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:21:09 splunk3 sendmail[1457]: n2TEL9hK001457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:21:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:22:09 splunk3 sendmail[1700]: n2TEM9bk001700: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:23:09 splunk3 sendmail[1943]: n2TEN9lf001943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:23:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:24:09 splunk3 sendmail[2183]: n2TEO9q2002183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:25:09 splunk3 sendmail[2424]: n2TEP97u002424: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291425.n2TEP8GB019094@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:25:09 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46939
|
|
Mar 29 07:25:09 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:25:09 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:25:09 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:25:09 splunk3 spamd[16743]: spamd: processing message <200903291425.n2TEP8GB019094@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:25:09 splunk3 sendmail[2430]: n2TEP9jC002430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:25:11 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 07:25:11 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46939,mid=<200903291425.n2TEP8GB019094@virt2.int.splunk.com>,bayes=0.112357007935519,autolearn=no
|
|
Mar 29 07:25:11 splunk3 sendmail[2425]: n2TEP97u002424: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:25:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:26:09 splunk3 sendmail[2677]: n2TEQ9YA002677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 07:26:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:27:09 splunk3 sendmail[2932]: n2TER972002932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:28:09 splunk3 sendmail[3180]: n2TES94B003180: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:28:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:29:09 splunk3 sendmail[3423]: n2TET97h003423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:30:09 splunk3 sendmail[3684]: n2TEU92h003684: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291430.n2TEU9xv019716@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:30:09 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46995
|
|
Mar 29 07:30:09 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:30:09 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:30:09 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:30:09 splunk3 spamd[16743]: spamd: processing message <200903291430.n2TEU9xv019716@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:30:09 splunk3 sendmail[3691]: n2TEU9wQ003691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:30:11 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 07:30:11 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46995,mid=<200903291430.n2TEU9xv019716@virt2.int.splunk.com>,bayes=0.112357007935519,autolearn=no
|
|
Mar 29 07:30:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:30:11 splunk3 sendmail[3686]: n2TEU92h003684: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:31:09 splunk3 sendmail[3949]: n2TEV9GF003949: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:31:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:32:09 splunk3 sendmail[4206]: n2TEW9ql004206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:33:09 splunk3 sendmail[4454]: n2TEX99n004454: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:33:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:34:09 splunk3 sendmail[4693]: n2TEY9ig004693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:35:09 splunk3 sendmail[4943]: n2TEZ9xY004943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:35:10 splunk3 sendmail[4952]: n2TEZAL5004952: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291435.n2TEZ9Ke020462@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:35:10 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47051
|
|
Mar 29 07:35:10 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:35:10 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:35:10 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:35:10 splunk3 spamd[16743]: spamd: processing message <200903291435.n2TEZ9Ke020462@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:35:12 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 07:35:12 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47051,mid=<200903291435.n2TEZ9Ke020462@virt2.int.splunk.com>,bayes=0.112357007935519,autolearn=no
|
|
Mar 29 07:35:12 splunk3 sendmail[4961]: n2TEZAL5004952: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:35:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:36:09 splunk3 sendmail[5229]: n2TEa9tN005229: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:36:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:37:09 splunk3 sendmail[5477]: n2TEb9UW005477: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:38:09 splunk3 sendmail[5717]: n2TEc94N005717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:38:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:39:09 splunk3 sendmail[5960]: n2TEd95Q005960: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:40:09 splunk3 sendmail[6198]: n2TEe9ab006198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:40:10 splunk3 sendmail[6215]: n2TEeAK7006215: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291440.n2TEeAdo021097@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:40:10 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47106
|
|
Mar 29 07:40:10 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:40:10 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:40:10 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:40:10 splunk3 spamd[16743]: spamd: processing message <200903291440.n2TEeAdo021097@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:40:12 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1311 bytes.
|
|
Mar 29 07:40:12 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47106,mid=<200903291440.n2TEeAdo021097@virt2.int.splunk.com>,bayes=0.112357007935519,autolearn=no
|
|
Mar 29 07:40:12 splunk3 sendmail[6216]: n2TEeAK7006215: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:40:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:41:09 splunk3 sendmail[6451]: n2TEf9HR006451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 07:41:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:42:09 splunk3 sendmail[6693]: n2TEg9NF006693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:43:09 splunk3 sendmail[6934]: n2TEh9qi006934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:43:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:44:09 splunk3 sendmail[7171]: n2TEi9Se007171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:45:09 splunk3 sendmail[7412]: n2TEj9Ym007412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:45:11 splunk3 sendmail[7429]: n2TEjB1L007429: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291445.n2TEjBSI021705@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:45:11 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47163
|
|
Mar 29 07:45:11 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:45:11 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:45:11 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:45:11 splunk3 spamd[16743]: spamd: processing message <200903291445.n2TEjBSI021705@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:45:13 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 07:45:13 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47163,mid=<200903291445.n2TEjBSI021705@virt2.int.splunk.com>,bayes=0.112357007935519,autolearn=no
|
|
Mar 29 07:45:13 splunk3 sendmail[7430]: n2TEjB1L007429: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:45:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:46:09 splunk3 sendmail[7674]: n2TEk9AB007674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:46:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:46:57 splunk3 sendmail[7852]: n2TEkqI8007852: from=<spamoliviergoedgebeur@yahoo.fr>, size=6424, class=0, nrcpts=1, msgid=<20090329094657.2625.qmail@net210.255.92-229.kzn.ertelecom.ru>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=net210.255.92-229.kzn.ertelecom.ru [92.255.210.229] (may be forged)
|
|
Mar 29 07:46:57 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47188
|
|
Mar 29 07:46:57 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:46:57 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:46:57 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:46:57 splunk3 spamd[16743]: spamd: processing message <20090329094657.2625.qmail@net210.255.92-229.kzn.ertelecom.ru> for spamme:501
|
|
Mar 29 07:47:00 splunk3 spamd[16743]: spamd: identified spam (26.5/5.0) for spamme:501 in 2.8 seconds, 6762 bytes.
|
|
Mar 29 07:47:00 splunk3 spamd[16743]: spamd: result: Y 26 - AWL,BAYES_99,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST,DRUGS_ERECTILE,DRUG_ED_CAPS,HELO_DYNAMIC_IPADDR,HTML_90_100,HTML_FONT_FACE_BAD,HTML_MESSAGE,MIME_HTML_ONLY,NO_REAL_NAME,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.8,size=6762,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47188,mid=<20090329094657.2625.qmail@net210.255.92-229.kzn.ertelecom.ru>,bayes=1,autolearn=spam
|
|
Mar 29 07:47:00 splunk3 sendmail[7873]: n2TEkqI8007852: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:03, mailer=local, pri=36716, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:47:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:47:09 splunk3 sendmail[7919]: n2TEl9P0007919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:48:09 splunk3 sendmail[8154]: n2TEm9vr008154: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:48:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:49:09 splunk3 sendmail[8397]: n2TEn9u2008397: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:50:09 splunk3 sendmail[8637]: n2TEo9Wu008637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:50:13 splunk3 sendmail[8655]: n2TEoDSv008655: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291450.n2TEoBws022319@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:50:13 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47220
|
|
Mar 29 07:50:13 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:50:13 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:50:13 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:50:13 splunk3 spamd[16743]: spamd: processing message <200903291450.n2TEoBws022319@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:50:15 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 07:50:15 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47220,mid=<200903291450.n2TEoBws022319@virt2.int.splunk.com>,bayes=0.112349538254616,autolearn=no
|
|
Mar 29 07:50:15 splunk3 sendmail[8656]: n2TEoDSv008655: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:50:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:51:09 splunk3 sendmail[8889]: n2TEp9G4008889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:51:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:52:09 splunk3 sendmail[9131]: n2TEq9dw009131: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:53:09 splunk3 sendmail[9374]: n2TEr9X8009374: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:53:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:54:09 splunk3 sendmail[9617]: n2TEs99e009617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:55:09 splunk3 sendmail[9856]: n2TEt9SX009856: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:55:14 splunk3 sendmail[9877]: n2TEtEHR009877: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291455.n2TEtEAr022933@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 07:55:15 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47275
|
|
Mar 29 07:55:15 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 07:55:15 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 07:55:15 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 07:55:15 splunk3 spamd[16743]: spamd: processing message <200903291455.n2TEtEAr022933@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 07:55:17 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 07:55:17 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47275,mid=<200903291455.n2TEtEAr022933@virt2.int.splunk.com>,bayes=0.112349538254616,autolearn=no
|
|
Mar 29 07:55:17 splunk3 sendmail[9879]: n2TEtEHR009877: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 07:55:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 07:56:09 splunk3 sendmail[10107]: n2TEu9Pt010107: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 07:56:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 07:57:09 splunk3 sendmail[10352]: n2TEv97C010352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:58:09 splunk3 sendmail[10604]: n2TEw9RG010604: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 07:58:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 07:59:09 splunk3 sendmail[10847]: n2TEx9uT010847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:00:04 splunk3 sendmail[11107]: n2TF04fb011107: from=root, size=291, class=0, nrcpts=1, msgid=<200903291500.n2TF04fb011107@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 08:00:04 splunk3 sendmail[11111]: n2TF046k011111: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903291500.n2TF04fb011107@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 08:00:04 splunk3 sendmail[11107]: n2TF04fb011107: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TF046k011111 Message accepted for delivery)
|
|
Mar 29 08:00:05 splunk3 sendmail[11112]: n2TF046k011111: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:00:09 splunk3 sendmail[11157]: n2TF09YE011157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:00:15 splunk3 sendmail[11176]: n2TF0Fpq011176: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291500.n2TF0EfM023599@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:00:15 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47333
|
|
Mar 29 08:00:15 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:00:15 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 08:00:15 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 08:00:15 splunk3 sendmail[11177]: n2TF0Fpq011176: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:00:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:00:17 splunk3 sendmail[11194]: n2TF0HNB011194: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903291500.n2TF0HNB011194@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 08:00:17 splunk3 sendmail[11196]: n2TF0HNB011194: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 08:00:17 splunk3 sendmail[11196]: n2TF0HNB011194: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 08:00:17 splunk3 sendmail[11196]: n2TF0HNB011194: n2TF0HNB011196: postmaster notify: User unknown
|
|
Mar 29 08:00:18 splunk3 sendmail[11196]: n2TF0HNB011196: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:01:02 splunk3 sendmail[11390]: n2TF11hw011390: from=root, size=443, class=0, nrcpts=1, msgid=<200903291501.n2TF11hw011390@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 08:01:02 splunk3 sendmail[11393]: n2TF12cb011393: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903291501.n2TF11hw011390@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 08:01:02 splunk3 sendmail[11390]: n2TF11hw011390: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TF12cb011393 Message accepted for delivery)
|
|
Mar 29 08:01:03 splunk3 sendmail[11394]: n2TF12cb011393: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:01:09 splunk3 sendmail[11433]: n2TF19hA011433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:01:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:02:09 splunk3 sendmail[11676]: n2TF29je011676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:03:09 splunk3 sendmail[11918]: n2TF39ia011918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:03:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:04:09 splunk3 sendmail[12157]: n2TF490c012157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:05:09 splunk3 sendmail[12395]: n2TF598u012395: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:05:15 splunk3 sendmail[12415]: n2TF5FbK012415: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291505.n2TF5FUp024288@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:05:15 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47396
|
|
Mar 29 08:05:15 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:05:15 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 08:05:15 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 08:05:15 splunk3 sendmail[12416]: n2TF5FbK012415: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:06:09 splunk3 sendmail[12645]: n2TF69TI012645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:06:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:07:09 splunk3 sendmail[12888]: n2TF79hi012888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:08:09 splunk3 sendmail[13125]: n2TF89OY013125: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:08:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:09:09 splunk3 sendmail[13406]: n2TF99PL013406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:10:02 splunk3 sendmail[13702]: n2TFA2TS013702: from=root, size=292, class=0, nrcpts=1, msgid=<200903291510.n2TFA2TS013702@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 08:10:02 splunk3 sendmail[13707]: n2TFA2li013707: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903291510.n2TFA2TS013702@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 08:10:02 splunk3 sendmail[13702]: n2TFA2TS013702: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TFA2li013707 Message accepted for delivery)
|
|
Mar 29 08:10:03 splunk3 sendmail[13708]: n2TFA2li013707: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:10:09 splunk3 sendmail[13752]: n2TFA9nY013752: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:10:16 splunk3 sendmail[13771]: n2TFAGNE013771: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291510.n2TFAFe4024897@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:10:16 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47453
|
|
Mar 29 08:10:16 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:10:16 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:10:16 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:10:16 splunk3 spamd[16743]: spamd: processing message <200903291510.n2TFAFe4024897@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:10:18 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 08:10:18 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47453,mid=<200903291510.n2TFAFe4024897@virt2.int.splunk.com>,bayes=0.112349538254616,autolearn=no
|
|
Mar 29 08:10:18 splunk3 sendmail[13772]: n2TFAGNE013771: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:11:09 splunk3 sendmail[14006]: n2TFB9hk014006: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 08:11:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:12:09 splunk3 sendmail[14247]: n2TFC98M014247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:13:09 splunk3 sendmail[14489]: n2TFD9c3014489: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:13:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:14:10 splunk3 sendmail[14726]: n2TFEAjh014726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:15:10 splunk3 sendmail[14962]: n2TFFAYC014962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:15:16 splunk3 sendmail[14985]: n2TFFGBC014985: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291515.n2TFFGbK025698@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:15:16 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47509
|
|
Mar 29 08:15:16 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:15:16 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:15:16 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:15:16 splunk3 spamd[16743]: spamd: processing message <200903291515.n2TFFGbK025698@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:15:18 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 29 08:15:18 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47509,mid=<200903291515.n2TFFGbK025698@virt2.int.splunk.com>,bayes=0.112349538254616,autolearn=no
|
|
Mar 29 08:15:18 splunk3 sendmail[14986]: n2TFFGBC014985: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:15:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:16:10 splunk3 sendmail[15213]: n2TFGAtN015213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:16:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:17:10 splunk3 sendmail[15458]: n2TFHAmc015458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:18:10 splunk3 sendmail[15693]: n2TFIAEV015693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:18:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:19:10 splunk3 sendmail[15935]: n2TFJALI015935: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:20:10 splunk3 sendmail[16177]: n2TFKAto016177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:20:17 splunk3 sendmail[16197]: n2TFKHfl016197: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291520.n2TFKHBl026331@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:20:17 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47565
|
|
Mar 29 08:20:17 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:20:17 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:20:17 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:20:17 splunk3 spamd[16743]: spamd: processing message <200903291520.n2TFKHBl026331@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:20:19 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 08:20:19 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47565,mid=<200903291520.n2TFKHBl026331@virt2.int.splunk.com>,bayes=0.112349538254616,autolearn=no
|
|
Mar 29 08:20:19 splunk3 sendmail[16198]: n2TFKHfl016197: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:20:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:21:10 splunk3 sendmail[16431]: n2TFLAHl016431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:21:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:22:10 splunk3 sendmail[16668]: n2TFMA2b016668: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:23:10 splunk3 sendmail[16912]: n2TFNA1r016912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:23:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:24:10 splunk3 sendmail[17151]: n2TFOAtV017151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:25:10 splunk3 sendmail[17390]: n2TFPABe017390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:25:18 splunk3 sendmail[17409]: n2TFPIeU017409: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291525.n2TFPIm2026937@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:25:18 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47621
|
|
Mar 29 08:25:18 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:25:18 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:25:18 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:25:18 splunk3 spamd[16743]: spamd: processing message <200903291525.n2TFPIm2026937@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:25:20 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 08:25:20 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47621,mid=<200903291525.n2TFPIm2026937@virt2.int.splunk.com>,bayes=0.112349538254616,autolearn=no
|
|
Mar 29 08:25:20 splunk3 sendmail[17410]: n2TFPIeU017409: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:25:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:26:10 splunk3 sendmail[17639]: n2TFQAcf017639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 08:26:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:27:10 splunk3 sendmail[17884]: n2TFRAvK017884: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:28:10 splunk3 sendmail[18120]: n2TFSAAw018120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:28:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:29:10 splunk3 sendmail[18359]: n2TFTAPB018359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:30:10 splunk3 sendmail[18600]: n2TFUAq8018600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:30:19 splunk3 sendmail[18624]: n2TFUJYB018624: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291530.n2TFUIEx027557@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:30:19 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47677
|
|
Mar 29 08:30:19 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:30:19 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:30:19 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:30:19 splunk3 spamd[16743]: spamd: processing message <200903291530.n2TFUIEx027557@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:30:21 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 08:30:21 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47677,mid=<200903291530.n2TFUIEx027557@virt2.int.splunk.com>,bayes=0.112349538254616,autolearn=no
|
|
Mar 29 08:30:21 splunk3 sendmail[18641]: n2TFUJYB018624: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:30:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:31:10 splunk3 sendmail[18856]: n2TFVAeL018856: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:31:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:32:10 splunk3 sendmail[19096]: n2TFWALi019096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:33:10 splunk3 sendmail[19335]: n2TFXAwj019335: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:33:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:34:10 splunk3 sendmail[19575]: n2TFYA5h019575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:35:10 splunk3 sendmail[19814]: n2TFZA9S019814: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:35:19 splunk3 sendmail[19852]: n2TFZJYB019852: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291535.n2TFZJut028298@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:35:19 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47733
|
|
Mar 29 08:35:19 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:35:19 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:35:19 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:35:19 splunk3 spamd[16743]: spamd: processing message <200903291535.n2TFZJut028298@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:35:21 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 08:35:21 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47733,mid=<200903291535.n2TFZJut028298@virt2.int.splunk.com>,bayes=0.112349538254616,autolearn=no
|
|
Mar 29 08:35:21 splunk3 sendmail[19853]: n2TFZJYB019852: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:35:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:36:10 splunk3 sendmail[20061]: n2TFaAEn020061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:36:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:37:10 splunk3 sendmail[20306]: n2TFbAd7020306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:38:10 splunk3 sendmail[20548]: n2TFcASP020548: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:38:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:39:10 splunk3 sendmail[20790]: n2TFdAqr020790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:40:10 splunk3 sendmail[21031]: n2TFeAOo021031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:40:20 splunk3 sendmail[21067]: n2TFeKmT021067: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291540.n2TFeJwe028939@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:40:20 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47788
|
|
Mar 29 08:40:20 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:40:20 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:40:20 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:40:20 splunk3 spamd[16743]: spamd: processing message <200903291540.n2TFeJwe028939@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:40:22 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 08:40:22 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47788,mid=<200903291540.n2TFeJwe028939@virt2.int.splunk.com>,bayes=0.112349538254616,autolearn=no
|
|
Mar 29 08:40:22 splunk3 sendmail[21068]: n2TFeKmT021067: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:40:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:41:10 splunk3 sendmail[21284]: n2TFfAnv021284: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 08:41:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:42:10 splunk3 sendmail[21523]: n2TFgA65021523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:43:07 splunk3 sendmail[21744]: n2TFh7b7021744: from=<3CpfPSRQKBrolttlqjfqjwyx-stwjuq3lttlqj.htrxufrrjxuqzspny.htr@alerts.bounces.google.com>, size=5223, class=0, nrcpts=1, msgid=<00151750d9b87a6c1e046643d2d1@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 29 08:43:07 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47824
|
|
Mar 29 08:43:07 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:43:07 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:43:07 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:43:07 splunk3 spamd[16743]: spamd: processing message <00151750d9b87a6c1e046643d2d1@google.com> for spamme:501
|
|
Mar 29 08:43:09 splunk3 spamd[16743]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.2 seconds, 5658 bytes.
|
|
Mar 29 08:43:09 splunk3 spamd[16743]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.2,size=5658,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47824,mid=<00151750d9b87a6c1e046643d2d1@google.com>,bayes=0,autolearn=ham
|
|
Mar 29 08:43:09 splunk3 sendmail[21745]: n2TFh7b7021744: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=35439, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:43:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:43:10 splunk3 sendmail[21767]: n2TFhA4S021767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:43:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:44:10 splunk3 sendmail[22006]: n2TFiADF022006: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:45:10 splunk3 sendmail[22246]: n2TFjAWw022246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:45:20 splunk3 sendmail[22286]: n2TFjKW7022286: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291545.n2TFjKVL029548@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:45:20 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47846
|
|
Mar 29 08:45:20 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:45:20 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:45:20 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:45:20 splunk3 spamd[16743]: spamd: processing message <200903291545.n2TFjKVL029548@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:45:22 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 08:45:22 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47846,mid=<200903291545.n2TFjKVL029548@virt2.int.splunk.com>,bayes=0.112381906642135,autolearn=no
|
|
Mar 29 08:45:22 splunk3 sendmail[22288]: n2TFjKW7022286: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:45:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:46:10 splunk3 sendmail[22498]: n2TFkAGs022498: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:46:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:47:10 splunk3 sendmail[22740]: n2TFlALR022740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:48:10 splunk3 sendmail[22977]: n2TFmAY1022977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:48:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:49:10 splunk3 sendmail[23221]: n2TFnACP023221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:50:10 splunk3 sendmail[23457]: n2TFoAIx023457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:50:21 splunk3 sendmail[23498]: n2TFoL0N023498: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291550.n2TFoKMV030166@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:50:21 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47901
|
|
Mar 29 08:50:21 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:50:21 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:50:21 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:50:21 splunk3 spamd[16743]: spamd: processing message <200903291550.n2TFoKMV030166@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:50:23 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 08:50:23 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47901,mid=<200903291550.n2TFoKMV030166@virt2.int.splunk.com>,bayes=0.112381906642135,autolearn=no
|
|
Mar 29 08:50:23 splunk3 sendmail[23499]: n2TFoL0N023498: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:50:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:51:10 splunk3 sendmail[23711]: n2TFpAaw023711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:51:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:52:10 splunk3 sendmail[23953]: n2TFqAGJ023953: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:53:10 splunk3 sendmail[24197]: n2TFrABM024197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:53:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:54:10 splunk3 sendmail[24434]: n2TFsAm2024434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:55:10 splunk3 sendmail[24674]: n2TFtAsK024674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:55:21 splunk3 sendmail[24710]: n2TFtLVP024710: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291555.n2TFtLrf030775@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 08:55:21 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47957
|
|
Mar 29 08:55:21 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:55:21 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:55:21 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:55:21 splunk3 spamd[16743]: spamd: processing message <200903291555.n2TFtLrf030775@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 08:55:23 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 08:55:23 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47957,mid=<200903291555.n2TFtLrf030775@virt2.int.splunk.com>,bayes=0.112381906642135,autolearn=no
|
|
Mar 29 08:55:23 splunk3 sendmail[24711]: n2TFtLVP024710: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:55:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:56:10 splunk3 sendmail[24926]: n2TFuASN024926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 08:56:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 08:57:10 splunk3 sendmail[25166]: n2TFvAG4025166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:57:48 splunk3 sendmail[25308]: n2TFvmG2025308: from=<3fJrPSRQKBjASaaSXQMXQdfe-ZadQbXkSaaSXQ.OaYebMYYQebXgZWUf.OaY@alerts.bounces.google.com>, size=2464, class=0, nrcpts=1, msgid=<0016361e8960ff9dea04664406f2@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 29 08:57:48 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47990
|
|
Mar 29 08:57:48 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 08:57:48 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 08:57:48 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 08:57:48 splunk3 spamd[16743]: spamd: processing message <0016361e8960ff9dea04664406f2@google.com> for spamme:501
|
|
Mar 29 08:57:50 splunk3 spamd[16743]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.3 seconds, 2899 bytes.
|
|
Mar 29 08:57:50 splunk3 spamd[16743]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.3,size=2899,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47990,mid=<0016361e8960ff9dea04664406f2@google.com>,bayes=1.11022302462516e-16,autolearn=ham
|
|
Mar 29 08:57:50 splunk3 sendmail[25309]: n2TFvmG2025308: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32680, dsn=2.0.0, stat=Sent
|
|
Mar 29 08:57:51 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 08:58:10 splunk3 sendmail[25408]: n2TFwAJw025408: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 08:58:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 08:59:10 splunk3 sendmail[25651]: n2TFxABP025651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:00:04 splunk3 sendmail[25934]: n2TG0417025934: from=root, size=291, class=0, nrcpts=1, msgid=<200903291600.n2TG0417025934@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 09:00:04 splunk3 sendmail[25938]: n2TG04oD025938: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903291600.n2TG0417025934@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 09:00:04 splunk3 sendmail[25934]: n2TG0417025934: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TG04oD025938 Message accepted for delivery)
|
|
Mar 29 09:00:05 splunk3 sendmail[25939]: n2TG04oD025938: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:00:10 splunk3 sendmail[25961]: n2TG0AYm025961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:00:22 splunk3 sendmail[26000]: n2TG0MoW026000: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291600.n2TG0LL9031418@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:00:22 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48015
|
|
Mar 29 09:00:22 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:00:22 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 09:00:22 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 09:00:22 splunk3 sendmail[26001]: n2TG0MoW026000: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:00:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:00:22 splunk3 sendmail[26017]: n2TG0M4U026017: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903291600.n2TG0M4U026017@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 09:00:22 splunk3 sendmail[26019]: n2TG0M4U026017: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 09:00:22 splunk3 sendmail[26019]: n2TG0M4U026017: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 09:00:22 splunk3 sendmail[26019]: n2TG0M4U026017: n2TG0M4U026019: postmaster notify: User unknown
|
|
Mar 29 09:00:24 splunk3 sendmail[26019]: n2TG0M4U026019: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:01:02 splunk3 sendmail[26191]: n2TG115S026191: from=root, size=443, class=0, nrcpts=1, msgid=<200903291601.n2TG115S026191@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 09:01:02 splunk3 sendmail[26194]: n2TG12DX026194: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903291601.n2TG115S026191@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 09:01:02 splunk3 sendmail[26191]: n2TG115S026191: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TG12DX026194 Message accepted for delivery)
|
|
Mar 29 09:01:04 splunk3 sendmail[26195]: n2TG12DX026194: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:01:10 splunk3 sendmail[26241]: n2TG1A1E026241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:01:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:02:10 splunk3 sendmail[26482]: n2TG2Aqx026482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:03:10 splunk3 sendmail[26719]: n2TG3A3U026719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:03:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:04:10 splunk3 sendmail[26957]: n2TG4ArB026957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:05:10 splunk3 sendmail[27197]: n2TG5AFx027197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:05:22 splunk3 sendmail[27237]: n2TG5Mro027237: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291605.n2TG5MK9032098@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:05:22 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48079
|
|
Mar 29 09:05:22 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:05:22 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 09:05:22 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 09:05:22 splunk3 sendmail[27238]: n2TG5Mro027237: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:05:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:06:10 splunk3 sendmail[27447]: n2TG6A6Q027447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:06:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:07:10 splunk3 sendmail[27692]: n2TG7Amv027692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:08:10 splunk3 sendmail[27931]: n2TG8ABn027931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:08:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:09:10 splunk3 sendmail[28176]: n2TG9ANK028176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:10:03 splunk3 sendmail[28468]: n2TGA3vl028468: from=root, size=292, class=0, nrcpts=1, msgid=<200903291610.n2TGA3vl028468@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 09:10:03 splunk3 sendmail[28473]: n2TGA3uG028473: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903291610.n2TGA3vl028468@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 09:10:03 splunk3 sendmail[28468]: n2TGA3vl028468: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TGA3uG028473 Message accepted for delivery)
|
|
Mar 29 09:10:04 splunk3 sendmail[28474]: n2TGA3uG028473: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:10:10 splunk3 sendmail[28518]: n2TGAAVg028518: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:10:23 splunk3 sendmail[28570]: n2TGANLb028570: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291610.n2TGAN4s032720@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:10:24 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48144
|
|
Mar 29 09:10:24 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:10:24 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:10:24 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:10:24 splunk3 spamd[16743]: spamd: processing message <200903291610.n2TGAN4s032720@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:10:26 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 29 09:10:26 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48144,mid=<200903291610.n2TGAN4s032720@virt2.int.splunk.com>,bayes=0.112414274793998,autolearn=no
|
|
Mar 29 09:10:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:10:26 splunk3 sendmail[28587]: n2TGANLb028570: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:11:10 splunk3 sendmail[28771]: n2TGBAFF028771: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 09:11:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:12:10 splunk3 sendmail[29012]: n2TGCAW6029012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:13:10 splunk3 sendmail[29252]: n2TGDAiR029252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:13:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:14:10 splunk3 sendmail[29494]: n2TGEAHQ029494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:15:10 splunk3 sendmail[29732]: n2TGFATK029732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:15:24 splunk3 sendmail[29797]: n2TGFOWT029797: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291615.n2TGFN8j001057@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:15:24 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48200
|
|
Mar 29 09:15:24 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:15:24 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:15:24 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:15:24 splunk3 spamd[16743]: spamd: processing message <200903291615.n2TGFN8j001057@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:15:26 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 29 09:15:26 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48200,mid=<200903291615.n2TGFN8j001057@virt2.int.splunk.com>,bayes=0.169352381125389,autolearn=no
|
|
Mar 29 09:15:26 splunk3 sendmail[29801]: n2TGFOWT029797: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:15:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:16:10 splunk3 sendmail[29984]: n2TGGABk029984: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:16:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:17:10 splunk3 sendmail[30225]: n2TGHA0j030225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:18:10 splunk3 sendmail[30460]: n2TGIA0r030460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:18:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:19:10 splunk3 sendmail[30703]: n2TGJADh030703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:20:10 splunk3 sendmail[30945]: n2TGKAGl030945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:20:24 splunk3 sendmail[31013]: n2TGKOKp031013: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291620.n2TGKOZq001725@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:20:24 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48256
|
|
Mar 29 09:20:24 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:20:24 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:20:24 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:20:24 splunk3 spamd[16743]: spamd: processing message <200903291620.n2TGKOZq001725@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:20:27 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 09:20:27 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48256,mid=<200903291620.n2TGKOZq001725@virt2.int.splunk.com>,bayes=0.169352381125389,autolearn=no
|
|
Mar 29 09:20:27 splunk3 sendmail[31014]: n2TGKOKp031013: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:20:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:21:10 splunk3 sendmail[31199]: n2TGLAP8031199: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:21:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:22:10 splunk3 sendmail[31439]: n2TGMAqq031439: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:23:10 splunk3 sendmail[31684]: n2TGNAfV031684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:23:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:24:10 splunk3 sendmail[31919]: n2TGOA1W031919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:25:10 splunk3 sendmail[32158]: n2TGPAhE032158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:25:25 splunk3 sendmail[32228]: n2TGPPt4032228: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291625.n2TGPPOM002339@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:25:25 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48311
|
|
Mar 29 09:25:25 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:25:25 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:25:25 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:25:25 splunk3 spamd[16743]: spamd: processing message <200903291625.n2TGPPOM002339@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:25:27 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 09:25:27 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48311,mid=<200903291625.n2TGPPOM002339@virt2.int.splunk.com>,bayes=0.169352381125389,autolearn=no
|
|
Mar 29 09:25:27 splunk3 sendmail[32229]: n2TGPPt4032228: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:25:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:26:10 splunk3 sendmail[32408]: n2TGQAmc032408: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 09:26:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:27:10 splunk3 sendmail[32654]: n2TGRAaD032654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:28:10 splunk3 sendmail[424]: n2TGSAiQ000424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:28:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:29:10 splunk3 sendmail[664]: n2TGTAfn000664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:30:10 splunk3 sendmail[905]: n2TGUAqC000905: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:30:26 splunk3 sendmail[971]: n2TGUPO8000971: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291630.n2TGUPG4002966@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:30:26 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48368
|
|
Mar 29 09:30:26 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:30:26 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:30:26 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:30:26 splunk3 spamd[16743]: spamd: processing message <200903291630.n2TGUPG4002966@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:30:28 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1308 bytes.
|
|
Mar 29 09:30:28 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48368,mid=<200903291630.n2TGUPG4002966@virt2.int.splunk.com>,bayes=0.169352381125389,autolearn=no
|
|
Mar 29 09:30:28 splunk3 sendmail[972]: n2TGUPO8000971: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:30:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:31:10 splunk3 sendmail[1160]: n2TGVAY7001160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:31:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:32:10 splunk3 sendmail[1397]: n2TGWAR1001397: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:33:10 splunk3 sendmail[1637]: n2TGXAZw001637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:33:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:34:10 splunk3 sendmail[1877]: n2TGYAvR001877: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:35:10 splunk3 sendmail[2118]: n2TGZA99002118: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:35:26 splunk3 sendmail[2187]: n2TGZQ7e002187: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291635.n2TGZQNG003714@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:35:26 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48423
|
|
Mar 29 09:35:26 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:35:26 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:35:26 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:35:26 splunk3 spamd[16743]: spamd: processing message <200903291635.n2TGZQNG003714@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:35:28 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 29 09:35:28 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48423,mid=<200903291635.n2TGZQNG003714@virt2.int.splunk.com>,bayes=0.169352381125389,autolearn=no
|
|
Mar 29 09:35:28 splunk3 sendmail[2188]: n2TGZQ7e002187: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:35:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:36:10 splunk3 sendmail[2367]: n2TGaAJ4002367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:36:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:37:10 splunk3 sendmail[2617]: n2TGbAAG002617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:38:10 splunk3 sendmail[2869]: n2TGcAPc002869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:38:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:39:10 splunk3 sendmail[3116]: n2TGdA3V003116: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:40:10 splunk3 sendmail[3360]: n2TGeADZ003360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:40:26 splunk3 sendmail[3430]: n2TGeQeo003430: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291640.n2TGeQ1P004352@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:40:27 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48479
|
|
Mar 29 09:40:27 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:40:27 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:40:27 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:40:27 splunk3 spamd[16743]: spamd: processing message <200903291640.n2TGeQ1P004352@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:40:31 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Mar 29 09:40:31 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48479,mid=<200903291640.n2TGeQ1P004352@virt2.int.splunk.com>,bayes=0.169352381125389,autolearn=no
|
|
Mar 29 09:40:31 splunk3 sendmail[3431]: n2TGeQeo003430: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:05, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:40:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:41:10 splunk3 sendmail[3636]: n2TGfALr003636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 09:41:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:42:10 splunk3 sendmail[3886]: n2TGgABD003886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:43:10 splunk3 sendmail[4138]: n2TGhARR004138: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:43:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:44:10 splunk3 sendmail[4394]: n2TGiA8c004394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:45:10 splunk3 sendmail[4635]: n2TGjAOu004635: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:45:27 splunk3 sendmail[4701]: n2TGjRU6004701: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291645.n2TGjRE6004978@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:45:27 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48535
|
|
Mar 29 09:45:27 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:45:27 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:45:27 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:45:27 splunk3 spamd[16743]: spamd: processing message <200903291645.n2TGjRE6004978@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:45:29 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 29 09:45:29 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48535,mid=<200903291645.n2TGjRE6004978@virt2.int.splunk.com>,bayes=0.169352381125389,autolearn=no
|
|
Mar 29 09:45:29 splunk3 sendmail[4702]: n2TGjRU6004701: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:46:10 splunk3 sendmail[4885]: n2TGkATT004885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:46:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:47:10 splunk3 sendmail[5170]: n2TGlAo4005170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:48:10 splunk3 sendmail[5411]: n2TGmAMw005411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:48:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:49:10 splunk3 sendmail[5655]: n2TGnAur005655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:50:10 splunk3 sendmail[5895]: n2TGoAbS005895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:50:27 splunk3 sendmail[5966]: n2TGoRq4005966: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291650.n2TGoRTT005578@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:50:27 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48591
|
|
Mar 29 09:50:27 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:50:27 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:50:27 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:50:27 splunk3 spamd[16743]: spamd: processing message <200903291650.n2TGoRTT005578@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:50:29 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Mar 29 09:50:29 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48591,mid=<200903291650.n2TGoRTT005578@virt2.int.splunk.com>,bayes=0.169352381125389,autolearn=no
|
|
Mar 29 09:50:29 splunk3 sendmail[5967]: n2TGoRq4005966: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:50:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:51:10 splunk3 sendmail[6149]: n2TGpApv006149: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:51:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:52:10 splunk3 sendmail[6391]: n2TGqAQ6006391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:53:10 splunk3 sendmail[6630]: n2TGrAEA006630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:53:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:54:10 splunk3 sendmail[6868]: n2TGsAMG006868: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:55:10 splunk3 sendmail[7109]: n2TGtArl007109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:55:28 splunk3 sendmail[7178]: n2TGtSqE007178: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291655.n2TGtR8D006213@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 09:55:28 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48646
|
|
Mar 29 09:55:28 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:55:28 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:55:28 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:55:28 splunk3 spamd[16743]: spamd: processing message <200903291655.n2TGtR8D006213@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 09:55:30 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 29 09:55:30 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48646,mid=<200903291655.n2TGtR8D006213@virt2.int.splunk.com>,bayes=0.169352381125389,autolearn=no
|
|
Mar 29 09:55:30 splunk3 sendmail[7180]: n2TGtSqE007178: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:55:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:56:10 splunk3 sendmail[7359]: n2TGuARs007359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:56:12 splunk3 sendmail[7179]: n2TGtSkO007179: from=<sigmundm@osdir.com>, size=5692, class=0, nrcpts=1, msgid=<a1c3019dc29f$688697a8$e6a0b45c@osdir.com>, proto=ESMTP, daemon=MTA, relay=[92.48.45.176]
|
|
Mar 29 09:56:12 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48653
|
|
Mar 29 09:56:12 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 09:56:12 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 09:56:12 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 09:56:12 splunk3 spamd[16743]: spamd: processing message <a1c3019dc29f$688697a8$e6a0b45c@osdir.com> for spamme:501
|
|
Mar 29 09:56:14 splunk3 spamd[16743]: spamd: identified spam (31.8/5.0) for spamme:501 in 1.8 seconds, 5994 bytes.
|
|
Mar 29 09:56:14 splunk3 spamd[16743]: spamd: result: Y 31 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL scantime=1.8,size=5994,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48653,mid=<a1c3019dc29f$688697a8$e6a0b45c@osdir.com>,bayes=1,autolearn=spam
|
|
Mar 29 09:56:14 splunk3 sendmail[7361]: n2TGtSkO007179: to=<spamme@splunkit.com>, delay=00:00:06, xdelay=00:00:02, mailer=local, pri=35869, dsn=2.0.0, stat=Sent
|
|
Mar 29 09:56:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 09:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 09:56:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 09:57:10 splunk3 sendmail[7617]: n2TGvA58007617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:58:10 splunk3 sendmail[7855]: n2TGwAMM007855: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 09:58:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 09:59:10 splunk3 sendmail[8093]: n2TGxAPL008093: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:00:04 splunk3 sendmail[8377]: n2TH04gZ008377: from=root, size=291, class=0, nrcpts=1, msgid=<200903291700.n2TH04gZ008377@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 10:00:04 splunk3 sendmail[8381]: n2TH04EH008381: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903291700.n2TH04gZ008377@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 10:00:04 splunk3 sendmail[8377]: n2TH04gZ008377: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TH04EH008381 Message accepted for delivery)
|
|
Mar 29 10:00:06 splunk3 sendmail[8382]: n2TH04EH008381: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:00:10 splunk3 sendmail[8403]: n2TH0AFt008403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:00:28 splunk3 sendmail[8490]: n2TH0SUH008490: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903291700.n2TH0SUH008490@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 10:00:28 splunk3 sendmail[8492]: n2TH0SUH008490: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 10:00:28 splunk3 sendmail[8492]: n2TH0SUH008490: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 29 10:00:28 splunk3 sendmail[8492]: n2TH0SUH008490: n2TH0SUH008492: postmaster notify: User unknown
|
|
Mar 29 10:00:29 splunk3 sendmail[8505]: n2TH0TAQ008505: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291700.n2TH0SG9006834@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:00:29 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48712
|
|
Mar 29 10:00:29 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:00:29 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 10:00:29 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 10:00:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:00:29 splunk3 sendmail[8506]: n2TH0TAQ008505: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:00:29 splunk3 sendmail[8492]: n2TH0SUH008492: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:01:10 splunk3 sendmail[8679]: n2TH1AfX008679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:01:14 splunk3 sendmail[8638]: n2TH12Lh008638: from=root, size=443, class=0, nrcpts=1, msgid=<200903291701.n2TH12Lh008638@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 10:01:14 splunk3 sendmail[8697]: n2TH1EJf008697: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903291701.n2TH12Lh008638@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 10:01:14 splunk3 sendmail[8638]: n2TH12Lh008638: to=root, ctladdr=root (0/0), delay=00:00:12, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TH1EJf008697 Message accepted for delivery)
|
|
Mar 29 10:01:15 splunk3 sendmail[8698]: n2TH1EJf008697: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:01:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:02:10 splunk3 sendmail[8924]: n2TH2AO1008924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:03:10 splunk3 sendmail[9162]: n2TH3AMO009162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:03:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:04:10 splunk3 sendmail[9399]: n2TH4ARQ009399: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:05:10 splunk3 sendmail[9649]: n2TH5AZE009649: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:05:30 splunk3 sendmail[9736]: n2TH5Tnp009736: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291705.n2TH5TTQ007541@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:05:30 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48769
|
|
Mar 29 10:05:30 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:05:30 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 10:05:30 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 10:05:30 splunk3 sendmail[9737]: n2TH5Tnp009736: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:05:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:06:10 splunk3 sendmail[9899]: n2TH6Aa4009899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:06:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:07:10 splunk3 sendmail[10140]: n2TH7A0B010140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:08:10 splunk3 sendmail[10380]: n2TH8A5o010380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:08:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:09:10 splunk3 sendmail[10625]: n2TH9ApP010625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:10:02 splunk3 sendmail[10921]: n2THA2kR010921: from=root, size=292, class=0, nrcpts=1, msgid=<200903291710.n2THA2kR010921@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 10:10:02 splunk3 sendmail[10926]: n2THA2a7010926: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903291710.n2THA2kR010921@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 10:10:02 splunk3 sendmail[10921]: n2THA2kR010921: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2THA2a7010926 Message accepted for delivery)
|
|
Mar 29 10:10:03 splunk3 sendmail[10927]: n2THA2a7010926: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:10:10 splunk3 sendmail[10970]: n2THAAEe010970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:10:30 splunk3 sendmail[11056]: n2THAUmI011056: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291710.n2THAUEk008131@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:10:30 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48825
|
|
Mar 29 10:10:30 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:10:30 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:10:30 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:10:30 splunk3 spamd[16743]: spamd: processing message <200903291710.n2THAUEk008131@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:10:32 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 10:10:32 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48825,mid=<200903291710.n2THAUEk008131@virt2.int.splunk.com>,bayes=0.169347008162971,autolearn=no
|
|
Mar 29 10:10:32 splunk3 sendmail[11057]: n2THAUmI011056: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:10:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:11:10 splunk3 sendmail[11223]: n2THBADa011223: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 10:11:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:12:10 splunk3 sendmail[11465]: n2THCA6j011465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:13:10 splunk3 sendmail[11705]: n2THDAQ8011705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:13:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:14:10 splunk3 sendmail[11940]: n2THEAPY011940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:15:00 splunk3 sendmail[12140]: n2THF0Kt012140: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291715.n2THF0tx008860@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:15:00 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48870
|
|
Mar 29 10:15:00 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:15:00 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:15:00 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:15:00 splunk3 spamd[16743]: spamd: processing message <200903291715.n2THF0tx008860@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:15:02 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 10:15:02 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48870,mid=<200903291715.n2THF0tx008860@virt2.int.splunk.com>,bayes=0.169347008162971,autolearn=no
|
|
Mar 29 10:15:02 splunk3 sendmail[12141]: n2THF0Kt012140: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:15:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:15:10 splunk3 sendmail[12185]: n2THFAmO012185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:16:10 splunk3 sendmail[12433]: n2THGAJM012433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:16:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:17:10 splunk3 sendmail[12678]: n2THHAD9012678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:18:10 splunk3 sendmail[12911]: n2THIAKe012911: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:18:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:19:10 splunk3 sendmail[13155]: n2THJAX8013155: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:20:01 splunk3 sendmail[13395]: n2THK1IH013395: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903291720.n2THK0ha009474@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:20:01 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48934
|
|
Mar 29 10:20:01 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:20:01 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:20:01 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:20:01 splunk3 spamd[16743]: spamd: processing message <200903291720.n2THK0ha009474@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:20:03 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 29 10:20:03 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48934,mid=<200903291720.n2THK0ha009474@virt2.int.splunk.com>,bayes=0.169347008162971,autolearn=no
|
|
Mar 29 10:20:03 splunk3 sendmail[13396]: n2THK1IH013395: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:20:10 splunk3 sendmail[13449]: n2THKASt013449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:21:11 splunk3 sendmail[13685]: n2THLAiM013685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:21:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:22:11 splunk3 sendmail[13924]: n2THMBIR013924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:23:11 splunk3 sendmail[14168]: n2THNBio014168: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:23:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:24:11 splunk3 sendmail[14407]: n2THOB0V014407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:25:01 splunk3 sendmail[14613]: n2THP1Sr014613: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291725.n2THP1De010106@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:25:01 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48989
|
|
Mar 29 10:25:01 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:25:01 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:25:01 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:25:01 splunk3 spamd[16743]: spamd: processing message <200903291725.n2THP1De010106@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:25:03 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 10:25:03 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48989,mid=<200903291725.n2THP1De010106@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 10:25:03 splunk3 sendmail[14614]: n2THP1Sr014613: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:25:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:25:11 splunk3 sendmail[14662]: n2THPBCF014662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:26:11 splunk3 sendmail[14898]: n2THQB64014898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 10:26:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:27:11 splunk3 sendmail[15142]: n2THRBqs015142: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:28:11 splunk3 sendmail[15377]: n2THSBKV015377: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:28:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:29:11 splunk3 sendmail[15619]: n2THTBXU015619: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:30:02 splunk3 sendmail[15830]: n2THU2S8015830: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291730.n2THU2qi010764@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:30:02 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49045
|
|
Mar 29 10:30:02 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:30:02 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:30:02 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:30:02 splunk3 spamd[16743]: spamd: processing message <200903291730.n2THU2qi010764@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:30:05 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 10:30:05 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49045,mid=<200903291730.n2THU2qi010764@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 10:30:05 splunk3 sendmail[15831]: n2THU2S8015830: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:30:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:30:11 splunk3 sendmail[15875]: n2THUBuF015875: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:31:11 splunk3 sendmail[16115]: n2THVB9Y016115: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:31:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:32:11 splunk3 sendmail[16354]: n2THWBEB016354: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:33:11 splunk3 sendmail[16595]: n2THXB25016595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:33:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:34:11 splunk3 sendmail[16836]: n2THYB10016836: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:35:03 splunk3 sendmail[17060]: n2THZ3oJ017060: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291735.n2THZ2Ow011514@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:35:03 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49100
|
|
Mar 29 10:35:03 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:35:03 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:35:03 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:35:03 splunk3 spamd[16743]: spamd: processing message <200903291735.n2THZ2Ow011514@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:35:05 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 10:35:05 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49100,mid=<200903291735.n2THZ2Ow011514@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 10:35:05 splunk3 sendmail[17061]: n2THZ3oJ017060: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:35:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:35:11 splunk3 sendmail[17084]: n2THZBGj017084: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:36:11 splunk3 sendmail[17319]: n2THaBnI017319: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:36:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:37:11 splunk3 sendmail[17563]: n2THbBnl017563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:38:11 splunk3 sendmail[17803]: n2THcBNU017803: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:38:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:39:11 splunk3 sendmail[18044]: n2THdBFQ018044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:40:03 splunk3 sendmail[18273]: n2THe31D018273: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291740.n2THe3UO012145@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:40:03 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49156
|
|
Mar 29 10:40:03 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:40:03 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:40:03 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:40:03 splunk3 spamd[16743]: spamd: processing message <200903291740.n2THe3UO012145@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:40:05 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 10:40:05 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49156,mid=<200903291740.n2THe3UO012145@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 10:40:05 splunk3 sendmail[18274]: n2THe31D018273: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:40:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:40:11 splunk3 sendmail[18302]: n2THeBUH018302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:41:11 splunk3 sendmail[18538]: n2THfBng018538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 10:41:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:42:11 splunk3 sendmail[18778]: n2THgB6R018778: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:43:11 splunk3 sendmail[19021]: n2THhBTJ019021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:43:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:44:11 splunk3 sendmail[19259]: n2THiBuF019259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:45:05 splunk3 sendmail[19489]: n2THj5da019489: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291745.n2THj4Wm012757@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:45:05 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49211
|
|
Mar 29 10:45:05 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:45:05 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:45:05 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:45:05 splunk3 spamd[16743]: spamd: processing message <200903291745.n2THj4Wm012757@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:45:07 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 10:45:07 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49211,mid=<200903291745.n2THj4Wm012757@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 10:45:07 splunk3 sendmail[19490]: n2THj5da019489: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:45:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:45:11 splunk3 sendmail[19513]: n2THjBXS019513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:46:11 splunk3 sendmail[19748]: n2THkBPA019748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:46:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:47:11 splunk3 sendmail[19994]: n2THlBNw019994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:48:11 splunk3 sendmail[20227]: n2THmBpt020227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:48:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:49:11 splunk3 sendmail[20468]: n2THnBtq020468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:50:06 splunk3 sendmail[20700]: n2THo6AL020700: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291750.n2THo6mB013377@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:50:06 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49267
|
|
Mar 29 10:50:06 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:50:06 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:50:06 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:50:06 splunk3 spamd[16743]: spamd: processing message <200903291750.n2THo6mB013377@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:50:08 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 29 10:50:08 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49267,mid=<200903291750.n2THo6mB013377@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 10:50:08 splunk3 sendmail[20701]: n2THo6AL020700: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:50:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:50:11 splunk3 sendmail[20723]: n2THoBKm020723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:51:11 splunk3 sendmail[20960]: n2THpB87020960: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:51:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:52:11 splunk3 sendmail[21200]: n2THqBGQ021200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:53:11 splunk3 sendmail[21442]: n2THrBxY021442: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:53:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:54:11 splunk3 sendmail[21680]: n2THsBSd021680: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:55:07 splunk3 sendmail[21907]: n2THt7nu021907: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291755.n2THt6gB013989@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 10:55:07 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49323
|
|
Mar 29 10:55:07 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 10:55:07 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 10:55:07 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 10:55:07 splunk3 spamd[16743]: spamd: processing message <200903291755.n2THt6gB013989@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 10:55:09 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 10:55:09 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49323,mid=<200903291755.n2THt6gB013989@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 10:55:09 splunk3 sendmail[21908]: n2THt7nu021907: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 10:55:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 10:55:11 splunk3 sendmail[21932]: n2THtBDZ021932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:56:11 splunk3 sendmail[22167]: n2THuBAk022167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 10:56:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 10:57:11 splunk3 sendmail[22413]: n2THvBxV022413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:58:11 splunk3 sendmail[22650]: n2THwBRk022650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 10:58:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 10:59:11 splunk3 sendmail[22892]: n2THxBCp022892: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:00:04 splunk3 sendmail[23179]: n2TI040V023179: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903291800.n2TI040V023179@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 11:00:04 splunk3 sendmail[23181]: n2TI040V023179: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 11:00:04 splunk3 sendmail[23181]: n2TI040V023179: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 11:00:04 splunk3 sendmail[23181]: n2TI040V023179: n2TI040V023181: postmaster notify: User unknown
|
|
Mar 29 11:00:04 splunk3 sendmail[23194]: n2TI04bh023194: from=root, size=291, class=0, nrcpts=1, msgid=<200903291800.n2TI04bh023194@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 11:00:04 splunk3 sendmail[23202]: n2TI043v023202: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903291800.n2TI04bh023194@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 11:00:04 splunk3 sendmail[23194]: n2TI04bh023194: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TI043v023202 Message accepted for delivery)
|
|
Mar 29 11:00:05 splunk3 sendmail[23181]: n2TI040V023181: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:00:07 splunk3 sendmail[23225]: n2TI07FS023225: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291800.n2TI076g014627@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:00:07 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49387
|
|
Mar 29 11:00:07 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:00:07 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 11:00:07 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 11:00:08 splunk3 sendmail[23226]: n2TI07FS023225: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:00:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:00:11 splunk3 sendmail[23230]: n2TI0BZf023230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:00:13 splunk3 sendmail[23203]: n2TI043v023202: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:09, xdelay=00:00:09, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:01:07 splunk3 sendmail[23432]: n2TI11a3023432: from=root, size=443, class=0, nrcpts=1, msgid=<200903291801.n2TI11a3023432@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 11:01:07 splunk3 sendmail[23477]: n2TI17da023477: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903291801.n2TI11a3023432@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 11:01:07 splunk3 sendmail[23432]: n2TI11a3023432: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TI17da023477 Message accepted for delivery)
|
|
Mar 29 11:01:09 splunk3 sendmail[23478]: n2TI17da023477: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:01:11 splunk3 sendmail[23486]: n2TI1Bcx023486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:01:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:02:11 splunk3 sendmail[23723]: n2TI2Bb0023723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:03:11 splunk3 sendmail[23962]: n2TI3Beo023962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:03:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:04:11 splunk3 sendmail[24203]: n2TI4Bt8024203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:05:08 splunk3 sendmail[24449]: n2TI58CY024449: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291805.n2TI583A015316@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:05:08 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49444
|
|
Mar 29 11:05:08 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:05:08 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 11:05:08 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 11:05:08 splunk3 sendmail[24450]: n2TI58CY024449: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:05:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:05:11 splunk3 sendmail[24455]: n2TI5BX9024455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:06:11 splunk3 sendmail[24690]: n2TI6BOR024690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:06:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:07:11 splunk3 sendmail[24933]: n2TI7B8n024933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:08:11 splunk3 sendmail[25172]: n2TI8Bwb025172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:08:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:09:11 splunk3 sendmail[25415]: n2TI9Bvu025415: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:10:03 splunk3 sendmail[25723]: n2TIA3si025723: from=root, size=292, class=0, nrcpts=1, msgid=<200903291810.n2TIA3si025723@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 11:10:03 splunk3 sendmail[25728]: n2TIA3Xx025728: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903291810.n2TIA3si025723@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 11:10:03 splunk3 sendmail[25723]: n2TIA3si025723: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TIA3Xx025728 Message accepted for delivery)
|
|
Mar 29 11:10:04 splunk3 sendmail[25729]: n2TIA3Xx025728: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:10:08 splunk3 sendmail[25763]: n2TIA88R025763: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291810.n2TIA8Ox015925@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:10:08 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49500
|
|
Mar 29 11:10:08 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:10:08 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:10:08 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:10:08 splunk3 spamd[16743]: spamd: processing message <200903291810.n2TIA8Ox015925@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:10:10 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 11:10:10 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49500,mid=<200903291810.n2TIA8Ox015925@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 11:10:10 splunk3 sendmail[25764]: n2TIA88R025763: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:10:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:10:11 splunk3 sendmail[25770]: n2TIABnp025770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:11:11 splunk3 sendmail[26009]: n2TIBBTp026009: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 11:11:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:12:11 splunk3 sendmail[26252]: n2TICBIn026252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:13:11 splunk3 sendmail[26493]: n2TIDBuW026493: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:13:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:14:11 splunk3 sendmail[26730]: n2TIEBNp026730: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:15:09 splunk3 sendmail[26979]: n2TIF9ZF026979: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291815.n2TIF9pE016724@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:15:09 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49557
|
|
Mar 29 11:15:09 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:15:09 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:15:09 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:15:09 splunk3 spamd[16743]: spamd: processing message <200903291815.n2TIF9pE016724@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:15:11 splunk3 sendmail[26985]: n2TIFBfw026985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:15:11 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 11:15:11 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49557,mid=<200903291815.n2TIF9pE016724@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 11:15:11 splunk3 sendmail[26980]: n2TIF9ZF026979: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:15:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:16:11 splunk3 sendmail[27221]: n2TIGBcM027221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:16:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:17:11 splunk3 sendmail[27461]: n2TIHBPB027461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:18:11 splunk3 sendmail[27697]: n2TIIBtX027697: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:18:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:19:11 splunk3 sendmail[27941]: n2TIJBn8027941: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:20:10 splunk3 sendmail[28189]: n2TIKAAY028189: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291820.n2TIK9YV017358@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:20:10 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49612
|
|
Mar 29 11:20:10 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:20:10 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:20:10 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:20:10 splunk3 spamd[16743]: spamd: processing message <200903291820.n2TIK9YV017358@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:20:11 splunk3 sendmail[28196]: n2TIKB9C028196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:20:12 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 11:20:12 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49612,mid=<200903291820.n2TIK9YV017358@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 11:20:12 splunk3 sendmail[28190]: n2TIKAAY028189: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:20:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:21:11 splunk3 sendmail[28434]: n2TILBlp028434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:21:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:22:11 splunk3 sendmail[28674]: n2TIMBB5028674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:23:11 splunk3 sendmail[28915]: n2TINBD9028915: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:23:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:24:11 splunk3 sendmail[29150]: n2TIOB3J029150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:25:11 splunk3 sendmail[29398]: n2TIPBWd029398: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291825.n2TIPAXM017969@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:25:11 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49668
|
|
Mar 29 11:25:11 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:25:11 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:25:11 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:25:11 splunk3 spamd[16743]: spamd: processing message <200903291825.n2TIPAXM017969@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:25:11 splunk3 sendmail[29404]: n2TIPBcc029404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:25:13 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 11:25:13 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49668,mid=<200903291825.n2TIPAXM017969@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 11:25:13 splunk3 sendmail[29399]: n2TIPBWd029398: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:25:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:26:11 splunk3 sendmail[29639]: n2TIQBSA029639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 11:26:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:27:11 splunk3 sendmail[29882]: n2TIRB9d029882: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:28:11 splunk3 sendmail[30119]: n2TISB5K030119: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:28:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:29:11 splunk3 sendmail[30361]: n2TITBNJ030361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:30:11 splunk3 sendmail[30607]: n2TIUBMD030607: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:30:11 splunk3 sendmail[30608]: n2TIUBcT030608: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291830.n2TIUBit018587@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:30:11 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49725
|
|
Mar 29 11:30:11 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:30:11 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:30:11 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:30:11 splunk3 spamd[16743]: spamd: processing message <200903291830.n2TIUBit018587@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:30:13 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 11:30:13 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49725,mid=<200903291830.n2TIUBit018587@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 11:30:13 splunk3 sendmail[30609]: n2TIUBcT030608: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:30:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:31:11 splunk3 sendmail[30853]: n2TIVBXc030853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:31:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:32:11 splunk3 sendmail[31093]: n2TIWBV3031093: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:33:11 splunk3 sendmail[31334]: n2TIXBb7031334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:33:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:34:11 splunk3 sendmail[31572]: n2TIYBVY031572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:35:11 splunk3 sendmail[31820]: n2TIZBos031820: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:35:12 splunk3 sendmail[31837]: n2TIZCjY031837: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291835.n2TIZBte019335@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:35:12 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49780
|
|
Mar 29 11:35:12 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:35:12 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:35:12 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:35:12 splunk3 spamd[16743]: spamd: processing message <200903291835.n2TIZBte019335@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:35:14 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 11:35:14 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49780,mid=<200903291835.n2TIZBte019335@virt2.int.splunk.com>,bayes=0.112409794171379,autolearn=no
|
|
Mar 29 11:35:14 splunk3 sendmail[31838]: n2TIZCjY031837: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:35:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:36:11 splunk3 sendmail[32063]: n2TIaB7I032063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:36:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:37:11 splunk3 sendmail[32305]: n2TIbB6c032305: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:38:11 splunk3 sendmail[32544]: n2TIcBoF032544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:38:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:39:11 splunk3 sendmail[319]: n2TIdBUT000319: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:39:13 splunk3 sendmail[318]: n2TIdAng000318: from=<kupfermu_1969@absolutereferrals.com>, size=1931, class=0, nrcpts=1, msgid=<200903291839.n2TIdAng000318@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=70.Red-83-44-142.dynamicIP.rima-tde.net [83.44.142.70]
|
|
Mar 29 11:39:13 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49820
|
|
Mar 29 11:39:13 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:39:13 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:39:13 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:39:13 splunk3 spamd[16743]: spamd: processing message <200903291839.n2TIdAng000318@splunk3.splunkit.com> for spamme:501
|
|
Mar 29 11:39:19 splunk3 spamd[16743]: spamd: identified spam (32.1/5.0) for spamme:501 in 6.4 seconds, 2393 bytes.
|
|
Mar 29 11:39:19 splunk3 spamd[16743]: spamd: result: Y 32 - BAYES_60,HELO_DYNAMIC_SPLIT_IP,HTML_IMAGE_ONLY_20,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=6.4,size=2393,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49820,mid=<200903291839.n2TIdAng000318@splunk3.splunkit.com>,bayes=0.677399739532489,autolearn=spam
|
|
Mar 29 11:39:19 splunk3 sendmail[337]: n2TIdAng000318: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:06, mailer=local, pri=32284, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:39:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:40:11 splunk3 sendmail[576]: n2TIeBPU000576: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:40:12 splunk3 sendmail[593]: n2TIeCVe000593: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291840.n2TIeCrW019967@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:40:12 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49837
|
|
Mar 29 11:40:12 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:40:12 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:40:12 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:40:12 splunk3 spamd[16743]: spamd: processing message <200903291840.n2TIeCrW019967@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:40:14 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 11:40:14 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49837,mid=<200903291840.n2TIeCrW019967@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 11:40:14 splunk3 sendmail[594]: n2TIeCVe000593: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:40:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:41:11 splunk3 sendmail[823]: n2TIfBsh000823: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 11:41:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:42:11 splunk3 sendmail[1062]: n2TIgBaY001062: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:43:11 splunk3 sendmail[1304]: n2TIhBD6001304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:43:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:44:11 splunk3 sendmail[1538]: n2TIiBTh001538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:45:11 splunk3 sendmail[1785]: n2TIjBl8001785: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:45:13 splunk3 sendmail[1803]: n2TIjCMI001803: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291845.n2TIjCZf020581@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:45:13 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49893
|
|
Mar 29 11:45:13 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:45:13 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:45:13 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:45:13 splunk3 spamd[16743]: spamd: processing message <200903291845.n2TIjCZf020581@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:45:15 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 29 11:45:15 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49893,mid=<200903291845.n2TIjCZf020581@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 11:45:15 splunk3 sendmail[1804]: n2TIjCMI001803: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:45:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:46:11 splunk3 sendmail[2029]: n2TIkBHY002029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:46:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:47:11 splunk3 sendmail[2273]: n2TIlBi6002273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:48:11 splunk3 sendmail[2511]: n2TImBLJ002511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:48:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:49:11 splunk3 sendmail[2766]: n2TInBKr002766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:50:11 splunk3 sendmail[3026]: n2TIoBGj003026: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:50:13 splunk3 sendmail[3044]: n2TIoDxv003044: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291850.n2TIoDoH021196@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:50:13 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49949
|
|
Mar 29 11:50:13 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:50:13 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:50:13 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:50:13 splunk3 spamd[16743]: spamd: processing message <200903291850.n2TIoDoH021196@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:50:15 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 11:50:15 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49949,mid=<200903291850.n2TIoDoH021196@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 11:50:15 splunk3 sendmail[3045]: n2TIoDxv003044: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:50:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:51:11 splunk3 sendmail[3272]: n2TIpBYu003272: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:51:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:52:11 splunk3 sendmail[3511]: n2TIqBQO003511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:53:11 splunk3 sendmail[3783]: n2TIrBp9003783: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:53:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:54:11 splunk3 sendmail[4032]: n2TIsBwF004032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:55:11 splunk3 sendmail[4295]: n2TItBYT004295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:55:14 splunk3 sendmail[4314]: n2TItETd004314: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291855.n2TItDFG021804@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 11:55:14 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50004
|
|
Mar 29 11:55:14 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 11:55:14 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 11:55:14 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 11:55:14 splunk3 spamd[16743]: spamd: processing message <200903291855.n2TItDFG021804@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 11:55:16 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 11:55:16 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50004,mid=<200903291855.n2TItDFG021804@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 11:55:16 splunk3 sendmail[4315]: n2TItETd004314: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 11:55:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 11:56:11 splunk3 sendmail[4543]: n2TIuBHj004543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 11:56:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 11:57:11 splunk3 sendmail[4788]: n2TIvB5W004788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:58:11 splunk3 sendmail[5031]: n2TIwBqc005031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 11:58:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 11:59:11 splunk3 sendmail[5313]: n2TIxBnK005313: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:00:05 splunk3 sendmail[5592]: n2TJ05dP005592: from=root, size=291, class=0, nrcpts=1, msgid=<200903291900.n2TJ05dP005592@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 12:00:05 splunk3 sendmail[5598]: n2TJ05gJ005598: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903291900.n2TJ05dP005592@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 12:00:05 splunk3 sendmail[5592]: n2TJ05dP005592: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TJ05gJ005598 Message accepted for delivery)
|
|
Mar 29 12:00:06 splunk3 sendmail[5599]: n2TJ05gJ005598: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:00:10 splunk3 sendmail[5633]: n2TJ0AO4005633: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903291900.n2TJ0AO4005633@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 12:00:10 splunk3 sendmail[5635]: n2TJ0AO4005633: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 12:00:10 splunk3 sendmail[5635]: n2TJ0AO4005633: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 29 12:00:10 splunk3 sendmail[5635]: n2TJ0AO4005633: n2TJ0AO4005635: postmaster notify: User unknown
|
|
Mar 29 12:00:11 splunk3 sendmail[5656]: n2TJ0BgU005656: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:00:11 splunk3 sendmail[5635]: n2TJ0AO4005635: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:00:14 splunk3 sendmail[5666]: n2TJ0Emv005666: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291900.n2TJ0Ejt022441@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:00:14 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50069
|
|
Mar 29 12:00:14 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:00:14 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 12:00:14 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 12:00:14 splunk3 sendmail[5667]: n2TJ0Emv005666: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:00:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:01:07 splunk3 sendmail[5852]: n2TJ11et005852: from=root, size=443, class=0, nrcpts=1, msgid=<200903291901.n2TJ11et005852@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 12:01:07 splunk3 sendmail[5896]: n2TJ17EK005896: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903291901.n2TJ11et005852@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 12:01:07 splunk3 sendmail[5852]: n2TJ11et005852: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TJ17EK005896 Message accepted for delivery)
|
|
Mar 29 12:01:09 splunk3 sendmail[5897]: n2TJ17EK005896: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:01:11 splunk3 sendmail[5914]: n2TJ1BWC005914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:01:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:02:11 splunk3 sendmail[6151]: n2TJ2B5I006151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:03:11 splunk3 sendmail[6401]: n2TJ3BPg006401: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:03:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:04:11 splunk3 sendmail[6641]: n2TJ4Bni006641: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:05:11 splunk3 sendmail[6886]: n2TJ5B01006886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:05:15 splunk3 sendmail[6891]: n2TJ5F2G006891: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291905.n2TJ5E6M023127@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:05:15 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50125
|
|
Mar 29 12:05:15 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:05:15 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 12:05:15 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 12:05:15 splunk3 sendmail[6892]: n2TJ5F2G006891: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:06:11 splunk3 sendmail[7124]: n2TJ6Bmg007124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:06:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:07:11 splunk3 sendmail[7370]: n2TJ7BFa007370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:08:11 splunk3 sendmail[7618]: n2TJ8BnP007618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:08:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:09:11 splunk3 sendmail[7865]: n2TJ9Buq007865: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:10:03 splunk3 sendmail[8156]: n2TJA38L008156: from=root, size=292, class=0, nrcpts=1, msgid=<200903291910.n2TJA38L008156@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 12:10:03 splunk3 sendmail[8161]: n2TJA3XA008161: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903291910.n2TJA38L008156@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 12:10:03 splunk3 sendmail[8156]: n2TJA38L008156: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TJA3XA008161 Message accepted for delivery)
|
|
Mar 29 12:10:04 splunk3 sendmail[8162]: n2TJA3XA008161: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:10:11 splunk3 sendmail[8217]: n2TJABXV008217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:10:17 splunk3 sendmail[8237]: n2TJAH44008237: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291910.n2TJAFcX023765@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:10:17 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50182
|
|
Mar 29 12:10:17 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:10:17 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:10:17 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:10:17 splunk3 spamd[16743]: spamd: processing message <200903291910.n2TJAFcX023765@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:10:19 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 12:10:19 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50182,mid=<200903291910.n2TJAFcX023765@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:10:20 splunk3 sendmail[8238]: n2TJAH44008237: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:10:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:11:11 splunk3 sendmail[8464]: n2TJBBdt008464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 12:11:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:12:11 splunk3 sendmail[8702]: n2TJCBoG008702: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:13:11 splunk3 sendmail[8941]: n2TJDBnr008941: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:13:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:14:11 splunk3 sendmail[9178]: n2TJEBEp009178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:15:11 splunk3 sendmail[9413]: n2TJFB2W009413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:15:18 splunk3 sendmail[9443]: n2TJFIf3009443: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291915.n2TJFHlL024574@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:15:18 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50238
|
|
Mar 29 12:15:18 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:15:18 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:15:18 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:15:18 splunk3 spamd[16743]: spamd: processing message <200903291915.n2TJFHlL024574@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:15:20 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 12:15:20 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50238,mid=<200903291915.n2TJFHlL024574@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:15:20 splunk3 sendmail[9445]: n2TJFIf3009443: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:15:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:16:11 splunk3 sendmail[9673]: n2TJGBww009673: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:16:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:17:01 splunk3 sendmail[9857]: n2TJH0b1009857: from=<3LMnPSRQKBg8v33v0tp0t687-236t40Dv33v0t.r3174p11t74092zx8.r31@alerts.bounces.google.com>, size=11464, class=0, nrcpts=1, msgid=<000e0cd519986c543d046646cf8e@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.166]
|
|
Mar 29 12:17:01 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50255
|
|
Mar 29 12:17:01 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:17:01 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:17:01 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:17:01 splunk3 spamd[16743]: spamd: processing message <000e0cd519986c543d046646cf8e@google.com> for spamme:501
|
|
Mar 29 12:17:04 splunk3 spamd[16743]: spamd: clean message (-1.1/5.0) for spamme:501 in 2.7 seconds, 11894 bytes.
|
|
Mar 29 12:17:04 splunk3 spamd[16743]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=2.7,size=11894,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50255,mid=<000e0cd519986c543d046646cf8e@google.com>,bayes=2.77555756156289e-16,autolearn=no
|
|
Mar 29 12:17:04 splunk3 sendmail[9858]: n2TJH0b1009857: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=41675, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:17:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:17:11 splunk3 sendmail[9922]: n2TJHBuY009922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:18:11 splunk3 sendmail[10159]: n2TJIBGi010159: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:18:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:19:11 splunk3 sendmail[10399]: n2TJJBSQ010399: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:20:11 splunk3 sendmail[10639]: n2TJKBnC010639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:20:22 splunk3 sendmail[10690]: n2TJKMpu010690: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291920.n2TJKIKS025204@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:20:22 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50295
|
|
Mar 29 12:20:22 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:20:22 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:20:22 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:20:22 splunk3 spamd[16743]: spamd: processing message <200903291920.n2TJKIKS025204@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:20:24 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 29 12:20:24 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50295,mid=<200903291920.n2TJKIKS025204@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:20:24 splunk3 sendmail[10691]: n2TJKMpu010690: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:20:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:21:12 splunk3 sendmail[10893]: n2TJLCAj010893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:21:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:22:12 splunk3 sendmail[11134]: n2TJMCDG011134: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:23:12 splunk3 sendmail[11380]: n2TJNCYQ011380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:23:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:24:12 splunk3 sendmail[11617]: n2TJOCxg011617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:25:12 splunk3 sendmail[11858]: n2TJPCDS011858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:25:23 splunk3 sendmail[11907]: n2TJPNqU011907: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291925.n2TJPNrs025820@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:25:23 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50350
|
|
Mar 29 12:25:23 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:25:23 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:25:23 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:25:23 splunk3 spamd[16743]: spamd: processing message <200903291925.n2TJPNrs025820@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:25:25 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 12:25:25 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50350,mid=<200903291925.n2TJPNrs025820@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:25:25 splunk3 sendmail[11908]: n2TJPNqU011907: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:25:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:26:12 splunk3 sendmail[12104]: n2TJQCoq012104: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 12:26:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:27:12 splunk3 sendmail[12348]: n2TJRCdB012348: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:28:12 splunk3 sendmail[12584]: n2TJSCS6012584: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:28:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:29:12 splunk3 sendmail[12828]: n2TJTCaj012828: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:30:12 splunk3 sendmail[13068]: n2TJUCfR013068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:30:23 splunk3 sendmail[13118]: n2TJUN2f013118: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291930.n2TJUNfQ026443@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:30:23 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50407
|
|
Mar 29 12:30:23 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:30:23 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:30:23 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:30:24 splunk3 spamd[16743]: spamd: processing message <200903291930.n2TJUNfQ026443@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:30:26 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 12:30:26 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50407,mid=<200903291930.n2TJUNfQ026443@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:30:26 splunk3 sendmail[13119]: n2TJUN2f013118: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:30:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:31:12 splunk3 sendmail[13356]: n2TJVCqL013356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:31:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:32:12 splunk3 sendmail[13602]: n2TJWCGi013602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:33:12 splunk3 sendmail[13839]: n2TJXCjP013839: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:33:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:34:12 splunk3 sendmail[14077]: n2TJYCPV014077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:35:12 splunk3 sendmail[14315]: n2TJZCoF014315: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:35:24 splunk3 sendmail[14367]: n2TJZOnT014367: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291935.n2TJZOab027189@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:35:24 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50462
|
|
Mar 29 12:35:24 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:35:24 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:35:24 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:35:24 splunk3 spamd[16743]: spamd: processing message <200903291935.n2TJZOab027189@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:35:26 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 29 12:35:26 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50462,mid=<200903291935.n2TJZOab027189@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:35:26 splunk3 sendmail[14368]: n2TJZOnT014367: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:35:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:36:12 splunk3 sendmail[14566]: n2TJaCpI014566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:36:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:37:12 splunk3 sendmail[14811]: n2TJbCQN014811: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:38:12 splunk3 sendmail[15049]: n2TJcCdN015049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:38:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:39:12 splunk3 sendmail[15293]: n2TJdCq2015293: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:40:12 splunk3 sendmail[15532]: n2TJeCEl015532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:40:25 splunk3 sendmail[15585]: n2TJeP6I015585: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291940.n2TJeO9C027825@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:40:25 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50518
|
|
Mar 29 12:40:25 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:40:25 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:40:25 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:40:25 splunk3 spamd[16743]: spamd: processing message <200903291940.n2TJeO9C027825@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:40:27 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 12:40:27 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50518,mid=<200903291940.n2TJeO9C027825@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:40:27 splunk3 sendmail[15586]: n2TJeP6I015585: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:40:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:41:12 splunk3 sendmail[15785]: n2TJfCp0015785: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 12:41:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:42:12 splunk3 sendmail[16026]: n2TJgCpn016026: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:43:12 splunk3 sendmail[16266]: n2TJhC2q016266: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:43:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:44:12 splunk3 sendmail[16506]: n2TJiCra016506: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:45:12 splunk3 sendmail[16745]: n2TJjC67016745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:45:25 splunk3 sendmail[16796]: n2TJjPq4016796: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291945.n2TJjPuC028432@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:45:25 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50575
|
|
Mar 29 12:45:25 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:45:25 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:45:25 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:45:25 splunk3 spamd[16743]: spamd: processing message <200903291945.n2TJjPuC028432@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:45:27 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 12:45:27 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50575,mid=<200903291945.n2TJjPuC028432@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:45:27 splunk3 sendmail[16797]: n2TJjPq4016796: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:45:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:46:12 splunk3 sendmail[16995]: n2TJkCjW016995: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:46:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:47:12 splunk3 sendmail[17236]: n2TJlCGq017236: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:48:12 splunk3 sendmail[17470]: n2TJmCpC017470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:48:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:49:12 splunk3 sendmail[17713]: n2TJnC5o017713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:50:12 splunk3 sendmail[17954]: n2TJoC2Q017954: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:50:26 splunk3 sendmail[18013]: n2TJoQ4f018013: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291950.n2TJoQIS029050@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:50:26 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50630
|
|
Mar 29 12:50:26 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:50:26 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:50:26 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:50:26 splunk3 spamd[16743]: spamd: processing message <200903291950.n2TJoQIS029050@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:50:28 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 29 12:50:28 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50630,mid=<200903291950.n2TJoQIS029050@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:50:28 splunk3 sendmail[18024]: n2TJoQ4f018013: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:50:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:51:12 splunk3 sendmail[18209]: n2TJpCiC018209: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:51:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:52:12 splunk3 sendmail[18449]: n2TJqCrI018449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:53:12 splunk3 sendmail[18694]: n2TJrChq018694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:53:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:54:12 splunk3 sendmail[18928]: n2TJsCwB018928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:55:12 splunk3 sendmail[19168]: n2TJtCU3019168: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:55:26 splunk3 sendmail[19238]: n2TJtQBB019238: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903291955.n2TJtQqm029655@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 12:55:26 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50686
|
|
Mar 29 12:55:26 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 12:55:26 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 12:55:26 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 12:55:26 splunk3 spamd[16743]: spamd: processing message <200903291955.n2TJtQqm029655@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 12:55:28 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1311 bytes.
|
|
Mar 29 12:55:28 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50686,mid=<200903291955.n2TJtQqm029655@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 12:55:28 splunk3 sendmail[19239]: n2TJtQBB019238: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 12:55:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 12:56:12 splunk3 sendmail[19418]: n2TJuCki019418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 12:56:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 12:57:12 splunk3 sendmail[19663]: n2TJvC8G019663: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:58:12 splunk3 sendmail[19901]: n2TJwCRu019901: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 12:58:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 12:59:12 splunk3 sendmail[20143]: n2TJxCW9020143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:00:05 splunk3 sendmail[20408]: n2TK05px020408: from=root, size=291, class=0, nrcpts=1, msgid=<200903292000.n2TK05px020408@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 13:00:05 splunk3 sendmail[20412]: n2TK05Xl020412: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903292000.n2TK05px020408@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 13:00:05 splunk3 sendmail[20408]: n2TK05px020408: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TK05Xl020412 Message accepted for delivery)
|
|
Mar 29 13:00:06 splunk3 sendmail[20413]: n2TK05Xl020412: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:00:12 splunk3 sendmail[20455]: n2TK0CIB020455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:00:16 splunk3 sendmail[20468]: n2TK0GLd020468: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903292000.n2TK0GLd020468@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 13:00:16 splunk3 sendmail[20470]: n2TK0GLd020468: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 13:00:16 splunk3 sendmail[20470]: n2TK0GLd020468: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 13:00:16 splunk3 sendmail[20470]: n2TK0GLd020468: n2TK0GLd020470: postmaster notify: User unknown
|
|
Mar 29 13:00:17 splunk3 sendmail[20470]: n2TK0GLd020470: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:00:27 splunk3 sendmail[20537]: n2TK0RAv020537: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292000.n2TK0Rtj030300@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:00:27 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50750
|
|
Mar 29 13:00:27 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:00:27 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 13:00:27 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 13:00:27 splunk3 sendmail[20538]: n2TK0RAv020537: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:00:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:01:04 splunk3 sendmail[20669]: n2TK11Jj020669: from=root, size=443, class=0, nrcpts=1, msgid=<200903292001.n2TK11Jj020669@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 13:01:04 splunk3 sendmail[20693]: n2TK14UR020693: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903292001.n2TK11Jj020669@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 13:01:04 splunk3 sendmail[20669]: n2TK11Jj020669: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TK14UR020693 Message accepted for delivery)
|
|
Mar 29 13:01:06 splunk3 sendmail[20694]: n2TK14UR020693: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:01:12 splunk3 sendmail[20733]: n2TK1Cks020733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:01:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:02:12 splunk3 sendmail[20974]: n2TK2C2x020974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:03:12 splunk3 sendmail[21213]: n2TK3CV6021213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:03:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:04:12 splunk3 sendmail[21453]: n2TK4CrC021453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:05:12 splunk3 sendmail[21692]: n2TK5Cs0021692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:05:27 splunk3 sendmail[21760]: n2TK5R8l021760: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292005.n2TK5RBC031001@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:05:27 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50807
|
|
Mar 29 13:05:27 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:05:27 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 13:05:27 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 13:05:27 splunk3 sendmail[21761]: n2TK5R8l021760: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:05:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:06:12 splunk3 sendmail[21939]: n2TK6Cu4021939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:06:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:07:12 splunk3 sendmail[22183]: n2TK7CXS022183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:08:12 splunk3 sendmail[22422]: n2TK8CEs022422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:08:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:09:12 splunk3 sendmail[22666]: n2TK9CY0022666: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:10:03 splunk3 sendmail[22965]: n2TKA3un022965: from=root, size=292, class=0, nrcpts=1, msgid=<200903292010.n2TKA3un022965@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 13:10:03 splunk3 sendmail[22970]: n2TKA34r022970: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903292010.n2TKA3un022965@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 13:10:03 splunk3 sendmail[22965]: n2TKA3un022965: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TKA34r022970 Message accepted for delivery)
|
|
Mar 29 13:10:04 splunk3 sendmail[22971]: n2TKA34r022970: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:10:12 splunk3 sendmail[23011]: n2TKACVk023011: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:10:28 splunk3 sendmail[23082]: n2TKASPC023082: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292010.n2TKAR3d031601@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:10:28 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50863
|
|
Mar 29 13:10:28 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:10:28 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:10:28 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:10:28 splunk3 spamd[16743]: spamd: processing message <200903292010.n2TKAR3d031601@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:10:30 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 13:10:30 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50863,mid=<200903292010.n2TKAR3d031601@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 13:10:30 splunk3 sendmail[23083]: n2TKASPC023082: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:10:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:11:12 splunk3 sendmail[23265]: n2TKBCAh023265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 13:11:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:12:12 splunk3 sendmail[23507]: n2TKCCK4023507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:13:12 splunk3 sendmail[23746]: n2TKDCFj023746: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:13:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:14:12 splunk3 sendmail[23985]: n2TKECem023985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:15:12 splunk3 sendmail[24221]: n2TKFCxE024221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:15:29 splunk3 sendmail[24293]: n2TKFTxb024293: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292015.n2TKFSQ9032422@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:15:29 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50920
|
|
Mar 29 13:15:29 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:15:29 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:15:29 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:15:29 splunk3 spamd[16743]: spamd: processing message <200903292015.n2TKFSQ9032422@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:15:31 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 13:15:31 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50920,mid=<200903292015.n2TKFSQ9032422@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 13:15:31 splunk3 sendmail[24294]: n2TKFTxb024293: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:15:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:16:12 splunk3 sendmail[24472]: n2TKGCOp024472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:16:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:17:12 splunk3 sendmail[24714]: n2TKHCTH024714: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:18:12 splunk3 sendmail[24947]: n2TKICAn024947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:18:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:19:12 splunk3 sendmail[25192]: n2TKJCBZ025192: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:20:12 splunk3 sendmail[25430]: n2TKKCNP025430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:20:29 splunk3 sendmail[25498]: n2TKKTcj025498: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903292020.n2TKKTTq000568@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:20:29 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50975
|
|
Mar 29 13:20:29 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:20:29 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:20:29 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:20:29 splunk3 spamd[16743]: spamd: processing message <200903292020.n2TKKTTq000568@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:20:31 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1305 bytes.
|
|
Mar 29 13:20:31 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50975,mid=<200903292020.n2TKKTTq000568@virt2.int.splunk.com>,bayes=0.0664452396620597,autolearn=no
|
|
Mar 29 13:20:31 splunk3 sendmail[25499]: n2TKKTcj025498: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:20:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:20:41 splunk3 sendmail[25548]: n2TKKehi025548: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=124-11-188-187.static.tfn.net.tw [124.11.188.187], reject=550 5.7.1 <bibiorm@gmail.com>... Relaying denied
|
|
Mar 29 13:21:12 splunk3 sendmail[25682]: n2TKLCh4025682: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:21:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:22:12 splunk3 sendmail[25922]: n2TKMCgm025922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:23:12 splunk3 sendmail[26166]: n2TKNCpF026166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:23:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:24:12 splunk3 sendmail[26405]: n2TKOCs2026405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:25:12 splunk3 sendmail[26645]: n2TKPCx7026645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:25:30 splunk3 sendmail[26714]: n2TKPTc9026714: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292025.n2TKPTpo001202@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:25:30 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51031
|
|
Mar 29 13:25:30 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:25:30 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:25:30 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:25:30 splunk3 spamd[16743]: spamd: processing message <200903292025.n2TKPTpo001202@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:25:32 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 29 13:25:32 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51031,mid=<200903292025.n2TKPTpo001202@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 13:25:32 splunk3 sendmail[26715]: n2TKPTc9026714: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:25:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:26:12 splunk3 sendmail[26894]: n2TKQCv1026894: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 13:26:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:27:12 splunk3 sendmail[27140]: n2TKRCUE027140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:28:12 splunk3 sendmail[27374]: n2TKSCVL027374: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:28:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:29:12 splunk3 sendmail[27616]: n2TKTCar027616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:30:00 splunk3 sendmail[27795]: n2TKU0d1027795: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292030.n2TKU08K001758@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:30:00 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51076
|
|
Mar 29 13:30:00 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:30:00 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:30:00 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:30:00 splunk3 spamd[16743]: spamd: processing message <200903292030.n2TKU08K001758@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:30:02 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Mar 29 13:30:02 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51076,mid=<200903292030.n2TKU08K001758@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 13:30:02 splunk3 sendmail[27796]: n2TKU0d1027795: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:30:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:30:12 splunk3 sendmail[27863]: n2TKUCDH027863: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:31:12 splunk3 sendmail[28112]: n2TKVCAM028112: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:31:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:32:12 splunk3 sendmail[28352]: n2TKWCru028352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:33:12 splunk3 sendmail[28590]: n2TKXClH028590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:33:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:34:12 splunk3 sendmail[28831]: n2TKYCFF028831: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:35:01 splunk3 sendmail[29031]: n2TKZ1BY029031: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292035.n2TKZ0aY002520@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:35:01 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51131
|
|
Mar 29 13:35:01 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:35:01 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:35:01 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:35:01 splunk3 spamd[16743]: spamd: processing message <200903292035.n2TKZ0aY002520@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:35:03 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 13:35:03 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51131,mid=<200903292035.n2TKZ0aY002520@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 13:35:03 splunk3 sendmail[29032]: n2TKZ1BY029031: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:35:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:35:12 splunk3 sendmail[29074]: n2TKZCwM029074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:36:12 splunk3 sendmail[29317]: n2TKaCBo029317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:36:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:37:12 splunk3 sendmail[29562]: n2TKbCVd029562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:38:12 splunk3 sendmail[29800]: n2TKcCE7029800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:38:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:39:12 splunk3 sendmail[30044]: n2TKdCcU030044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:40:02 splunk3 sendmail[30248]: n2TKe2Ur030248: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292040.n2TKe1t0003169@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:40:02 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51187
|
|
Mar 29 13:40:02 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:40:02 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:40:02 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:40:02 splunk3 spamd[16743]: spamd: processing message <200903292040.n2TKe1t0003169@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:40:04 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 29 13:40:04 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51187,mid=<200903292040.n2TKe1t0003169@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 13:40:04 splunk3 sendmail[30249]: n2TKe2Ur030248: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:40:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:40:12 splunk3 sendmail[30292]: n2TKeCxb030292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:41:12 splunk3 sendmail[30540]: n2TKfC3L030540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 13:41:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:42:12 splunk3 sendmail[30780]: n2TKgCk3030780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:43:12 splunk3 sendmail[31020]: n2TKhCuI031020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:43:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:44:12 splunk3 sendmail[31259]: n2TKiCEu031259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:45:02 splunk3 sendmail[31463]: n2TKj29S031463: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292045.n2TKj2JB003800@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:45:02 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51243
|
|
Mar 29 13:45:02 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:45:02 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:45:02 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:45:02 splunk3 spamd[16743]: spamd: processing message <200903292045.n2TKj2JB003800@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:45:04 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 13:45:04 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51243,mid=<200903292045.n2TKj2JB003800@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 13:45:04 splunk3 sendmail[31464]: n2TKj29S031463: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:45:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:45:12 splunk3 sendmail[31503]: n2TKjCKt031503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:46:12 splunk3 sendmail[31749]: n2TKkCiX031749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:46:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:47:12 splunk3 sendmail[31993]: n2TKlCqX031993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:48:12 splunk3 sendmail[32228]: n2TKmC3h032228: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:48:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:49:12 splunk3 sendmail[32470]: n2TKnCZm032470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:50:03 splunk3 sendmail[32675]: n2TKo3WR032675: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292050.n2TKo2De004411@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:50:03 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51299
|
|
Mar 29 13:50:03 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:50:03 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:50:03 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:50:03 splunk3 spamd[16743]: spamd: processing message <200903292050.n2TKo2De004411@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:50:05 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 29 13:50:05 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51299,mid=<200903292050.n2TKo2De004411@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 13:50:05 splunk3 sendmail[32676]: n2TKo3WR032675: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:50:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:50:12 splunk3 sendmail[32716]: n2TKoCmh032716: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:51:12 splunk3 sendmail[496]: n2TKpCxo000496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:51:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:52:12 splunk3 sendmail[736]: n2TKqCTS000736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:53:12 splunk3 sendmail[980]: n2TKrCIv000980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:53:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:54:12 splunk3 sendmail[1218]: n2TKsCH3001218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:55:03 splunk3 sendmail[1420]: n2TKt36M001420: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292055.n2TKt3FN005028@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 13:55:03 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51355
|
|
Mar 29 13:55:03 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 13:55:03 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 13:55:03 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 13:55:03 splunk3 spamd[16743]: spamd: processing message <200903292055.n2TKt3FN005028@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 13:55:05 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 29 13:55:05 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51355,mid=<200903292055.n2TKt3FN005028@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 13:55:05 splunk3 sendmail[1421]: n2TKt36M001420: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 13:55:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 13:55:12 splunk3 sendmail[1465]: n2TKtCho001465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:56:12 splunk3 sendmail[1706]: n2TKuCUL001706: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 13:56:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 13:57:12 splunk3 sendmail[1951]: n2TKvC2a001951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:58:12 splunk3 sendmail[2189]: n2TKwCbk002189: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 13:58:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 13:59:12 splunk3 sendmail[2431]: n2TKxC3U002431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:00:04 splunk3 sendmail[2695]: n2TL04Hp002695: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292100.n2TL03qY005666@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:00:04 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51411
|
|
Mar 29 14:00:04 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:00:04 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 14:00:04 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 14:00:04 splunk3 sendmail[2696]: n2TL04Hp002695: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:00:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:00:05 splunk3 sendmail[2712]: n2TL05tP002712: from=root, size=291, class=0, nrcpts=1, msgid=<200903292100.n2TL05tP002712@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 14:00:05 splunk3 sendmail[2716]: n2TL05ZD002716: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903292100.n2TL05tP002712@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 14:00:05 splunk3 sendmail[2712]: n2TL05tP002712: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TL05ZD002716 Message accepted for delivery)
|
|
Mar 29 14:00:06 splunk3 sendmail[2730]: n2TL05ZD002716: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:00:12 splunk3 sendmail[2760]: n2TL0C1q002760: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:00:21 splunk3 sendmail[2811]: n2TL0LFX002811: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903292100.n2TL0LFX002811@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 14:00:22 splunk3 sendmail[2813]: n2TL0LFX002811: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 14:00:22 splunk3 sendmail[2813]: n2TL0LFX002811: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 29 14:00:22 splunk3 sendmail[2813]: n2TL0LFX002811: n2TL0MFX002813: postmaster notify: User unknown
|
|
Mar 29 14:00:23 splunk3 sendmail[2813]: n2TL0MFX002813: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:01:12 splunk3 sendmail[2998]: n2TL11rN002998: from=root, size=443, class=0, nrcpts=1, msgid=<200903292101.n2TL11rN002998@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 14:01:12 splunk3 sendmail[3043]: n2TL1Cqi003043: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903292101.n2TL11rN002998@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 14:01:12 splunk3 sendmail[2998]: n2TL11rN002998: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TL1Cqi003043 Message accepted for delivery)
|
|
Mar 29 14:01:12 splunk3 sendmail[3048]: n2TL1C1q003048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:01:13 splunk3 sendmail[3044]: n2TL1Cqi003043: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:01:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:02:12 splunk3 sendmail[3292]: n2TL2Cs4003292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:03:12 splunk3 sendmail[3528]: n2TL3CNb003528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:03:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:04:12 splunk3 sendmail[3797]: n2TL4C1T003797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:05:04 splunk3 sendmail[4008]: n2TL54hH004008: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292105.n2TL54wa006352@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:05:04 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51476
|
|
Mar 29 14:05:04 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:05:04 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 14:05:04 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 14:05:04 splunk3 sendmail[4009]: n2TL54hH004008: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:05:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:05:12 splunk3 sendmail[4051]: n2TL5CtW004051: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:06:12 splunk3 sendmail[4308]: n2TL6Chd004308: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:06:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:07:12 splunk3 sendmail[4560]: n2TL7CwE004560: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:08:12 splunk3 sendmail[4799]: n2TL8Cor004799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:08:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:09:12 splunk3 sendmail[5055]: n2TL9C4Y005055: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:10:02 splunk3 sendmail[5388]: n2TLA2l1005388: from=root, size=292, class=0, nrcpts=1, msgid=<200903292110.n2TLA2l1005388@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 14:10:02 splunk3 sendmail[5393]: n2TLA2Sd005393: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903292110.n2TLA2l1005388@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 14:10:02 splunk3 sendmail[5388]: n2TLA2l1005388: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TLA2Sd005393 Message accepted for delivery)
|
|
Mar 29 14:10:03 splunk3 sendmail[5394]: n2TLA2Sd005393: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:10:05 splunk3 sendmail[5416]: n2TLA5TI005416: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292110.n2TLA5ut006966@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:10:05 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51532
|
|
Mar 29 14:10:05 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:10:05 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:10:05 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:10:05 splunk3 spamd[16743]: spamd: processing message <200903292110.n2TLA5ut006966@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:10:07 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 14:10:07 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51532,mid=<200903292110.n2TLA5ut006966@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 14:10:07 splunk3 sendmail[5417]: n2TLA5TI005416: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:10:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:10:12 splunk3 sendmail[5441]: n2TLAC8H005441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:11:12 splunk3 sendmail[5687]: n2TLBCoJ005687: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 14:11:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:12:12 splunk3 sendmail[5929]: n2TLCC1j005929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:13:12 splunk3 sendmail[6168]: n2TLDCv0006168: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:13:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:14:12 splunk3 sendmail[6408]: n2TLECo9006408: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:15:06 splunk3 sendmail[6627]: n2TLF6VD006627: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292115.n2TLF5Vw007762@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:15:06 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51589
|
|
Mar 29 14:15:06 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:15:06 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:15:06 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:15:06 splunk3 spamd[16743]: spamd: processing message <200903292115.n2TLF5Vw007762@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:15:08 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 29 14:15:08 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51589,mid=<200903292115.n2TLF5Vw007762@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 14:15:08 splunk3 sendmail[6628]: n2TLF6VD006627: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:15:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:15:12 splunk3 sendmail[6653]: n2TLFC1n006653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:16:12 splunk3 sendmail[6899]: n2TLGC7D006899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:16:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:17:12 splunk3 sendmail[7140]: n2TLHCNR007140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:18:12 splunk3 sendmail[7375]: n2TLICje007375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:18:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:19:12 splunk3 sendmail[7628]: n2TLJCbY007628: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:20:08 splunk3 sendmail[7850]: n2TLK8Bt007850: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292120.n2TLK6K9008390@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:20:08 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51645
|
|
Mar 29 14:20:08 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:20:08 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:20:08 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:20:08 splunk3 spamd[16743]: spamd: processing message <200903292120.n2TLK6K9008390@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:20:10 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 14:20:10 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51645,mid=<200903292120.n2TLK6K9008390@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 14:20:10 splunk3 sendmail[7851]: n2TLK8Bt007850: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:20:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:20:12 splunk3 sendmail[7874]: n2TLKC9I007874: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:20:41 splunk3 sendmail[25548]: n2TKKehi025548: timeout waiting for input from 124-11-188-187.static.tfn.net.tw during server cmd read
|
|
Mar 29 14:20:41 splunk3 sendmail[25548]: n2TKKehi025548: lost input channel from 124-11-188-187.static.tfn.net.tw [124.11.188.187] to MTA after rcpt
|
|
Mar 29 14:20:41 splunk3 sendmail[25548]: n2TKKehi025548: from=<logen6699@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=124-11-188-187.static.tfn.net.tw [124.11.188.187]
|
|
Mar 29 14:21:12 splunk3 sendmail[8122]: n2TLLCQu008122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:21:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:22:12 splunk3 sendmail[8364]: n2TLMCTk008364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:23:12 splunk3 sendmail[8607]: n2TLNCiV008607: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:23:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:24:12 splunk3 sendmail[8843]: n2TLOCSn008843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:25:09 splunk3 sendmail[9066]: n2TLP9VC009066: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292125.n2TLP9lD009008@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:25:09 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51700
|
|
Mar 29 14:25:09 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:25:09 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:25:09 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:25:09 splunk3 spamd[16743]: spamd: processing message <200903292125.n2TLP9lD009008@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:25:11 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 14:25:11 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51700,mid=<200903292125.n2TLP9lD009008@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 14:25:11 splunk3 sendmail[9067]: n2TLP9VC009066: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:25:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:25:12 splunk3 sendmail[9089]: n2TLPCbF009089: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:26:12 splunk3 sendmail[9333]: n2TLQCGX009333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 14:26:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:27:12 splunk3 sendmail[9587]: n2TLRCPG009587: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:28:13 splunk3 sendmail[9820]: n2TLSCkj009820: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:28:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:29:13 splunk3 sendmail[10063]: n2TLTD3s010063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:30:10 splunk3 sendmail[10300]: n2TLUA8X010300: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903292130.n2TLUAX6009627@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:30:10 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51757
|
|
Mar 29 14:30:10 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:30:10 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:30:10 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:30:10 splunk3 spamd[16743]: spamd: processing message <200903292130.n2TLUAX6009627@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:30:12 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 29 14:30:12 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51757,mid=<200903292130.n2TLUAX6009627@virt2.int.splunk.com>,bayes=0.169338149763401,autolearn=no
|
|
Mar 29 14:30:12 splunk3 sendmail[10302]: n2TLUA8X010300: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:30:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:30:13 splunk3 sendmail[10309]: n2TLUDS9010309: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:31:13 splunk3 sendmail[10556]: n2TLVDlX010556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:31:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:32:13 splunk3 sendmail[10796]: n2TLWDqd010796: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:33:13 splunk3 sendmail[11036]: n2TLXDJ2011036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:33:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:34:13 splunk3 sendmail[11275]: n2TLYDq7011275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:35:11 splunk3 sendmail[11513]: n2TLZB7A011513: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292135.n2TLZB65010379@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:35:11 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51813
|
|
Mar 29 14:35:11 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:35:11 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:35:11 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:35:11 splunk3 spamd[16743]: spamd: processing message <200903292135.n2TLZB65010379@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:35:13 splunk3 sendmail[11520]: n2TLZDYC011520: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:35:13 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 29 14:35:13 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51813,mid=<200903292135.n2TLZB65010379@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 14:35:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:35:13 splunk3 sendmail[11514]: n2TLZB7A011513: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:36:13 splunk3 sendmail[11764]: n2TLaDkG011764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:36:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:37:13 splunk3 sendmail[12009]: n2TLbDvU012009: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:38:13 splunk3 sendmail[12246]: n2TLcDZv012246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:38:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:39:13 splunk3 sendmail[12489]: n2TLdDhH012489: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:40:13 splunk3 sendmail[12731]: n2TLeDld012731: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:40:14 splunk3 sendmail[12732]: n2TLeEr3012732: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292140.n2TLeBdR011010@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:40:14 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51868
|
|
Mar 29 14:40:14 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:40:14 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:40:14 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:40:14 splunk3 spamd[16743]: spamd: processing message <200903292140.n2TLeBdR011010@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:40:16 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 14:40:16 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51868,mid=<200903292140.n2TLeBdR011010@virt2.int.splunk.com>,bayes=0.11240232327094,autolearn=no
|
|
Mar 29 14:40:16 splunk3 sendmail[12734]: n2TLeEr3012732: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:40:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:41:13 splunk3 sendmail[12984]: n2TLfDUw012984: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 14:41:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:42:13 splunk3 sendmail[13225]: n2TLgDsq013225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:43:13 splunk3 sendmail[13502]: n2TLhD2M013502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:43:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:43:42 splunk3 sendmail[13625]: n2TLhgGc013625: from=<3jevPSRQKBpI2AA270w70DFE-9AD0B7K2AA270.yA8EBw880EB7G964F.yA8@alerts.bounces.google.com>, size=2744, class=0, nrcpts=1, msgid=<001636284800076e62046648dc1b@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.190]
|
|
Mar 29 14:43:42 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51911
|
|
Mar 29 14:43:42 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:43:42 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:43:42 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:43:42 splunk3 spamd[16743]: spamd: processing message <001636284800076e62046648dc1b@google.com> for spamme:501
|
|
Mar 29 14:43:45 splunk3 spamd[16743]: spamd: clean message (-2.4/5.0) for spamme:501 in 3.2 seconds, 3175 bytes.
|
|
Mar 29 14:43:45 splunk3 spamd[16743]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=3.2,size=3175,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51911,mid=<001636284800076e62046648dc1b@google.com>,bayes=0,autolearn=ham
|
|
Mar 29 14:43:45 splunk3 sendmail[13626]: n2TLhgGc013625: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=32956, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:43:45 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:44:13 splunk3 sendmail[13747]: n2TLiDII013747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:45:13 splunk3 sendmail[13984]: n2TLjDEI013984: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:45:14 splunk3 sendmail[14002]: n2TLjEBn014002: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292145.n2TLjEBd011629@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:45:14 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51926
|
|
Mar 29 14:45:14 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:45:14 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:45:14 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:45:14 splunk3 spamd[16743]: spamd: processing message <200903292145.n2TLjEBd011629@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:45:16 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 14:45:16 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51926,mid=<200903292145.n2TLjEBd011629@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 14:45:16 splunk3 sendmail[14003]: n2TLjEBn014002: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:45:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:46:13 splunk3 sendmail[14235]: n2TLkDjF014235: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:46:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:47:13 splunk3 sendmail[14478]: n2TLlDTu014478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:48:13 splunk3 sendmail[14712]: n2TLmDuK014712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:48:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:49:13 splunk3 sendmail[14956]: n2TLnDxu014956: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:50:13 splunk3 sendmail[15197]: n2TLoD18015197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:50:15 splunk3 sendmail[15215]: n2TLoFJS015215: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292150.n2TLoFdI012242@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:50:15 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51981
|
|
Mar 29 14:50:15 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:50:15 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:50:15 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:50:15 splunk3 spamd[16743]: spamd: processing message <200903292150.n2TLoFdI012242@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:50:17 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 14:50:17 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51981,mid=<200903292150.n2TLoFdI012242@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 14:50:17 splunk3 sendmail[15216]: n2TLoFJS015215: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:50:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:51:13 splunk3 sendmail[15451]: n2TLpD2L015451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:51:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:52:13 splunk3 sendmail[15691]: n2TLqDCG015691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:53:13 splunk3 sendmail[15934]: n2TLrDq5015934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:53:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:54:13 splunk3 sendmail[16173]: n2TLsD6F016173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:55:13 splunk3 sendmail[16412]: n2TLtD6g016412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:55:16 splunk3 sendmail[16431]: n2TLtGKE016431: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292155.n2TLtFjl012854@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 14:55:16 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52037
|
|
Mar 29 14:55:16 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 14:55:16 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 14:55:16 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 14:55:16 splunk3 spamd[16743]: spamd: processing message <200903292155.n2TLtFjl012854@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 14:55:18 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 14:55:18 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52037,mid=<200903292155.n2TLtFjl012854@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 14:55:18 splunk3 sendmail[16432]: n2TLtGKE016431: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 14:55:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 14:56:13 splunk3 sendmail[16662]: n2TLuDrm016662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 14:56:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 14:57:13 splunk3 sendmail[16908]: n2TLvDjD016908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:58:13 splunk3 sendmail[17142]: n2TLwDP9017142: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 14:58:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 14:59:13 splunk3 sendmail[17383]: n2TLxDjt017383: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:00:04 splunk3 sendmail[17648]: n2TM04Oh017648: from=root, size=291, class=0, nrcpts=1, msgid=<200903292200.n2TM04Oh017648@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 15:00:04 splunk3 sendmail[17652]: n2TM04qO017652: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903292200.n2TM04Oh017648@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 15:00:04 splunk3 sendmail[17648]: n2TM04Oh017648: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TM04qO017652 Message accepted for delivery)
|
|
Mar 29 15:00:05 splunk3 sendmail[17653]: n2TM04qO017652: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:00:13 splunk3 sendmail[17692]: n2TM0DxL017692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:00:16 splunk3 sendmail[17710]: n2TM0GWB017710: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292200.n2TM0GpP013487@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:00:16 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52095
|
|
Mar 29 15:00:16 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:00:16 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 15:00:16 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 15:00:16 splunk3 sendmail[17711]: n2TM0GWB017710: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:00:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:00:27 splunk3 sendmail[17766]: n2TM0RZk017766: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903292200.n2TM0RZk017766@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 15:00:27 splunk3 sendmail[17768]: n2TM0RZk017766: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 15:00:27 splunk3 sendmail[17768]: n2TM0RZk017766: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 15:00:27 splunk3 sendmail[17768]: n2TM0RZk017766: n2TM0RZk017768: postmaster notify: User unknown
|
|
Mar 29 15:00:28 splunk3 sendmail[17768]: n2TM0RZk017768: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:01:13 splunk3 sendmail[17970]: n2TM1DZJ017970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:01:13 splunk3 sendmail[17929]: n2TM11j5017929: from=root, size=443, class=0, nrcpts=1, msgid=<200903292201.n2TM11j5017929@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 15:01:13 splunk3 sendmail[17971]: n2TM1D1K017971: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903292201.n2TM11j5017929@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 15:01:13 splunk3 sendmail[17929]: n2TM11j5017929: to=root, ctladdr=root (0/0), delay=00:00:12, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TM1D1K017971 Message accepted for delivery)
|
|
Mar 29 15:01:15 splunk3 sendmail[17972]: n2TM1D1K017971: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:01:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:02:13 splunk3 sendmail[18213]: n2TM2DNP018213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:03:13 splunk3 sendmail[18453]: n2TM3DEE018453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:03:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:04:13 splunk3 sendmail[18692]: n2TM4DIB018692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:05:13 splunk3 sendmail[18930]: n2TM5D4A018930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:05:17 splunk3 sendmail[18949]: n2TM5HGa018949: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292205.n2TM5GKi014168@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:05:17 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52158
|
|
Mar 29 15:05:17 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:05:17 splunk3 spamd[16743]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 15:05:17 splunk3 spamd[16743]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 15:05:17 splunk3 sendmail[18950]: n2TM5HGa018949: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:05:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:06:13 splunk3 sendmail[19178]: n2TM6DKf019178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:06:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:07:13 splunk3 sendmail[19423]: n2TM7D8K019423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:08:13 splunk3 sendmail[19662]: n2TM8DUs019662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:08:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:09:13 splunk3 sendmail[19908]: n2TM9DWU019908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:10:02 splunk3 sendmail[20204]: n2TMA2k3020204: from=root, size=292, class=0, nrcpts=1, msgid=<200903292210.n2TMA2k3020204@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 15:10:02 splunk3 sendmail[20209]: n2TMA2dR020209: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903292210.n2TMA2k3020204@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 15:10:02 splunk3 sendmail[20204]: n2TMA2k3020204: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TMA2dR020209 Message accepted for delivery)
|
|
Mar 29 15:10:03 splunk3 sendmail[20210]: n2TMA2dR020209: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:10:13 splunk3 sendmail[20252]: n2TMADkh020252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:10:18 splunk3 sendmail[20272]: n2TMAIEh020272: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292210.n2TMAH8G014781@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:10:18 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52215
|
|
Mar 29 15:10:18 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:10:18 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:10:18 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:10:18 splunk3 spamd[16743]: spamd: processing message <200903292210.n2TMAH8G014781@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:10:20 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 29 15:10:20 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52215,mid=<200903292210.n2TMAH8G014781@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:10:20 splunk3 sendmail[20273]: n2TMAIEh020272: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:10:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:11:13 splunk3 sendmail[20507]: n2TMBDdN020507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 15:11:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:12:13 splunk3 sendmail[20747]: n2TMCDlp020747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:13:13 splunk3 sendmail[20991]: n2TMDDYB020991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:13:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:14:13 splunk3 sendmail[21229]: n2TMEDfi021229: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:15:13 splunk3 sendmail[21466]: n2TMFDk0021466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:15:18 splunk3 sendmail[21484]: n2TMFIQG021484: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292215.n2TMFI0b015579@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:15:18 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52271
|
|
Mar 29 15:15:18 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:15:18 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:15:18 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:15:18 splunk3 spamd[16743]: spamd: processing message <200903292215.n2TMFI0b015579@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:15:20 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 15:15:20 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52271,mid=<200903292215.n2TMFI0b015579@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:15:20 splunk3 sendmail[21486]: n2TMFIQG021484: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:15:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:16:13 splunk3 sendmail[21715]: n2TMGDlx021715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:16:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:17:13 splunk3 sendmail[21958]: n2TMHDcY021958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:18:13 splunk3 sendmail[22193]: n2TMIDWM022193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:18:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:19:13 splunk3 sendmail[22435]: n2TMJDRd022435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:20:13 splunk3 sendmail[22676]: n2TMKDNl022676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:20:19 splunk3 sendmail[22713]: n2TMKJvV022713: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292220.n2TMKJ2n016211@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:20:19 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52327
|
|
Mar 29 15:20:19 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:20:19 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:20:19 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:20:19 splunk3 spamd[16743]: spamd: processing message <200903292220.n2TMKJ2n016211@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:20:21 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 15:20:21 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52327,mid=<200903292220.n2TMKJ2n016211@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:20:21 splunk3 sendmail[22714]: n2TMKJvV022713: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:20:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:21:13 splunk3 sendmail[22929]: n2TMLDxQ022929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:21:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:22:13 splunk3 sendmail[23170]: n2TMMD23023170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:23:13 splunk3 sendmail[23412]: n2TMNDur023412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:23:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:24:13 splunk3 sendmail[23651]: n2TMODVc023651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:25:13 splunk3 sendmail[23891]: n2TMPDbn023891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:25:20 splunk3 sendmail[23926]: n2TMPKWC023926: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292225.n2TMPJQi016828@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:25:20 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52382
|
|
Mar 29 15:25:20 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:25:20 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:25:20 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:25:20 splunk3 spamd[16743]: spamd: processing message <200903292225.n2TMPJQi016828@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:25:22 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 15:25:22 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52382,mid=<200903292225.n2TMPJQi016828@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:25:22 splunk3 sendmail[23927]: n2TMPKWC023926: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:25:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:26:13 splunk3 sendmail[24143]: n2TMQDIo024143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 15:26:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:27:13 splunk3 sendmail[24388]: n2TMRDl7024388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:28:13 splunk3 sendmail[24625]: n2TMSDWI024625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:28:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:29:13 splunk3 sendmail[24867]: n2TMTDb1024867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:30:13 splunk3 sendmail[25115]: n2TMUDb9025115: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:30:20 splunk3 sendmail[25151]: n2TMUKms025151: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292230.n2TMUKdI017451@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:30:20 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52447
|
|
Mar 29 15:30:20 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:30:20 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:30:20 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:30:20 splunk3 spamd[16743]: spamd: processing message <200903292230.n2TMUKdI017451@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:30:22 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 15:30:22 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52447,mid=<200903292230.n2TMUKdI017451@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:30:22 splunk3 sendmail[25152]: n2TMUKms025151: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:30:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:31:13 splunk3 sendmail[25361]: n2TMVDvh025361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:31:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:32:13 splunk3 sendmail[25600]: n2TMWDjT025600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:33:13 splunk3 sendmail[25837]: n2TMXD5f025837: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:33:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:34:13 splunk3 sendmail[26077]: n2TMYDG5026077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:35:13 splunk3 sendmail[26324]: n2TMZDOv026324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:35:21 splunk3 sendmail[26361]: n2TMZLqO026361: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292235.n2TMZKwY018193@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:35:21 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52502
|
|
Mar 29 15:35:21 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:35:21 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:35:21 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:35:21 splunk3 spamd[16743]: spamd: processing message <200903292235.n2TMZKwY018193@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:35:23 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 15:35:23 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52502,mid=<200903292235.n2TMZKwY018193@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:35:23 splunk3 sendmail[26362]: n2TMZLqO026361: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:36:13 splunk3 sendmail[26565]: n2TMaDUm026565: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:36:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:37:13 splunk3 sendmail[26809]: n2TMbDoC026809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:38:13 splunk3 sendmail[27048]: n2TMcDQ7027048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:38:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:39:13 splunk3 sendmail[27290]: n2TMdDop027290: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:40:13 splunk3 sendmail[27539]: n2TMeDVv027539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:40:21 splunk3 sendmail[27578]: n2TMeLC7027578: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292240.n2TMeLbu018833@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:40:21 splunk3 spamd[16743]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52558
|
|
Mar 29 15:40:21 splunk3 spamd[16743]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:40:21 splunk3 spamd[16743]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:40:21 splunk3 spamd[16743]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:40:21 splunk3 spamd[16743]: spamd: processing message <200903292240.n2TMeLbu018833@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:40:23 splunk3 spamd[16743]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 15:40:23 splunk3 spamd[16743]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52558,mid=<200903292240.n2TMeLbu018833@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:40:23 splunk3 sendmail[27579]: n2TMeLC7027578: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:40:23 splunk3 spamd[3033]: prefork: child states: BI
|
|
Mar 29 15:40:23 splunk3 spamd[3033]: spamd: handled cleanup of child pid 16743 due to SIGCHLD
|
|
Mar 29 15:40:23 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 27585
|
|
Mar 29 15:40:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:41:13 splunk3 sendmail[27786]: n2TMfD2x027786: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 15:41:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:42:13 splunk3 sendmail[28028]: n2TMgD5m028028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:43:13 splunk3 sendmail[28268]: n2TMhDof028268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:43:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:44:13 splunk3 sendmail[28507]: n2TMiDZM028507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:45:13 splunk3 sendmail[28754]: n2TMjDJK028754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:45:22 splunk3 sendmail[28793]: n2TMjM0L028793: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292245.n2TMjLgv019440@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:45:22 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52615
|
|
Mar 29 15:45:22 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:45:22 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:45:22 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:45:22 splunk3 spamd[27585]: spamd: processing message <200903292245.n2TMjLgv019440@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:45:24 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 15:45:24 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52615,mid=<200903292245.n2TMjLgv019440@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:45:24 splunk3 sendmail[28794]: n2TMjM0L028793: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:45:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:46:13 splunk3 sendmail[28996]: n2TMkDIj028996: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:46:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:47:13 splunk3 sendmail[29239]: n2TMlDIk029239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:48:13 splunk3 sendmail[29472]: n2TMmD2O029472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:48:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:49:13 splunk3 sendmail[29716]: n2TMnDFc029716: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:50:13 splunk3 sendmail[29966]: n2TMoDaG029966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:50:23 splunk3 sendmail[30004]: n2TMoNQ6030004: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292250.n2TMoMAZ020053@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:50:23 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52670
|
|
Mar 29 15:50:23 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:50:23 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:50:23 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:50:23 splunk3 spamd[27585]: spamd: processing message <200903292250.n2TMoMAZ020053@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:50:25 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 15:50:25 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52670,mid=<200903292250.n2TMoMAZ020053@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:50:25 splunk3 sendmail[30005]: n2TMoNQ6030004: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:51:13 splunk3 sendmail[30208]: n2TMpDXg030208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:51:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:52:13 splunk3 sendmail[30447]: n2TMqDex030447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:53:13 splunk3 sendmail[30689]: n2TMrDx5030689: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:53:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:54:13 splunk3 sendmail[30928]: n2TMsD60030928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:55:13 splunk3 sendmail[31175]: n2TMtDI0031175: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:55:23 splunk3 sendmail[31215]: n2TMtNaE031215: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292255.n2TMtN7m020658@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 15:55:23 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52726
|
|
Mar 29 15:55:23 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 15:55:23 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 15:55:23 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 15:55:23 splunk3 spamd[27585]: spamd: processing message <200903292255.n2TMtN7m020658@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 15:55:25 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 29 15:55:25 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52726,mid=<200903292255.n2TMtN7m020658@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 15:55:25 splunk3 sendmail[31218]: n2TMtNaE031215: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 15:55:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 15:56:13 splunk3 sendmail[31416]: n2TMuDel031416: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 15:56:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 15:57:13 splunk3 sendmail[31662]: n2TMvD1Z031662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:58:13 splunk3 sendmail[31906]: n2TMwD7Z031906: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 15:58:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 15:59:13 splunk3 sendmail[32148]: n2TMxDkS032148: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:00:04 splunk3 sendmail[32415]: n2TN04WQ032415: from=root, size=291, class=0, nrcpts=1, msgid=<200903292300.n2TN04WQ032415@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 16:00:04 splunk3 sendmail[32419]: n2TN043X032419: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903292300.n2TN04WQ032415@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 16:00:04 splunk3 sendmail[32415]: n2TN04WQ032415: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TN043X032419 Message accepted for delivery)
|
|
Mar 29 16:00:04 splunk3 sendmail[32436]: n2TN04WW032436: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903292300.n2TN04WW032436@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 16:00:04 splunk3 sendmail[32438]: n2TN04WW032436: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 16:00:04 splunk3 sendmail[32438]: n2TN04WW032436: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 16:00:04 splunk3 sendmail[32438]: n2TN04WW032436: n2TN04WW032438: postmaster notify: User unknown
|
|
Mar 29 16:00:05 splunk3 sendmail[32422]: n2TN043X032419: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:00:13 splunk3 sendmail[32485]: n2TN0Dcq032485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:00:14 splunk3 sendmail[32438]: n2TN04WW032438: to=root, delay=00:00:10, xdelay=00:00:10, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:00:24 splunk3 sendmail[32528]: n2TN0OYL032528: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292300.n2TN0NKd021305@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:00:24 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52790
|
|
Mar 29 16:00:24 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:00:24 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 16:00:24 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 16:00:24 splunk3 sendmail[32529]: n2TN0OYL032528: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:01:07 splunk3 sendmail[32679]: n2TN11Q9032679: from=root, size=443, class=0, nrcpts=1, msgid=<200903292301.n2TN11Q9032679@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 16:01:07 splunk3 sendmail[32705]: n2TN17Mj032705: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903292301.n2TN11Q9032679@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 16:01:07 splunk3 sendmail[32679]: n2TN11Q9032679: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TN17Mj032705 Message accepted for delivery)
|
|
Mar 29 16:01:08 splunk3 sendmail[32706]: n2TN17Mj032705: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:01:13 splunk3 sendmail[32735]: n2TN1D4x032735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:01:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:02:13 splunk3 sendmail[517]: n2TN2DB5000517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:03:13 splunk3 sendmail[745]: n2TN3DeY000745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:03:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:04:13 splunk3 sendmail[996]: n2TN4D2x000996: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:05:13 splunk3 sendmail[1230]: n2TN5DE4001230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:05:24 splunk3 sendmail[1280]: n2TN5OWE001280: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292305.n2TN5O4l021984@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:05:24 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52847
|
|
Mar 29 16:05:24 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:05:24 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 16:05:24 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 16:05:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:05:24 splunk3 sendmail[1281]: n2TN5OWE001280: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:06:13 splunk3 sendmail[1480]: n2TN6Dre001480: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:06:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:07:01 splunk3 sendmail[1639]: n2TN6tZI001639: from=<spamme@splunkit.com>, size=1920, class=0, nrcpts=1, msgid=<200903292306.n2TN6tZI001639@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=cpe-71-79-48-52.cinci.res.rr.com [71.79.48.52]
|
|
Mar 29 16:07:01 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52863
|
|
Mar 29 16:07:01 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:07:01 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 16:07:01 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 16:07:01 splunk3 sendmail[1668]: n2TN6tZI001639: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:05, xdelay=00:00:00, mailer=local, pri=32258, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:07:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:07:13 splunk3 sendmail[1730]: n2TN7DpY001730: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:08:13 splunk3 sendmail[1970]: n2TN8Ddr001970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:08:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:09:13 splunk3 sendmail[2214]: n2TN9Ds4002214: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:10:02 splunk3 sendmail[2491]: n2TNA2D4002491: from=root, size=292, class=0, nrcpts=1, msgid=<200903292310.n2TNA2D4002491@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 16:10:02 splunk3 sendmail[2496]: n2TNA2uD002496: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903292310.n2TNA2D4002491@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 16:10:02 splunk3 sendmail[2491]: n2TNA2D4002491: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2TNA2uD002496 Message accepted for delivery)
|
|
Mar 29 16:10:04 splunk3 sendmail[2497]: n2TNA2uD002496: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:10:13 splunk3 sendmail[2568]: n2TNADSA002568: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:10:25 splunk3 sendmail[2610]: n2TNAPtY002610: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292310.n2TNAOUE022603@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:10:25 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52904
|
|
Mar 29 16:10:25 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:10:25 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:10:25 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:10:25 splunk3 spamd[27585]: spamd: processing message <200903292310.n2TNAOUE022603@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:10:27 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 16:10:27 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52904,mid=<200903292310.n2TNAOUE022603@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 16:10:27 splunk3 sendmail[2611]: n2TNAPtY002610: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:11:13 splunk3 sendmail[2826]: n2TNBDWT002826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 16:11:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:12:13 splunk3 sendmail[3078]: n2TNCDe8003078: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:13:13 splunk3 sendmail[3320]: n2TNDDTH003320: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:13:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:14:13 splunk3 sendmail[3577]: n2TNEDxK003577: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:15:13 splunk3 sendmail[3834]: n2TNFDdD003834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:15:26 splunk3 sendmail[3876]: n2TNFPL9003876: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292315.n2TNFP1V023397@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:15:26 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52960
|
|
Mar 29 16:15:26 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:15:26 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:15:26 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:15:26 splunk3 spamd[27585]: spamd: processing message <200903292315.n2TNFP1V023397@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:15:28 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 16:15:28 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52960,mid=<200903292315.n2TNFP1V023397@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 16:15:28 splunk3 sendmail[3877]: n2TNFPL9003876: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:16:13 splunk3 sendmail[4087]: n2TNGD3D004087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:16:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:17:13 splunk3 sendmail[4349]: n2TNHD1J004349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:18:13 splunk3 sendmail[4585]: n2TNID1u004585: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:18:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:19:13 splunk3 sendmail[4829]: n2TNJD4m004829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:20:13 splunk3 sendmail[5091]: n2TNKD8s005091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:20:26 splunk3 sendmail[5167]: n2TNKQmO005167: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292320.n2TNKQNx024064@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:20:26 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53016
|
|
Mar 29 16:20:26 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:20:26 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:20:26 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:20:26 splunk3 spamd[27585]: spamd: processing message <200903292320.n2TNKQNx024064@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:20:28 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 16:20:28 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53016,mid=<200903292320.n2TNKQNx024064@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 16:20:28 splunk3 sendmail[5168]: n2TNKQmO005167: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:21:13 splunk3 sendmail[5376]: n2TNLDsD005376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:21:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:22:13 splunk3 sendmail[5615]: n2TNMDfR005615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:23:13 splunk3 sendmail[5855]: n2TNNDD8005855: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:23:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:24:13 splunk3 sendmail[6094]: n2TNODER006094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:25:13 splunk3 sendmail[6342]: n2TNPDo4006342: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:25:27 splunk3 sendmail[6381]: n2TNPRI8006381: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292325.n2TNPQhs024671@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:25:27 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53071
|
|
Mar 29 16:25:27 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:25:27 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:25:27 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:25:27 splunk3 spamd[27585]: spamd: processing message <200903292325.n2TNPQhs024671@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:25:29 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 16:25:29 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53071,mid=<200903292325.n2TNPQhs024671@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 16:25:29 splunk3 sendmail[6382]: n2TNPRI8006381: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:26:13 splunk3 sendmail[6583]: n2TNQDPW006583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 16:26:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:27:13 splunk3 sendmail[6827]: n2TNRDGU006827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:28:13 splunk3 sendmail[7061]: n2TNSD6x007061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:28:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:29:13 splunk3 sendmail[7304]: n2TNTDPS007304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:30:13 splunk3 sendmail[7562]: n2TNUDmi007562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:30:27 splunk3 sendmail[7604]: n2TNURkV007604: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292330.n2TNURGs025294@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:30:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53128
|
|
Mar 29 16:30:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:30:28 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:30:28 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:30:28 splunk3 spamd[27585]: spamd: processing message <200903292330.n2TNURGs025294@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:30:30 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 16:30:30 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53128,mid=<200903292330.n2TNURGs025294@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 16:30:30 splunk3 sendmail[7605]: n2TNURkV007604: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:31:13 splunk3 sendmail[7808]: n2TNVDkd007808: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:31:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:32:13 splunk3 sendmail[8048]: n2TNWDQB008048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:33:13 splunk3 sendmail[8287]: n2TNXDQP008287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:33:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:34:13 splunk3 sendmail[8541]: n2TNYDQZ008541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:35:13 splunk3 sendmail[8788]: n2TNZDMO008788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:35:28 splunk3 sendmail[8848]: n2TNZSsZ008848: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292335.n2TNZSGX026069@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:35:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53183
|
|
Mar 29 16:35:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:35:28 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:35:28 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:35:28 splunk3 spamd[27585]: spamd: processing message <200903292335.n2TNZSGX026069@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:35:30 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 16:35:30 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53183,mid=<200903292335.n2TNZSGX026069@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 16:35:30 splunk3 sendmail[8849]: n2TNZSsZ008848: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:36:13 splunk3 sendmail[9028]: n2TNaDM9009028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:36:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:37:13 splunk3 sendmail[9273]: n2TNbDej009273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:38:13 splunk3 sendmail[9514]: n2TNcDKZ009514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:38:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:39:13 splunk3 sendmail[9763]: n2TNdDbI009763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:40:13 splunk3 sendmail[10013]: n2TNeDe6010013: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:40:29 splunk3 sendmail[10073]: n2TNeTxm010073: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292340.n2TNeSSM026680@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:40:29 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53239
|
|
Mar 29 16:40:29 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:40:29 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:40:29 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:40:29 splunk3 spamd[27585]: spamd: processing message <200903292340.n2TNeSSM026680@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:40:31 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 16:40:31 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53239,mid=<200903292340.n2TNeSSM026680@virt2.int.splunk.com>,bayes=0.112434688872378,autolearn=no
|
|
Mar 29 16:40:31 splunk3 sendmail[10074]: n2TNeTxm010073: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:40:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:41:02 splunk3 sendmail[10200]: n2TNf2wS010200: from=<3DgfQSRQKBi8RZZRWPLWPced-YZcPaWjRZZRWP.NZXdaLXXPdaWfYVTe.NZX@alerts.bounces.google.com>, size=4779, class=0, nrcpts=1, msgid=<00151750d9b8aa85d704664a7f25@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 29 16:41:02 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53244
|
|
Mar 29 16:41:02 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:41:02 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:41:02 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:41:02 splunk3 spamd[27585]: spamd: processing message <00151750d9b8aa85d704664a7f25@google.com> for spamme:501
|
|
Mar 29 16:41:04 splunk3 spamd[27585]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.0 seconds, 5214 bytes.
|
|
Mar 29 16:41:04 splunk3 spamd[27585]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.0,size=5214,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53244,mid=<00151750d9b8aa85d704664a7f25@google.com>,bayes=0,autolearn=ham
|
|
Mar 29 16:41:04 splunk3 sendmail[10201]: n2TNf2wS010200: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=34995, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:41:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:41:13 splunk3 sendmail[10264]: n2TNfDhJ010264: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 16:41:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:42:13 splunk3 sendmail[10503]: n2TNgD17010503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:43:14 splunk3 sendmail[10741]: n2TNhEkG010741: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:43:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:44:14 splunk3 sendmail[10979]: n2TNiEXx010979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:45:14 splunk3 sendmail[11227]: n2TNjEA1011227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:45:29 splunk3 sendmail[11289]: n2TNjTKX011289: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292345.n2TNjTDn027313@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:45:29 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53296
|
|
Mar 29 16:45:29 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:45:29 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:45:29 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:45:29 splunk3 spamd[27585]: spamd: processing message <200903292345.n2TNjTDn027313@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:45:31 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 16:45:31 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53296,mid=<200903292345.n2TNjTDn027313@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 16:45:31 splunk3 sendmail[11290]: n2TNjTKX011289: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:45:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:46:14 splunk3 sendmail[11468]: n2TNkEE5011468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:46:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:47:14 splunk3 sendmail[11713]: n2TNlEbK011713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:48:14 splunk3 sendmail[11948]: n2TNmEXf011948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:48:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:49:14 splunk3 sendmail[12190]: n2TNnESW012190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:50:14 splunk3 sendmail[12440]: n2TNoEDG012440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:50:29 splunk3 sendmail[12501]: n2TNoTbf012501: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292350.n2TNoTYN027911@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:50:30 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53352
|
|
Mar 29 16:50:30 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:50:30 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:50:30 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:50:30 splunk3 spamd[27585]: spamd: processing message <200903292350.n2TNoTYN027911@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:50:32 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 16:50:32 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53352,mid=<200903292350.n2TNoTYN027911@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 16:50:32 splunk3 sendmail[12502]: n2TNoTbf012501: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:50:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:51:14 splunk3 sendmail[12685]: n2TNpEdu012685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:51:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:52:14 splunk3 sendmail[12925]: n2TNqETk012925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:53:14 splunk3 sendmail[13167]: n2TNrEie013167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:53:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:54:14 splunk3 sendmail[13445]: n2TNsE5O013445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:55:14 splunk3 sendmail[13693]: n2TNtE4N013693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:55:31 splunk3 sendmail[13754]: n2TNtVVC013754: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903292355.n2TNtUmW028544@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 16:55:31 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53408
|
|
Mar 29 16:55:31 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 16:55:31 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 16:55:31 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 16:55:31 splunk3 spamd[27585]: spamd: processing message <200903292355.n2TNtUmW028544@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 16:55:33 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 16:55:33 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53408,mid=<200903292355.n2TNtUmW028544@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 16:55:33 splunk3 sendmail[13755]: n2TNtVVC013754: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 16:55:33 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 16:56:14 splunk3 sendmail[13932]: n2TNuEbt013932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:56:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 16:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 16:57:14 splunk3 sendmail[14175]: n2TNvEUY014175: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:58:14 splunk3 sendmail[14410]: n2TNwEhT014410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 16:58:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 16:59:14 splunk3 sendmail[14653]: n2TNxE4U014653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:00:02 splunk3 sendmail[14887]: n2U002co014887: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300000.n2U001ks029102@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:00:02 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53452
|
|
Mar 29 17:00:02 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:00:02 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 17:00:02 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 17:00:02 splunk3 sendmail[14888]: n2U002co014887: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:00:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:00:04 splunk3 sendmail[14922]: n2U004k7014922: from=root, size=291, class=0, nrcpts=1, msgid=<200903300000.n2U004k7014922@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 17:00:07 splunk3 sendmail[14926]: n2U004Nu014926: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300000.n2U004k7014922@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 17:00:07 splunk3 sendmail[14922]: n2U004k7014922: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:03, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U004Nu014926 Message accepted for delivery)
|
|
Mar 29 17:00:08 splunk3 sendmail[14929]: n2U004Nu014926: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:00:10 splunk3 sendmail[14962]: n2U00ACW014962: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903300000.n2U00ACW014962@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 17:00:10 splunk3 sendmail[14964]: n2U00ACW014962: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 17:00:10 splunk3 sendmail[14964]: n2U00ACW014962: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 17:00:10 splunk3 sendmail[14964]: n2U00ACW014962: n2U00ACW014964: postmaster notify: User unknown
|
|
Mar 29 17:00:11 splunk3 sendmail[14964]: n2U00ACW014964: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:00:14 splunk3 sendmail[14994]: n2U00E5R014994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:01:13 splunk3 sendmail[15182]: n2U011ul015182: from=root, size=443, class=0, nrcpts=1, msgid=<200903300001.n2U011ul015182@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 17:01:13 splunk3 sendmail[15242]: n2U01DiV015242: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300001.n2U011ul015182@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 17:01:13 splunk3 sendmail[15182]: n2U011ul015182: to=root, ctladdr=root (0/0), delay=00:00:12, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U01DiV015242 Message accepted for delivery)
|
|
Mar 29 17:01:14 splunk3 sendmail[15247]: n2U01Eno015247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:01:14 splunk3 sendmail[15243]: n2U01DiV015242: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:01:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:02:14 splunk3 sendmail[15488]: n2U02EVP015488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:03:14 splunk3 sendmail[15726]: n2U03EUB015726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:03:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:04:14 splunk3 sendmail[15965]: n2U04EYA015965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:05:02 splunk3 sendmail[16147]: n2U0520a016147: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300005.n2U0527T029803@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:05:03 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53517
|
|
Mar 29 17:05:03 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:05:03 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 17:05:03 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 17:05:03 splunk3 sendmail[16148]: n2U0520a016147: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:05:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:05:14 splunk3 sendmail[16217]: n2U05EVI016217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:06:14 splunk3 sendmail[16452]: n2U06E6J016452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:06:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:07:14 splunk3 sendmail[16696]: n2U07EKS016696: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:08:14 splunk3 sendmail[16936]: n2U08ERB016936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:08:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:09:14 splunk3 sendmail[17182]: n2U09EQq017182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:10:02 splunk3 sendmail[17457]: n2U0A265017457: from=root, size=292, class=0, nrcpts=1, msgid=<200903300010.n2U0A265017457@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 17:10:02 splunk3 sendmail[17462]: n2U0A2YX017462: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300010.n2U0A265017457@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 17:10:02 splunk3 sendmail[17457]: n2U0A265017457: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U0A2YX017462 Message accepted for delivery)
|
|
Mar 29 17:10:03 splunk3 sendmail[17484]: n2U0A3oO017484: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300010.n2U0A3sb030414@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:10:03 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53574
|
|
Mar 29 17:10:03 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:10:03 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:10:03 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:10:03 splunk3 spamd[27585]: spamd: processing message <200903300010.n2U0A3sb030414@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:10:03 splunk3 sendmail[17463]: n2U0A2YX017462: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:10:05 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 17:10:05 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53574,mid=<200903300010.n2U0A3sb030414@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 17:10:05 splunk3 sendmail[17485]: n2U0A3oO017484: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:10:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:10:14 splunk3 sendmail[17540]: n2U0AE0X017540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:11:14 splunk3 sendmail[17778]: n2U0BE35017778: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:11:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 17:12:14 splunk3 sendmail[18017]: n2U0CE3e018017: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:13:14 splunk3 sendmail[18258]: n2U0DEO7018258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:13:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:14:14 splunk3 sendmail[18496]: n2U0EEh1018496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:15:04 splunk3 sendmail[18695]: n2U0F4JJ018695: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300015.n2U0F3QL031215@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:15:04 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53630
|
|
Mar 29 17:15:04 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:15:04 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:15:04 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:15:04 splunk3 spamd[27585]: spamd: processing message <200903300015.n2U0F3QL031215@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:15:06 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 17:15:06 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53630,mid=<200903300015.n2U0F3QL031215@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 17:15:06 splunk3 sendmail[18696]: n2U0F4JJ018695: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:15:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:15:14 splunk3 sendmail[18750]: n2U0FEsd018750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:16:14 splunk3 sendmail[18987]: n2U0GEYH018987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:16:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:17:14 splunk3 sendmail[19229]: n2U0HENg019229: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:18:14 splunk3 sendmail[19464]: n2U0IEBh019464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:18:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:19:14 splunk3 sendmail[19707]: n2U0JECD019707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:20:05 splunk3 sendmail[19910]: n2U0K5e8019910: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300020.n2U0K551031852@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:20:05 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53686
|
|
Mar 29 17:20:05 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:20:05 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:20:05 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:20:05 splunk3 spamd[27585]: spamd: processing message <200903300020.n2U0K551031852@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:20:07 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 17:20:07 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53686,mid=<200903300020.n2U0K551031852@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 17:20:07 splunk3 sendmail[19911]: n2U0K5e8019910: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:20:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:20:14 splunk3 sendmail[19964]: n2U0KEtC019964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:21:14 splunk3 sendmail[20202]: n2U0LE2Z020202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:21:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:22:14 splunk3 sendmail[20443]: n2U0ME4o020443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:23:14 splunk3 sendmail[20687]: n2U0NE50020687: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:23:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:24:14 splunk3 sendmail[20924]: n2U0OEF7020924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:25:06 splunk3 sendmail[21124]: n2U0P6AH021124: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300025.n2U0P5Xt032457@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:25:06 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53741
|
|
Mar 29 17:25:06 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:25:06 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:25:06 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:25:06 splunk3 spamd[27585]: spamd: processing message <200903300025.n2U0P5Xt032457@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:25:08 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1311 bytes.
|
|
Mar 29 17:25:08 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53741,mid=<200903300025.n2U0P5Xt032457@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 17:25:08 splunk3 sendmail[21125]: n2U0P6AH021124: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:25:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:25:14 splunk3 sendmail[21179]: n2U0PEnV021179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:26:14 splunk3 sendmail[21411]: n2U0QEoo021411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:26:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 17:27:14 splunk3 sendmail[21656]: n2U0RERZ021656: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:28:14 splunk3 sendmail[21889]: n2U0SEJg021889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:28:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:29:14 splunk3 sendmail[22132]: n2U0TEP0022132: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:30:06 splunk3 sendmail[22332]: n2U0U6E3022332: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903300030.n2U0U6C8000606@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:30:06 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53798
|
|
Mar 29 17:30:06 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:30:06 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:30:06 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:30:06 splunk3 spamd[27585]: spamd: processing message <200903300030.n2U0U6C8000606@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:30:08 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Mar 29 17:30:08 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53798,mid=<200903300030.n2U0U6C8000606@virt2.int.splunk.com>,bayes=0.066486926298814,autolearn=no
|
|
Mar 29 17:30:08 splunk3 sendmail[22333]: n2U0U6E3022332: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:30:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:30:14 splunk3 sendmail[22387]: n2U0UEaq022387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:31:14 splunk3 sendmail[22626]: n2U0VEVJ022626: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:31:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:32:14 splunk3 sendmail[22865]: n2U0WEYV022865: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:33:14 splunk3 sendmail[23103]: n2U0XEnu023103: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:33:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:34:14 splunk3 sendmail[23342]: n2U0YEi3023342: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:35:07 splunk3 sendmail[23543]: n2U0Z794023543: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300035.n2U0Z6uQ001362@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:35:07 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53853
|
|
Mar 29 17:35:07 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:35:07 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:35:07 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:35:07 splunk3 spamd[27585]: spamd: processing message <200903300035.n2U0Z6uQ001362@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:35:09 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 29 17:35:09 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53853,mid=<200903300035.n2U0Z6uQ001362@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 17:35:09 splunk3 sendmail[23544]: n2U0Z794023543: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:35:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:35:14 splunk3 sendmail[23596]: n2U0ZEeK023596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:36:14 splunk3 sendmail[23831]: n2U0aEib023831: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:36:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:37:14 splunk3 sendmail[24077]: n2U0bEw1024077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:38:14 splunk3 sendmail[24314]: n2U0cETq024314: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:38:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:39:14 splunk3 sendmail[24556]: n2U0dEsa024556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:40:08 splunk3 sendmail[24777]: n2U0e8Qs024777: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300040.n2U0e7eV002014@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:40:08 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53909
|
|
Mar 29 17:40:08 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:40:08 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:40:08 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:40:08 splunk3 spamd[27585]: spamd: processing message <200903300040.n2U0e7eV002014@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:40:10 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 29 17:40:10 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53909,mid=<200903300040.n2U0e7eV002014@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 17:40:10 splunk3 sendmail[24778]: n2U0e8Qs024777: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:40:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:40:14 splunk3 sendmail[24814]: n2U0eEZ3024814: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:41:14 splunk3 sendmail[25051]: n2U0fEnF025051: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:41:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 17:42:14 splunk3 sendmail[25291]: n2U0gEl4025291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:43:14 splunk3 sendmail[25529]: n2U0hEwj025529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:43:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:44:14 splunk3 sendmail[25767]: n2U0iE0x025767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:45:09 splunk3 sendmail[25984]: n2U0j9j9025984: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300045.n2U0j86G002641@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:45:09 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53966
|
|
Mar 29 17:45:09 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:45:09 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:45:09 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:45:09 splunk3 spamd[27585]: spamd: processing message <200903300045.n2U0j86G002641@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:45:11 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 17:45:11 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53966,mid=<200903300045.n2U0j86G002641@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 17:45:11 splunk3 sendmail[25985]: n2U0j9j9025984: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:45:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:45:14 splunk3 sendmail[26020]: n2U0jEOj026020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:46:14 splunk3 sendmail[26255]: n2U0kEg3026255: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:46:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:47:14 splunk3 sendmail[26499]: n2U0lEli026499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:48:14 splunk3 sendmail[26733]: n2U0mETZ026733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:48:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:49:14 splunk3 sendmail[26975]: n2U0nEl4026975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:50:09 splunk3 sendmail[27196]: n2U0o92q027196: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300050.n2U0o9gu003252@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:50:09 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54021
|
|
Mar 29 17:50:09 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:50:09 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:50:09 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:50:09 splunk3 spamd[27585]: spamd: processing message <200903300050.n2U0o9gu003252@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:50:11 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Mar 29 17:50:11 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54021,mid=<200903300050.n2U0o9gu003252@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 17:50:11 splunk3 sendmail[27197]: n2U0o92q027196: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:50:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:50:14 splunk3 sendmail[27222]: n2U0oEPj027222: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:51:14 splunk3 sendmail[27468]: n2U0pEMR027468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:51:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:52:14 splunk3 sendmail[27709]: n2U0qErg027709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:53:14 splunk3 sendmail[27951]: n2U0rErK027951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:53:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:54:14 splunk3 sendmail[28191]: n2U0sEgA028191: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:55:10 splunk3 sendmail[28412]: n2U0tA4Y028412: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300055.n2U0tAhK003868@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 17:55:10 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54077
|
|
Mar 29 17:55:10 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 17:55:10 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 17:55:10 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 17:55:10 splunk3 spamd[27585]: spamd: processing message <200903300055.n2U0tAhK003868@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 17:55:12 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 17:55:12 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54077,mid=<200903300055.n2U0tAhK003868@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 17:55:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 17:55:12 splunk3 sendmail[28413]: n2U0tA4Y028412: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 17:55:14 splunk3 sendmail[28436]: n2U0tE7N028436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:56:14 splunk3 sendmail[28679]: n2U0uE4s028679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:56:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 17:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 17:57:14 splunk3 sendmail[28924]: n2U0vELk028924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:58:14 splunk3 sendmail[29160]: n2U0wERl029160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 17:58:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 17:59:14 splunk3 sendmail[29402]: n2U0xEso029402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:00:04 splunk3 sendmail[29667]: n2U104P8029667: from=root, size=291, class=0, nrcpts=1, msgid=<200903300100.n2U104P8029667@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 18:00:04 splunk3 sendmail[29671]: n2U1045n029671: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300100.n2U104P8029667@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 18:00:04 splunk3 sendmail[29667]: n2U104P8029667: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U1045n029671 Message accepted for delivery)
|
|
Mar 29 18:00:05 splunk3 sendmail[29672]: n2U1045n029671: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:00:12 splunk3 sendmail[29712]: n2U10CMh029712: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300100.n2U10BX0004503@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:00:12 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54134
|
|
Mar 29 18:00:12 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:00:12 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 18:00:12 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 18:00:12 splunk3 sendmail[29713]: n2U10CMh029712: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:00:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:00:14 splunk3 sendmail[29717]: n2U10EL2029717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:00:15 splunk3 sendmail[29731]: n2U10FaI029731: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903300100.n2U10FaI029731@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 18:00:15 splunk3 sendmail[29733]: n2U10FaI029731: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 18:00:15 splunk3 sendmail[29733]: n2U10FaI029731: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 18:00:15 splunk3 sendmail[29733]: n2U10FaI029731: n2U10FaI029733: postmaster notify: User unknown
|
|
Mar 29 18:00:17 splunk3 sendmail[29733]: n2U10FaI029733: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:01:03 splunk3 sendmail[29932]: n2U111Ug029932: from=root, size=443, class=0, nrcpts=1, msgid=<200903300101.n2U111Ug029932@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 18:01:04 splunk3 sendmail[29950]: n2U113Kj029950: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300101.n2U111Ug029932@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 18:01:04 splunk3 sendmail[29932]: n2U111Ug029932: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U113Kj029950 Message accepted for delivery)
|
|
Mar 29 18:01:05 splunk3 sendmail[29951]: n2U113Kj029950: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:01:14 splunk3 sendmail[29993]: n2U11Eal029993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:01:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:02:14 splunk3 sendmail[30233]: n2U12EUs030233: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:03:14 splunk3 sendmail[30470]: n2U13EXV030470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:03:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:04:14 splunk3 sendmail[30709]: n2U14EBo030709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:05:13 splunk3 sendmail[30949]: n2U15D62030949: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300105.n2U15DME005188@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:05:13 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54198
|
|
Mar 29 18:05:13 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:05:13 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 18:05:13 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 18:05:13 splunk3 sendmail[30950]: n2U15D62030949: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:05:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:05:14 splunk3 sendmail[30954]: n2U15E6R030954: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:06:14 splunk3 sendmail[31198]: n2U16EuS031198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:06:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:07:14 splunk3 sendmail[31442]: n2U17Eqr031442: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:08:14 splunk3 sendmail[31681]: n2U18Epa031681: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:08:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:09:14 splunk3 sendmail[31925]: n2U19ELD031925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:10:02 splunk3 sendmail[32221]: n2U1A2jo032221: from=root, size=292, class=0, nrcpts=1, msgid=<200903300110.n2U1A2jo032221@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 18:10:02 splunk3 sendmail[32226]: n2U1A2Yu032226: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300110.n2U1A2jo032221@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 18:10:02 splunk3 sendmail[32221]: n2U1A2jo032221: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U1A2Yu032226 Message accepted for delivery)
|
|
Mar 29 18:10:03 splunk3 sendmail[32227]: n2U1A2Yu032226: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:10:14 splunk3 sendmail[32270]: n2U1AEPD032270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:10:16 splunk3 sendmail[32285]: n2U1AGon032285: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300110.n2U1ADRk005805@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:10:16 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54263
|
|
Mar 29 18:10:16 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:10:16 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:10:16 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:10:16 splunk3 spamd[27585]: spamd: processing message <200903300110.n2U1ADRk005805@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:10:18 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 18:10:18 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54263,mid=<200903300110.n2U1ADRk005805@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 18:10:18 splunk3 sendmail[32286]: n2U1AGon032285: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:11:14 splunk3 sendmail[32524]: n2U1BE7q032524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:11:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 18:12:14 splunk3 sendmail[32766]: n2U1CEDv032766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:13:14 splunk3 sendmail[537]: n2U1DE2Q000537: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:13:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:14:14 splunk3 sendmail[775]: n2U1EEUK000775: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:15:14 splunk3 sendmail[1013]: n2U1FErV001013: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:15:17 splunk3 sendmail[1044]: n2U1FHfc001044: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300115.n2U1FGum006606@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:15:17 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54320
|
|
Mar 29 18:15:17 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:15:17 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:15:17 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:15:17 splunk3 spamd[27585]: spamd: processing message <200903300115.n2U1FGum006606@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:15:19 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Mar 29 18:15:19 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54320,mid=<200903300115.n2U1FGum006606@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 18:15:19 splunk3 sendmail[1045]: n2U1FHfc001044: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:15:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:15:38 splunk3 sendmail[1129]: n2U1FcwM001129: ruleset=check_rcpt, arg1=<sanjinn001@yahoo.com.tw>, relay=61-231-65-153.dynamic.hinet.net [61.231.65.153], reject=550 5.7.1 <sanjinn001@yahoo.com.tw>... Relaying denied
|
|
Mar 29 18:16:14 splunk3 sendmail[1266]: n2U1GEw5001266: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:16:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:17:14 splunk3 sendmail[1509]: n2U1HEn1001509: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:18:14 splunk3 sendmail[1743]: n2U1IE3G001743: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:18:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:19:14 splunk3 sendmail[1987]: n2U1JEJp001987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:20:14 splunk3 sendmail[2226]: n2U1KE2e002226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:20:18 splunk3 sendmail[2257]: n2U1KIhx002257: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300120.n2U1KIp3007245@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:20:18 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54375
|
|
Mar 29 18:20:18 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:20:18 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:20:18 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:20:18 splunk3 spamd[27585]: spamd: processing message <200903300120.n2U1KIp3007245@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:20:20 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 18:20:20 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54375,mid=<200903300120.n2U1KIp3007245@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 18:20:21 splunk3 sendmail[2258]: n2U1KIhx002257: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:20:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:21:14 splunk3 sendmail[2480]: n2U1LEBX002480: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:21:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:22:14 splunk3 sendmail[2728]: n2U1MEPO002728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:23:14 splunk3 sendmail[2982]: n2U1NE51002982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:23:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:24:14 splunk3 sendmail[3228]: n2U1OElp003228: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:25:14 splunk3 sendmail[3469]: n2U1PEW1003469: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:25:19 splunk3 sendmail[3499]: n2U1PJfm003499: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300125.n2U1PJcL007851@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:25:19 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54431
|
|
Mar 29 18:25:19 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:25:19 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:25:19 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:25:19 splunk3 spamd[27585]: spamd: processing message <200903300125.n2U1PJcL007851@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:25:21 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 18:25:21 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54431,mid=<200903300125.n2U1PJcL007851@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 18:25:21 splunk3 sendmail[3500]: n2U1PJfm003499: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:25:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:26:14 splunk3 sendmail[3748]: n2U1QE4c003748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:26:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 18:27:14 splunk3 sendmail[3998]: n2U1REpO003998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:28:14 splunk3 sendmail[4247]: n2U1SEdV004247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:28:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:29:14 splunk3 sendmail[4501]: n2U1TEAe004501: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:30:14 splunk3 sendmail[4743]: n2U1UEvq004743: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:30:20 splunk3 sendmail[4774]: n2U1UKZx004774: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300130.n2U1UJoS008471@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:30:20 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54486
|
|
Mar 29 18:30:20 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:30:20 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:30:20 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:30:20 splunk3 spamd[27585]: spamd: processing message <200903300130.n2U1UJoS008471@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:30:22 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 18:30:22 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54486,mid=<200903300130.n2U1UJoS008471@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 18:30:22 splunk3 sendmail[4776]: n2U1UKZx004774: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:30:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:31:14 splunk3 sendmail[5008]: n2U1VEnP005008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:31:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:32:14 splunk3 sendmail[5283]: n2U1WEnS005283: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:33:14 splunk3 sendmail[5524]: n2U1XEvC005524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:33:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:34:14 splunk3 sendmail[5762]: n2U1YEOL005762: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:35:14 splunk3 sendmail[6000]: n2U1ZEEf006000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:35:21 splunk3 sendmail[6032]: n2U1ZKXr006032: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300135.n2U1ZKBg009225@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:35:21 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54542
|
|
Mar 29 18:35:21 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:35:21 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:35:21 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:35:21 splunk3 spamd[27585]: spamd: processing message <200903300135.n2U1ZKBg009225@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:35:23 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 18:35:23 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54542,mid=<200903300135.n2U1ZKBg009225@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 18:35:23 splunk3 sendmail[6033]: n2U1ZKXr006032: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:36:14 splunk3 sendmail[6248]: n2U1aEI6006248: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:36:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:37:14 splunk3 sendmail[6491]: n2U1bEEU006491: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:38:14 splunk3 sendmail[6729]: n2U1cEaJ006729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:38:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:39:14 splunk3 sendmail[6971]: n2U1dEmQ006971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:40:14 splunk3 sendmail[7214]: n2U1eE81007214: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:40:21 splunk3 sendmail[7245]: n2U1eLHv007245: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300140.n2U1eLT1009862@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:40:21 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54597
|
|
Mar 29 18:40:21 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:40:21 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:40:21 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:40:21 splunk3 spamd[27585]: spamd: processing message <200903300140.n2U1eLT1009862@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:40:23 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 29 18:40:23 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54597,mid=<200903300140.n2U1eLT1009862@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 18:40:23 splunk3 sendmail[7246]: n2U1eLHv007245: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:40:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:41:14 splunk3 sendmail[7468]: n2U1fEWe007468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:41:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 18:42:14 splunk3 sendmail[7718]: n2U1gE67007718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:43:14 splunk3 sendmail[7957]: n2U1hEqp007957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:43:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:44:14 splunk3 sendmail[8195]: n2U1iELm008195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:45:14 splunk3 sendmail[8434]: n2U1jEBo008434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:45:22 splunk3 sendmail[8484]: n2U1jMtV008484: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300145.n2U1jLKg010475@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:45:22 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54654
|
|
Mar 29 18:45:22 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:45:22 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:45:22 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:45:22 splunk3 spamd[27585]: spamd: processing message <200903300145.n2U1jLKg010475@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:45:24 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 29 18:45:24 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54654,mid=<200903300145.n2U1jLKg010475@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 18:45:24 splunk3 sendmail[8485]: n2U1jMtV008484: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:45:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:46:14 splunk3 sendmail[8685]: n2U1kE5l008685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:46:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:47:14 splunk3 sendmail[8929]: n2U1lE9F008929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:48:15 splunk3 sendmail[9161]: n2U1mFKt009161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:48:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:49:15 splunk3 sendmail[9402]: n2U1nFuf009402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:50:15 splunk3 sendmail[9655]: n2U1oFv7009655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:50:22 splunk3 sendmail[9705]: n2U1oMcm009705: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300150.n2U1oMx5011096@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:50:22 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54710
|
|
Mar 29 18:50:22 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:50:22 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:50:22 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:50:22 splunk3 spamd[27585]: spamd: processing message <200903300150.n2U1oMx5011096@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:50:24 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 18:50:24 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54710,mid=<200903300150.n2U1oMx5011096@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 18:50:24 splunk3 sendmail[9706]: n2U1oMcm009705: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:50:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:51:15 splunk3 sendmail[9908]: n2U1pFOL009908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:51:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:52:15 splunk3 sendmail[10146]: n2U1qFlb010146: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:53:15 splunk3 sendmail[10389]: n2U1rFUD010389: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:53:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:54:15 splunk3 sendmail[10627]: n2U1sF3q010627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:55:15 splunk3 sendmail[10867]: n2U1tFi9010867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:55:23 splunk3 sendmail[10916]: n2U1tNS5010916: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300155.n2U1tMr0011703@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 18:55:23 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54765
|
|
Mar 29 18:55:23 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 18:55:23 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 18:55:23 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 18:55:23 splunk3 spamd[27585]: spamd: processing message <200903300155.n2U1tMr0011703@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 18:55:25 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 18:55:25 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54765,mid=<200903300155.n2U1tMr0011703@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 18:55:25 splunk3 sendmail[10917]: n2U1tNS5010916: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 18:55:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 18:56:15 splunk3 sendmail[11117]: n2U1uFdp011117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:56:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 18:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 18:57:15 splunk3 sendmail[11361]: n2U1vFXY011361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:58:15 splunk3 sendmail[11598]: n2U1wF3P011598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 18:58:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 18:59:15 splunk3 sendmail[11840]: n2U1xFMu011840: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:00:04 splunk3 sendmail[12106]: n2U2046M012106: from=root, size=291, class=0, nrcpts=1, msgid=<200903300200.n2U2046M012106@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 19:00:04 splunk3 sendmail[12110]: n2U204hl012110: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300200.n2U2046M012106@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 19:00:04 splunk3 sendmail[12106]: n2U2046M012106: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U204hl012110 Message accepted for delivery)
|
|
Mar 29 19:00:05 splunk3 sendmail[12111]: n2U204hl012110: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:00:15 splunk3 sendmail[12152]: n2U20F3x012152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:00:21 splunk3 sendmail[12185]: n2U20Lun012185: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903300200.n2U20Lun012185@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 19:00:21 splunk3 sendmail[12187]: n2U20Lun012185: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 19:00:21 splunk3 sendmail[12187]: n2U20Lun012185: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 19:00:21 splunk3 sendmail[12187]: n2U20Lun012185: n2U20Lun012187: postmaster notify: User unknown
|
|
Mar 29 19:00:22 splunk3 sendmail[12187]: n2U20Lun012187: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:00:23 splunk3 sendmail[12217]: n2U20N1r012217: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300200.n2U20NoT012340@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:00:23 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54830
|
|
Mar 29 19:00:23 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:00:23 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 19:00:23 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 19:00:23 splunk3 sendmail[12218]: n2U20N1r012217: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:00:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:01:09 splunk3 sendmail[12369]: n2U211Jf012369: from=root, size=443, class=0, nrcpts=1, msgid=<200903300201.n2U211Jf012369@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 19:01:09 splunk3 sendmail[12410]: n2U219IT012410: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300201.n2U211Jf012369@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 19:01:09 splunk3 sendmail[12369]: n2U211Jf012369: to=root, ctladdr=root (0/0), delay=00:00:08, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U219IT012410 Message accepted for delivery)
|
|
Mar 29 19:01:10 splunk3 sendmail[12411]: n2U219IT012410: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:01:15 splunk3 sendmail[12434]: n2U21FX9012434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:01:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:02:15 splunk3 sendmail[12673]: n2U22FaB012673: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:03:15 splunk3 sendmail[12912]: n2U23FQV012912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:03:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:04:15 splunk3 sendmail[13151]: n2U24Fp6013151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:05:15 splunk3 sendmail[13429]: n2U25F8p013429: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:05:24 splunk3 sendmail[13478]: n2U25OIU013478: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300205.n2U25NFx013020@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:05:24 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54886
|
|
Mar 29 19:05:24 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:05:24 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 19:05:24 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 19:05:24 splunk3 sendmail[13479]: n2U25OIU013478: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:05:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:06:15 splunk3 sendmail[13677]: n2U26Fhv013677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:06:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:07:15 splunk3 sendmail[13922]: n2U27FUe013922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:08:15 splunk3 sendmail[14160]: n2U28FGC014160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:08:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:09:15 splunk3 sendmail[14402]: n2U29FPL014402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:10:02 splunk3 sendmail[14699]: n2U2A2Zi014699: from=root, size=292, class=0, nrcpts=1, msgid=<200903300210.n2U2A2Zi014699@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 19:10:02 splunk3 sendmail[14704]: n2U2A2MJ014704: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300210.n2U2A2Zi014699@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 19:10:02 splunk3 sendmail[14699]: n2U2A2Zi014699: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U2A2MJ014704 Message accepted for delivery)
|
|
Mar 29 19:10:04 splunk3 sendmail[14705]: n2U2A2MJ014704: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:10:15 splunk3 sendmail[14747]: n2U2AFPS014747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:10:24 splunk3 sendmail[14797]: n2U2AOW8014797: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300210.n2U2AOtP013640@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:10:24 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54943
|
|
Mar 29 19:10:24 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:10:24 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:10:24 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:10:24 splunk3 spamd[27585]: spamd: processing message <200903300210.n2U2AOtP013640@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:10:26 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 19:10:26 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54943,mid=<200903300210.n2U2AOtP013640@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:10:26 splunk3 sendmail[14798]: n2U2AOW8014797: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:10:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:11:15 splunk3 sendmail[14999]: n2U2BFJ0014999: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:11:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 19:12:15 splunk3 sendmail[15240]: n2U2CF8R015240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:13:15 splunk3 sendmail[15479]: n2U2DFAv015479: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:13:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:14:15 splunk3 sendmail[15717]: n2U2EFhM015717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:15:15 splunk3 sendmail[15957]: n2U2FFu4015957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:15:25 splunk3 sendmail[16007]: n2U2FPfA016007: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300215.n2U2FOIp014432@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:15:25 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54999
|
|
Mar 29 19:15:25 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:15:25 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:15:25 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:15:25 splunk3 spamd[27585]: spamd: processing message <200903300215.n2U2FOIp014432@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:15:27 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 19:15:27 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54999,mid=<200903300215.n2U2FOIp014432@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:15:27 splunk3 sendmail[16008]: n2U2FPfA016007: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:15:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:15:38 splunk3 sendmail[1129]: n2U1FcwM001129: timeout waiting for input from 61-231-65-153.dynamic.hinet.net during server cmd read
|
|
Mar 29 19:15:38 splunk3 sendmail[1129]: n2U1FcwM001129: lost input channel from 61-231-65-153.dynamic.hinet.net [61.231.65.153] to MTA after rcpt
|
|
Mar 29 19:15:38 splunk3 sendmail[1129]: n2U1FcwM001129: from=<03301@163.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=61-231-65-153.dynamic.hinet.net [61.231.65.153]
|
|
Mar 29 19:16:15 splunk3 sendmail[16207]: n2U2GFX6016207: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:16:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:17:15 splunk3 sendmail[16451]: n2U2HFeD016451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:18:15 splunk3 sendmail[16686]: n2U2IFt7016686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:18:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:19:15 splunk3 sendmail[16929]: n2U2JFCw016929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:20:15 splunk3 sendmail[17170]: n2U2KFxd017170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:20:25 splunk3 sendmail[17220]: n2U2KPiO017220: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300220.n2U2KPFe015068@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:20:25 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55055
|
|
Mar 29 19:20:25 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:20:25 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:20:25 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:20:25 splunk3 spamd[27585]: spamd: processing message <200903300220.n2U2KPFe015068@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:20:27 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 19:20:27 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55055,mid=<200903300220.n2U2KPFe015068@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:20:27 splunk3 sendmail[17221]: n2U2KPiO017220: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:20:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:21:15 splunk3 sendmail[17424]: n2U2LFLk017424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:21:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:22:15 splunk3 sendmail[17665]: n2U2MFhQ017665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:23:15 splunk3 sendmail[17906]: n2U2NFmN017906: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:23:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:24:15 splunk3 sendmail[18141]: n2U2OFIZ018141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:25:15 splunk3 sendmail[18382]: n2U2PFjK018382: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:25:26 splunk3 sendmail[18453]: n2U2PQqj018453: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300225.n2U2PQTm015671@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:25:26 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55110
|
|
Mar 29 19:25:26 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:25:26 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:25:26 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:25:26 splunk3 spamd[27585]: spamd: processing message <200903300225.n2U2PQTm015671@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:25:28 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 19:25:28 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55110,mid=<200903300225.n2U2PQTm015671@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:25:28 splunk3 sendmail[18454]: n2U2PQqj018453: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:25:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:26:15 splunk3 sendmail[18631]: n2U2QFpi018631: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:26:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 19:27:15 splunk3 sendmail[18874]: n2U2RFLV018874: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:28:15 splunk3 sendmail[19109]: n2U2SF58019109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:28:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:29:15 splunk3 sendmail[19351]: n2U2TFSh019351: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:30:15 splunk3 sendmail[19592]: n2U2UFGF019592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:30:27 splunk3 sendmail[19664]: n2U2URNc019664: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300230.n2U2URrF016295@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:30:27 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55167
|
|
Mar 29 19:30:27 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:30:27 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:30:27 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:30:27 splunk3 spamd[27585]: spamd: processing message <200903300230.n2U2URrF016295@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:30:29 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 29 19:30:29 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55167,mid=<200903300230.n2U2URrF016295@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:30:29 splunk3 sendmail[19665]: n2U2URNc019664: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:30:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:31:15 splunk3 sendmail[19847]: n2U2VFwW019847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:31:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:32:15 splunk3 sendmail[20087]: n2U2WFWl020087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:33:15 splunk3 sendmail[20326]: n2U2XFdo020326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:33:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:34:15 splunk3 sendmail[20564]: n2U2YFNr020564: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:35:15 splunk3 sendmail[20804]: n2U2ZFt6020804: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:35:28 splunk3 sendmail[20875]: n2U2ZS5I020875: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300235.n2U2ZSmR017062@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:35:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55223
|
|
Mar 29 19:35:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:35:28 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:35:28 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:35:28 splunk3 spamd[27585]: spamd: processing message <200903300235.n2U2ZSmR017062@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:35:30 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 19:35:30 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55223,mid=<200903300235.n2U2ZSmR017062@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:35:30 splunk3 sendmail[20876]: n2U2ZS5I020875: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:36:15 splunk3 sendmail[21054]: n2U2aFu2021054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:36:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:37:15 splunk3 sendmail[21297]: n2U2bFxx021297: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:38:15 splunk3 sendmail[21537]: n2U2cFDj021537: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:38:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:39:15 splunk3 sendmail[21778]: n2U2dFqp021778: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:40:15 splunk3 sendmail[22021]: n2U2eFTD022021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:40:28 splunk3 sendmail[22093]: n2U2eStf022093: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300240.n2U2eSbH017675@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:40:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55278
|
|
Mar 29 19:40:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:40:28 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:40:28 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:40:28 splunk3 spamd[27585]: spamd: processing message <200903300240.n2U2eSbH017675@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:40:30 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1311 bytes.
|
|
Mar 29 19:40:30 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55278,mid=<200903300240.n2U2eSbH017675@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:40:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:40:30 splunk3 sendmail[22094]: n2U2eStf022093: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:41:15 splunk3 sendmail[22273]: n2U2fFJr022273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:41:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 19:42:15 splunk3 sendmail[22514]: n2U2gF2J022514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:43:15 splunk3 sendmail[22754]: n2U2hFLk022754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:43:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:44:15 splunk3 sendmail[22990]: n2U2iF0q022990: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:45:15 splunk3 sendmail[23230]: n2U2jF19023230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:45:29 splunk3 sendmail[23302]: n2U2jTLP023302: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300245.n2U2jSlq018310@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:45:29 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55335
|
|
Mar 29 19:45:29 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:45:29 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:45:29 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:45:29 splunk3 spamd[27585]: spamd: processing message <200903300245.n2U2jSlq018310@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:45:32 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 29 19:45:32 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55335,mid=<200903300245.n2U2jSlq018310@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:45:32 splunk3 sendmail[23303]: n2U2jTLP023302: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:45:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:46:15 splunk3 sendmail[23482]: n2U2kFjG023482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:46:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:47:15 splunk3 sendmail[23725]: n2U2lFMt023725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:48:15 splunk3 sendmail[23959]: n2U2mF4q023959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:48:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:49:15 splunk3 sendmail[24202]: n2U2nFJW024202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:49:37 splunk3 sendmail[24301]: n2U2nbRN024301: from=<3QDPQSRQKBo0x55x2vr2v8A9-458v62Fx55x2v.t5396r33v962B41zA.t53@alerts.bounces.google.com>, size=6504, class=0, nrcpts=1, msgid=<0016362848000f727504664d22d0@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.184]
|
|
Mar 29 19:49:37 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55376
|
|
Mar 29 19:49:37 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:49:37 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:49:37 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:49:37 splunk3 spamd[27585]: spamd: processing message <0016362848000f727504664d22d0@google.com> for spamme:501
|
|
Mar 29 19:49:39 splunk3 spamd[27585]: spamd: clean message (-1.3/5.0) for spamme:501 in 2.4 seconds, 6935 bytes.
|
|
Mar 29 19:49:39 splunk3 spamd[27585]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=2.4,size=6935,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55376,mid=<0016362848000f727504664d22d0@google.com>,bayes=0,autolearn=no
|
|
Mar 29 19:49:39 splunk3 sendmail[24302]: n2U2nbRN024301: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=36716, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:49:39 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:50:15 splunk3 sendmail[24450]: n2U2oFa4024450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:50:30 splunk3 sendmail[24521]: n2U2oUw9024521: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300250.n2U2oTEm018903@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:50:30 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55391
|
|
Mar 29 19:50:30 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:50:30 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:50:30 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:50:30 splunk3 spamd[27585]: spamd: processing message <200903300250.n2U2oTEm018903@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:50:32 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 19:50:32 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55391,mid=<200903300250.n2U2oTEm018903@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:50:32 splunk3 sendmail[24522]: n2U2oUw9024521: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:50:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:51:15 splunk3 sendmail[24702]: n2U2pFJ7024702: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:51:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:52:15 splunk3 sendmail[24945]: n2U2qFhR024945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:53:15 splunk3 sendmail[25188]: n2U2rF3H025188: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:53:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:54:15 splunk3 sendmail[25425]: n2U2sFXg025425: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:55:00 splunk3 sendmail[25608]: n2U2t0xg025608: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300255.n2U2t0gI019435@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 19:55:00 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55435
|
|
Mar 29 19:55:00 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 19:55:00 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 19:55:00 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 19:55:00 splunk3 spamd[27585]: spamd: processing message <200903300255.n2U2t0gI019435@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 19:55:02 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 29 19:55:02 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55435,mid=<200903300255.n2U2t0gI019435@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 19:55:02 splunk3 sendmail[25609]: n2U2t0xg025608: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 19:55:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 19:55:15 splunk3 sendmail[25671]: n2U2tFCl025671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:56:15 splunk3 sendmail[25914]: n2U2uFWF025914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:56:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 19:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 19:57:15 splunk3 sendmail[26158]: n2U2vFIL026158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:58:15 splunk3 sendmail[26392]: n2U2wFqb026392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 19:58:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 19:59:15 splunk3 sendmail[26632]: n2U2xFg0026632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:00:01 splunk3 sendmail[26828]: n2U301DS026828: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300300.n2U3007d020053@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:00:01 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55492
|
|
Mar 29 20:00:01 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:00:01 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:00:01 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:00:01 splunk3 spamd[27585]: spamd: processing message <200903300300.n2U3007d020053@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:00:03 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 20:00:03 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55492,mid=<200903300300.n2U3007d020053@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:00:03 splunk3 sendmail[26829]: n2U301DS026828: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:00:04 splunk3 sendmail[26904]: n2U304NV026904: from=root, size=291, class=0, nrcpts=1, msgid=<200903300300.n2U304NV026904@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 20:00:04 splunk3 sendmail[26908]: n2U304hm026908: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300300.n2U304NV026904@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 20:00:04 splunk3 sendmail[26904]: n2U304NV026904: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U304hm026908 Message accepted for delivery)
|
|
Mar 29 20:00:06 splunk3 sendmail[26909]: n2U304hm026908: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:00:15 splunk3 sendmail[26948]: n2U30FNs026948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:00:26 splunk3 sendmail[27021]: n2U30QxJ027021: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903300300.n2U30QxJ027021@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 20:00:26 splunk3 sendmail[27023]: n2U30QxJ027021: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 20:00:26 splunk3 sendmail[27023]: n2U30QxJ027021: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 20:00:26 splunk3 sendmail[27023]: n2U30QxJ027021: n2U30QxJ027023: postmaster notify: User unknown
|
|
Mar 29 20:00:28 splunk3 sendmail[27023]: n2U30QxJ027023: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:01:09 splunk3 sendmail[27179]: n2U311pi027179: from=root, size=443, class=0, nrcpts=1, msgid=<200903300301.n2U311pi027179@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 20:01:09 splunk3 sendmail[27203]: n2U319hP027203: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300301.n2U311pi027179@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 20:01:09 splunk3 sendmail[27179]: n2U311pi027179: to=root, ctladdr=root (0/0), delay=00:00:08, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U319hP027203 Message accepted for delivery)
|
|
Mar 29 20:01:10 splunk3 sendmail[27204]: n2U319hP027203: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:01:15 splunk3 sendmail[27227]: n2U31FGj027227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:01:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:02:15 splunk3 sendmail[27466]: n2U32FSW027466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:03:15 splunk3 sendmail[27707]: n2U33FOx027707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:03:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:04:15 splunk3 sendmail[27946]: n2U34Fac027946: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:05:01 splunk3 sendmail[28147]: n2U351Gh028147: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300305.n2U351Cn020755@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:05:01 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55556
|
|
Mar 29 20:05:01 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:05:01 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 20:05:01 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 20:05:01 splunk3 sendmail[28148]: n2U351Gh028147: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:05:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:05:15 splunk3 sendmail[28190]: n2U35Fkj028190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:06:15 splunk3 sendmail[28434]: n2U36FNM028434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:06:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:07:15 splunk3 sendmail[28677]: n2U37F3j028677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:08:15 splunk3 sendmail[28917]: n2U38F8B028917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:08:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:09:15 splunk3 sendmail[29160]: n2U39F8d029160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:10:02 splunk3 sendmail[29454]: n2U3A2CW029454: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300310.n2U3A1Ob021410@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:10:02 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55612
|
|
Mar 29 20:10:02 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:10:02 splunk3 sendmail[29459]: n2U3A2Sw029459: from=root, size=292, class=0, nrcpts=1, msgid=<200903300310.n2U3A2Sw029459@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 20:10:02 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:10:02 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:10:02 splunk3 spamd[27585]: spamd: processing message <200903300310.n2U3A1Ob021410@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:10:02 splunk3 sendmail[29468]: n2U3A2D3029468: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300310.n2U3A2Sw029459@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 20:10:02 splunk3 sendmail[29459]: n2U3A2Sw029459: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U3A2D3029468 Message accepted for delivery)
|
|
Mar 29 20:10:03 splunk3 sendmail[29469]: n2U3A2D3029468: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:10:04 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 20:10:04 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55612,mid=<200903300310.n2U3A1Ob021410@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:10:04 splunk3 sendmail[29457]: n2U3A2CW029454: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:10:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:10:15 splunk3 sendmail[29513]: n2U3AFE3029513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:11:15 splunk3 sendmail[29761]: n2U3BFdt029761: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:11:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 20:12:15 splunk3 sendmail[30001]: n2U3CFn7030001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:13:15 splunk3 sendmail[30239]: n2U3DFCC030239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:13:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:14:15 splunk3 sendmail[30474]: n2U3EFit030474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:15:02 splunk3 sendmail[30678]: n2U3F2WY030678: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300315.n2U3F2Y3022213@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:15:02 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55669
|
|
Mar 29 20:15:02 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:15:02 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:15:02 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:15:02 splunk3 spamd[27585]: spamd: processing message <200903300315.n2U3F2Y3022213@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:15:04 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 20:15:04 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55669,mid=<200903300315.n2U3F2Y3022213@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:15:04 splunk3 sendmail[30679]: n2U3F2WY030678: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:15:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:15:15 splunk3 sendmail[30727]: n2U3FFFT030727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:16:15 splunk3 sendmail[30975]: n2U3GFIb030975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:16:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:17:15 splunk3 sendmail[31218]: n2U3HFI9031218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:18:15 splunk3 sendmail[31459]: n2U3IFSG031459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:18:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:19:15 splunk3 sendmail[31711]: n2U3JFoq031711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:20:03 splunk3 sendmail[31900]: n2U3K3aU031900: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300320.n2U3K24v022845@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:20:03 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55725
|
|
Mar 29 20:20:03 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:20:03 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:20:03 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:20:03 splunk3 spamd[27585]: spamd: processing message <200903300320.n2U3K24v022845@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:20:05 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 20:20:05 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55725,mid=<200903300320.n2U3K24v022845@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:20:05 splunk3 sendmail[31901]: n2U3K3aU031900: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:20:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:20:15 splunk3 sendmail[31947]: n2U3KF6j031947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:21:15 splunk3 sendmail[32206]: n2U3LFWr032206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:21:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:22:15 splunk3 sendmail[32448]: n2U3MFZo032448: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:23:15 splunk3 sendmail[32679]: n2U3NFaP032679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:23:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:24:15 splunk3 sendmail[465]: n2U3OFgd000465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:25:04 splunk3 sendmail[651]: n2U3P3Z9000651: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300325.n2U3P37X023458@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:25:04 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55780
|
|
Mar 29 20:25:04 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:25:04 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:25:04 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:25:04 splunk3 spamd[27585]: spamd: processing message <200903300325.n2U3P37X023458@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:25:06 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 20:25:06 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55780,mid=<200903300325.n2U3P37X023458@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:25:06 splunk3 sendmail[652]: n2U3P3Z9000651: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:25:15 splunk3 sendmail[712]: n2U3PFJp000712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:26:15 splunk3 sendmail[954]: n2U3QFxP000954: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:26:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 20:27:15 splunk3 sendmail[1198]: n2U3RFnX001198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:28:15 splunk3 sendmail[1432]: n2U3SFio001432: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:28:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:29:15 splunk3 sendmail[1675]: n2U3TFLt001675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:30:04 splunk3 sendmail[1863]: n2U3U46H001863: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300330.n2U3U4HN024107@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:30:05 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55837
|
|
Mar 29 20:30:05 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:30:05 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:30:05 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:30:05 splunk3 spamd[27585]: spamd: processing message <200903300330.n2U3U4HN024107@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:30:07 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 20:30:07 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55837,mid=<200903300330.n2U3U4HN024107@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:30:07 splunk3 sendmail[1864]: n2U3U46H001863: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:30:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:30:15 splunk3 sendmail[1923]: n2U3UFVZ001923: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:31:15 splunk3 sendmail[2173]: n2U3VFjI002173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:31:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:32:15 splunk3 sendmail[2412]: n2U3WFts002412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:33:15 splunk3 sendmail[2656]: n2U3XFPc002656: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:33:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:34:15 splunk3 sendmail[2904]: n2U3YFdn002904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:35:05 splunk3 sendmail[3101]: n2U3Z58Q003101: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300335.n2U3Z4bw024855@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:35:05 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55893
|
|
Mar 29 20:35:05 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:35:05 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:35:05 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:35:05 splunk3 spamd[27585]: spamd: processing message <200903300335.n2U3Z4bw024855@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:35:07 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 29 20:35:07 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55893,mid=<200903300335.n2U3Z4bw024855@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:35:07 splunk3 sendmail[3102]: n2U3Z58Q003101: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:35:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:35:15 splunk3 sendmail[3158]: n2U3ZFcf003158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:36:15 splunk3 sendmail[3409]: n2U3aFrq003409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:36:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:37:15 splunk3 sendmail[3675]: n2U3bFmM003675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:38:15 splunk3 sendmail[3923]: n2U3cFDe003923: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:38:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:39:15 splunk3 sendmail[4179]: n2U3dF64004179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:40:05 splunk3 sendmail[4407]: n2U3e5J9004407: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300340.n2U3e5Fd025488@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:40:05 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55956
|
|
Mar 29 20:40:05 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:40:05 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:40:05 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:40:05 splunk3 spamd[27585]: spamd: processing message <200903300340.n2U3e5Fd025488@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:40:07 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 20:40:07 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55956,mid=<200903300340.n2U3e5Fd025488@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:40:07 splunk3 sendmail[4408]: n2U3e5J9004407: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:40:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:40:15 splunk3 sendmail[4450]: n2U3eFkF004450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:41:15 splunk3 sendmail[4689]: n2U3fFLX004689: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:41:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 20:42:15 splunk3 sendmail[4938]: n2U3gFbk004938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:43:15 splunk3 sendmail[5217]: n2U3hFoG005217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:43:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:44:15 splunk3 sendmail[5458]: n2U3iFZf005458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:45:06 splunk3 sendmail[5669]: n2U3j6EV005669: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300345.n2U3j6V2026102@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:45:06 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56013
|
|
Mar 29 20:45:06 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:45:06 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:45:06 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:45:06 splunk3 spamd[27585]: spamd: processing message <200903300345.n2U3j6V2026102@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:45:08 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 20:45:08 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56013,mid=<200903300345.n2U3j6V2026102@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:45:08 splunk3 sendmail[5670]: n2U3j6EV005669: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:45:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:45:15 splunk3 sendmail[5712]: n2U3jFQk005712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:46:15 splunk3 sendmail[5947]: n2U3kFSI005947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:46:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:47:15 splunk3 sendmail[6188]: n2U3lFXG006188: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:48:15 splunk3 sendmail[6423]: n2U3mF2b006423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:48:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:49:15 splunk3 sendmail[6666]: n2U3nF4i006666: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:50:07 splunk3 sendmail[6882]: n2U3o7Ft006882: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300350.n2U3o6Kc026715@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:50:07 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56068
|
|
Mar 29 20:50:07 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:50:07 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:50:07 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:50:07 splunk3 spamd[27585]: spamd: processing message <200903300350.n2U3o6Kc026715@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:50:09 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 29 20:50:09 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56068,mid=<200903300350.n2U3o6Kc026715@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:50:09 splunk3 sendmail[6883]: n2U3o7Ft006882: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:50:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:50:15 splunk3 sendmail[6924]: n2U3oFNc006924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:51:15 splunk3 sendmail[7162]: n2U3pFAR007162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:51:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:52:15 splunk3 sendmail[7403]: n2U3qFFK007403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:53:15 splunk3 sendmail[7655]: n2U3rFDC007655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:53:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:54:15 splunk3 sendmail[7890]: n2U3sFf9007890: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:55:07 splunk3 sendmail[8104]: n2U3t7N8008104: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300355.n2U3t76g027320@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 20:55:07 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56124
|
|
Mar 29 20:55:07 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 20:55:07 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 20:55:07 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 20:55:07 splunk3 spamd[27585]: spamd: processing message <200903300355.n2U3t76g027320@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 20:55:09 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 29 20:55:09 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56124,mid=<200903300355.n2U3t76g027320@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 20:55:10 splunk3 sendmail[8105]: n2U3t7N8008104: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 20:55:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 20:55:15 splunk3 sendmail[8146]: n2U3tF5L008146: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:56:15 splunk3 sendmail[8381]: n2U3uFwa008381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:56:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 20:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 20:57:15 splunk3 sendmail[8629]: n2U3vF8Q008629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:58:15 splunk3 sendmail[8864]: n2U3wF1F008864: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 20:58:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 20:59:15 splunk3 sendmail[9105]: n2U3xFOF009105: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:00:02 splunk3 sendmail[9348]: n2U402Y7009348: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903300400.n2U402Y7009348@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 21:00:02 splunk3 sendmail[9350]: n2U402Y7009348: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 21:00:02 splunk3 sendmail[9350]: n2U402Y7009348: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 29 21:00:02 splunk3 sendmail[9350]: n2U402Y7009348: n2U402Y7009350: postmaster notify: User unknown
|
|
Mar 29 21:00:03 splunk3 sendmail[9350]: n2U402Y7009350: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:00:04 splunk3 sendmail[9377]: n2U4049X009377: from=root, size=291, class=0, nrcpts=1, msgid=<200903300400.n2U4049X009377@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 21:00:04 splunk3 sendmail[9381]: n2U4049f009381: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300400.n2U4049X009377@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 21:00:04 splunk3 sendmail[9377]: n2U4049X009377: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U4049f009381 Message accepted for delivery)
|
|
Mar 29 21:00:05 splunk3 sendmail[9382]: n2U4049f009381: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:00:08 splunk3 sendmail[9402]: n2U4082u009402: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300400.n2U407tF027957@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:00:08 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56188
|
|
Mar 29 21:00:08 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:00:08 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 21:00:08 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 21:00:08 splunk3 sendmail[9403]: n2U4082u009402: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:00:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:00:15 splunk3 sendmail[9445]: n2U40FRx009445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:01:10 splunk3 sendmail[9640]: n2U411jQ009640: from=root, size=443, class=0, nrcpts=1, msgid=<200903300401.n2U411jQ009640@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 21:01:10 splunk3 sendmail[9681]: n2U41Aht009681: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300401.n2U411jQ009640@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 21:01:10 splunk3 sendmail[9640]: n2U411jQ009640: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U41Aht009681 Message accepted for delivery)
|
|
Mar 29 21:01:12 splunk3 sendmail[9682]: n2U41Aht009681: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:01:16 splunk3 sendmail[9705]: n2U41G2T009705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:01:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:02:16 splunk3 sendmail[9943]: n2U42GY3009943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:03:16 splunk3 sendmail[10181]: n2U43G34010181: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:03:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:04:16 splunk3 sendmail[10421]: n2U44GYa010421: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:05:08 splunk3 sendmail[10633]: n2U458fS010633: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300405.n2U458B7028635@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:05:08 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56245
|
|
Mar 29 21:05:08 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:05:08 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 21:05:08 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 21:05:08 splunk3 sendmail[10634]: n2U458fS010633: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:05:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:05:16 splunk3 sendmail[10672]: n2U45GQh010672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:06:16 splunk3 sendmail[10907]: n2U46GOq010907: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:06:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:07:16 splunk3 sendmail[11152]: n2U47G31011152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:08:16 splunk3 sendmail[11388]: n2U48GfE011388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:08:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:09:16 splunk3 sendmail[11632]: n2U49GbU011632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:10:02 splunk3 sendmail[11912]: n2U4A2BC011912: from=root, size=292, class=0, nrcpts=1, msgid=<200903300410.n2U4A2BC011912@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 21:10:02 splunk3 sendmail[11915]: n2U4A2VJ011915: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300410.n2U4A2BC011912@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 21:10:02 splunk3 sendmail[11912]: n2U4A2BC011912: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U4A2VJ011915 Message accepted for delivery)
|
|
Mar 29 21:10:04 splunk3 sendmail[11916]: n2U4A2VJ011915: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:10:09 splunk3 sendmail[11951]: n2U4A9EU011951: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300410.n2U4A94G029243@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:10:09 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56302
|
|
Mar 29 21:10:09 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:10:09 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:10:09 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:10:09 splunk3 spamd[27585]: spamd: processing message <200903300410.n2U4A94G029243@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:10:11 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 21:10:11 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56302,mid=<200903300410.n2U4A94G029243@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 21:10:11 splunk3 sendmail[11952]: n2U4A9EU011951: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:10:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:10:16 splunk3 sendmail[11992]: n2U4AGPx011992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:11:16 splunk3 sendmail[12233]: n2U4BGa3012233: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:11:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 21:12:16 splunk3 sendmail[12472]: n2U4CGUP012472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:13:16 splunk3 sendmail[12718]: n2U4DGnc012718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:13:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:14:16 splunk3 sendmail[12954]: n2U4EGkU012954: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:15:12 splunk3 sendmail[13183]: n2U4FCVc013183: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300415.n2U4FAOG030047@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:15:12 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56358
|
|
Mar 29 21:15:12 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:15:12 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:15:12 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:15:12 splunk3 spamd[27585]: spamd: processing message <200903300415.n2U4FAOG030047@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:15:14 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 21:15:14 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56358,mid=<200903300415.n2U4FAOG030047@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 21:15:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:15:14 splunk3 sendmail[13184]: n2U4FCVc013183: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:15:16 splunk3 sendmail[13206]: n2U4FG2o013206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:16:16 splunk3 sendmail[13481]: n2U4GGDV013481: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:16:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:17:16 splunk3 sendmail[13722]: n2U4HGec013722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:18:16 splunk3 sendmail[13958]: n2U4IG8B013958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:18:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:19:16 splunk3 sendmail[14197]: n2U4JGC8014197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:20:12 splunk3 sendmail[14432]: n2U4KCYu014432: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300420.n2U4KCHf030686@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:20:12 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56414
|
|
Mar 29 21:20:12 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:20:12 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:20:12 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:20:12 splunk3 spamd[27585]: spamd: processing message <200903300420.n2U4KCHf030686@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:20:14 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 21:20:14 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56414,mid=<200903300420.n2U4KCHf030686@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 21:20:14 splunk3 sendmail[14433]: n2U4KCYu014432: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:20:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:20:16 splunk3 sendmail[14455]: n2U4KG9Q014455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:21:16 splunk3 sendmail[14695]: n2U4LGaN014695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:21:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:22:16 splunk3 sendmail[14933]: n2U4MG93014933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:23:16 splunk3 sendmail[15176]: n2U4NG4x015176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:23:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:24:16 splunk3 sendmail[15413]: n2U4OGPB015413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:25:13 splunk3 sendmail[15645]: n2U4PDb2015645: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300425.n2U4PD3L031299@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:25:13 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56469
|
|
Mar 29 21:25:13 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:25:13 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:25:13 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:25:13 splunk3 spamd[27585]: spamd: processing message <200903300425.n2U4PD3L031299@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:25:16 splunk3 sendmail[15670]: n2U4PGYl015670: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:25:17 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1311 bytes.
|
|
Mar 29 21:25:17 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56469,mid=<200903300425.n2U4PD3L031299@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 21:25:17 splunk3 sendmail[15647]: n2U4PDb2015645: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:25:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:26:16 splunk3 sendmail[15904]: n2U4QGRe015904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:26:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 21:27:16 splunk3 sendmail[16150]: n2U4RGuv016150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:28:16 splunk3 sendmail[16386]: n2U4SGbp016386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:28:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:29:16 splunk3 sendmail[16625]: n2U4TG2G016625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:30:14 splunk3 sendmail[16875]: n2U4UEcP016875: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300430.n2U4UE38031915@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:30:15 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56526
|
|
Mar 29 21:30:15 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:30:15 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:30:15 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:30:15 splunk3 spamd[27585]: spamd: processing message <200903300430.n2U4UE38031915@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:30:16 splunk3 sendmail[16883]: n2U4UG4Y016883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:30:17 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 21:30:17 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56526,mid=<200903300430.n2U4UE38031915@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 21:30:17 splunk3 sendmail[16876]: n2U4UEcP016875: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:30:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:31:16 splunk3 sendmail[17121]: n2U4VGD0017121: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:31:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:32:16 splunk3 sendmail[17361]: n2U4WGRI017361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:33:16 splunk3 sendmail[17598]: n2U4XGVe017598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:33:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:34:16 splunk3 sendmail[17837]: n2U4YGoV017837: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:35:15 splunk3 sendmail[18085]: n2U4ZFwb018085: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300435.n2U4ZF8A032660@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:35:15 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56582
|
|
Mar 29 21:35:15 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:35:15 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:35:15 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:35:15 splunk3 spamd[27585]: spamd: processing message <200903300435.n2U4ZF8A032660@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:35:16 splunk3 sendmail[18091]: n2U4ZGW2018091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:35:18 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 21:35:18 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56582,mid=<200903300435.n2U4ZF8A032660@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 21:35:18 splunk3 sendmail[18086]: n2U4ZFwb018085: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:35:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:36:16 splunk3 sendmail[18324]: n2U4aGGU018324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:36:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:37:16 splunk3 sendmail[18570]: n2U4bGYf018570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:38:16 splunk3 sendmail[18806]: n2U4cGmK018806: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:38:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:39:16 splunk3 sendmail[19050]: n2U4dG68019050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:40:15 splunk3 sendmail[19301]: n2U4eF73019301: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903300440.n2U4eF5C000829@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:40:15 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56637
|
|
Mar 29 21:40:15 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:40:15 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:40:15 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:40:15 splunk3 spamd[27585]: spamd: processing message <200903300440.n2U4eF5C000829@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:40:16 splunk3 sendmail[19307]: n2U4eGJw019307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:40:17 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1305 bytes.
|
|
Mar 29 21:40:17 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56637,mid=<200903300440.n2U4eF5C000829@virt2.int.splunk.com>,bayes=0.066486926298814,autolearn=no
|
|
Mar 29 21:40:17 splunk3 sendmail[19302]: n2U4eF73019301: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:40:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:41:16 splunk3 sendmail[19547]: n2U4fGso019547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:41:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 21:42:16 splunk3 sendmail[19789]: n2U4gG6R019789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:43:16 splunk3 sendmail[20029]: n2U4hGkS020029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:43:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:44:16 splunk3 sendmail[20265]: n2U4iG31020265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:45:16 splunk3 sendmail[20512]: n2U4jGIZ020512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:45:16 splunk3 sendmail[20513]: n2U4jGLO020513: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300445.n2U4jGwX001460@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:45:16 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56694
|
|
Mar 29 21:45:16 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:45:16 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:45:16 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:45:16 splunk3 spamd[27585]: spamd: processing message <200903300445.n2U4jGwX001460@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:45:18 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 21:45:18 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56694,mid=<200903300445.n2U4jGwX001460@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 21:45:18 splunk3 sendmail[20514]: n2U4jGLO020513: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:45:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:46:16 splunk3 sendmail[20754]: n2U4kGwJ020754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:46:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:47:16 splunk3 sendmail[20998]: n2U4lGsw020998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:48:16 splunk3 sendmail[21232]: n2U4mGGJ021232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:48:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:49:16 splunk3 sendmail[21473]: n2U4nGnB021473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:50:16 splunk3 sendmail[21723]: n2U4oG61021723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:50:16 splunk3 sendmail[21724]: n2U4oGrL021724: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300450.n2U4oGCs002102@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:50:16 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56749
|
|
Mar 29 21:50:16 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:50:16 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:50:16 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:50:16 splunk3 spamd[27585]: spamd: processing message <200903300450.n2U4oGCs002102@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:50:19 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 29 21:50:19 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56749,mid=<200903300450.n2U4oGCs002102@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 21:50:19 splunk3 sendmail[21725]: n2U4oGrL021724: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:50:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:51:16 splunk3 sendmail[21965]: n2U4pGNw021965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:51:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:52:16 splunk3 sendmail[22204]: n2U4qGJY022204: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:53:16 splunk3 sendmail[22447]: n2U4rGoI022447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:53:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:54:16 splunk3 sendmail[22683]: n2U4sGlf022683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:55:16 splunk3 sendmail[22933]: n2U4tGLo022933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:55:17 splunk3 sendmail[22934]: n2U4tHEZ022934: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300455.n2U4tHKq002720@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 21:55:17 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56805
|
|
Mar 29 21:55:17 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 21:55:17 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 21:55:17 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 21:55:17 splunk3 spamd[27585]: spamd: processing message <200903300455.n2U4tHKq002720@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 21:55:19 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 29 21:55:19 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56805,mid=<200903300455.n2U4tHKq002720@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 21:55:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 21:55:20 splunk3 sendmail[22935]: n2U4tHEZ022934: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 21:56:16 splunk3 sendmail[23173]: n2U4uGc8023173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:56:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 21:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 21:57:16 splunk3 sendmail[23418]: n2U4vGYp023418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:58:16 splunk3 sendmail[23653]: n2U4wGfr023653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 21:58:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 21:59:16 splunk3 sendmail[23894]: n2U4xG9m023894: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:00:04 splunk3 sendmail[24156]: n2U504hp024156: from=root, size=291, class=0, nrcpts=1, msgid=<200903300500.n2U504hp024156@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 22:00:04 splunk3 sendmail[24160]: n2U504BE024160: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300500.n2U504hp024156@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 22:00:04 splunk3 sendmail[24156]: n2U504hp024156: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U504BE024160 Message accepted for delivery)
|
|
Mar 29 22:00:05 splunk3 sendmail[24161]: n2U504BE024160: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:00:07 splunk3 sendmail[24179]: n2U507QM024179: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903300500.n2U507QM024179@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 22:00:07 splunk3 sendmail[24181]: n2U507QM024179: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 22:00:07 splunk3 sendmail[24181]: n2U507QM024179: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 29 22:00:07 splunk3 sendmail[24181]: n2U507QM024179: n2U507QM024181: postmaster notify: User unknown
|
|
Mar 29 22:00:09 splunk3 sendmail[24181]: n2U507QM024181: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:00:16 splunk3 sendmail[24230]: n2U50Gfp024230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:00:17 splunk3 sendmail[24232]: n2U50HRi024232: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300500.n2U50HSL003361@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:00:17 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56869
|
|
Mar 29 22:00:17 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:00:17 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 22:00:17 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 22:00:17 splunk3 sendmail[24233]: n2U50HRi024232: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:00:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:01:08 splunk3 sendmail[24421]: n2U511vE024421: from=root, size=443, class=0, nrcpts=1, msgid=<200903300501.n2U511vE024421@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 22:01:08 splunk3 sendmail[24447]: n2U518kt024447: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300501.n2U511vE024421@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 22:01:08 splunk3 sendmail[24421]: n2U511vE024421: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U518kt024447 Message accepted for delivery)
|
|
Mar 29 22:01:10 splunk3 sendmail[24448]: n2U518kt024447: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:01:16 splunk3 sendmail[24488]: n2U51GG3024488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:01:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:02:16 splunk3 sendmail[24728]: n2U52GXr024728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:03:16 splunk3 sendmail[24967]: n2U53Gdp024967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:03:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:04:16 splunk3 sendmail[25204]: n2U54Ga1025204: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:04:21 splunk3 sendmail[25205]: n2U54KEZ025205: from=<torresdavid09@yahoo.com.hk>, size=1380, class=0, nrcpts=1, msgid=<200903300504.n2U54KEZ025205@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=rs3.camnet.cm [195.24.192.70]
|
|
Mar 29 22:04:21 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56911
|
|
Mar 29 22:04:21 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:04:21 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 22:04:21 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 22:04:21 splunk3 sendmail[25225]: n2U54KEZ025205: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31633, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:04:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:05:16 splunk3 sendmail[25456]: n2U55GkI025456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:05:18 splunk3 sendmail[25458]: n2U55H8L025458: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300505.n2U55H69004047@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:05:18 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56927
|
|
Mar 29 22:05:18 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:05:18 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 22:05:18 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 22:05:18 splunk3 sendmail[25459]: n2U55H8L025458: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:05:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:06:16 splunk3 sendmail[25694]: n2U56G3T025694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:06:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:07:16 splunk3 sendmail[25939]: n2U57G4r025939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:08:16 splunk3 sendmail[26177]: n2U58GTj026177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:08:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:09:16 splunk3 sendmail[26419]: n2U59Gle026419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:10:02 splunk3 sendmail[26694]: n2U5A287026694: from=root, size=292, class=0, nrcpts=1, msgid=<200903300510.n2U5A287026694@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 22:10:02 splunk3 sendmail[26699]: n2U5A2jh026699: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300510.n2U5A287026694@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 22:10:02 splunk3 sendmail[26694]: n2U5A287026694: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U5A2jh026699 Message accepted for delivery)
|
|
Mar 29 22:10:04 splunk3 sendmail[26700]: n2U5A2jh026699: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:10:16 splunk3 sendmail[26773]: n2U5AGk4026773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:10:19 splunk3 sendmail[26791]: n2U5AJap026791: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300510.n2U5AI9J004661@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:10:19 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56983
|
|
Mar 29 22:10:19 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:10:19 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:10:19 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:10:19 splunk3 spamd[27585]: spamd: processing message <200903300510.n2U5AI9J004661@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:10:21 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 29 22:10:21 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56983,mid=<200903300510.n2U5AI9J004661@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 22:10:21 splunk3 sendmail[26792]: n2U5AJap026791: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:10:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:11:16 splunk3 sendmail[27016]: n2U5BGpi027016: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:11:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 22:12:16 splunk3 sendmail[27257]: n2U5CGPH027257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:13:16 splunk3 sendmail[27496]: n2U5DGkf027496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:13:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:14:16 splunk3 sendmail[27736]: n2U5EGvA027736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:15:16 splunk3 sendmail[27985]: n2U5FG1R027985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:15:19 splunk3 sendmail[28005]: n2U5FJYN028005: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300515.n2U5FJpV005459@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:15:19 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57040
|
|
Mar 29 22:15:19 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:15:19 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:15:19 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:15:19 splunk3 spamd[27585]: spamd: processing message <200903300515.n2U5FJpV005459@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:15:22 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 29 22:15:22 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57040,mid=<200903300515.n2U5FJpV005459@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 22:15:22 splunk3 sendmail[28006]: n2U5FJYN028005: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:15:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:16:16 splunk3 sendmail[28227]: n2U5GGJ1028227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:16:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:17:16 splunk3 sendmail[28472]: n2U5HG1s028472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:18:16 splunk3 sendmail[28705]: n2U5IGwN028705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:18:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:19:16 splunk3 sendmail[28948]: n2U5JGdi028948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:20:16 splunk3 sendmail[29198]: n2U5KGTd029198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:20:20 splunk3 sendmail[29218]: n2U5KK8B029218: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300520.n2U5KKds006095@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:20:20 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57096
|
|
Mar 29 22:20:20 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:20:20 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:20:20 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:20:20 splunk3 spamd[27585]: spamd: processing message <200903300520.n2U5KKds006095@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:20:22 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 22:20:22 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57096,mid=<200903300520.n2U5KKds006095@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 22:20:22 splunk3 sendmail[29219]: n2U5KK8B029218: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:20:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:21:16 splunk3 sendmail[29443]: n2U5LGow029443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:21:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:22:16 splunk3 sendmail[29681]: n2U5MGu1029681: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:23:16 splunk3 sendmail[29923]: n2U5NGZs029923: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:23:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:24:16 splunk3 sendmail[30160]: n2U5OG4Y030160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:25:16 splunk3 sendmail[30407]: n2U5PGgv030407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:25:21 splunk3 sendmail[30426]: n2U5PLpv030426: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300525.n2U5PKA0006705@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:25:21 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57151
|
|
Mar 29 22:25:21 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:25:21 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:25:21 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:25:21 splunk3 spamd[27585]: spamd: processing message <200903300525.n2U5PKA0006705@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:25:23 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 29 22:25:23 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57151,mid=<200903300525.n2U5PKA0006705@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 22:25:23 splunk3 sendmail[30427]: n2U5PLpv030426: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:25:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:26:16 splunk3 sendmail[30648]: n2U5QGOJ030648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:26:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 22:27:16 splunk3 sendmail[30891]: n2U5RGMm030891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:28:16 splunk3 sendmail[31126]: n2U5SGDo031126: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:28:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:29:16 splunk3 sendmail[31367]: n2U5TGct031367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:30:16 splunk3 sendmail[31618]: n2U5UG96031618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:30:21 splunk3 sendmail[31638]: n2U5UL83031638: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300530.n2U5ULXn007324@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:30:21 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57208
|
|
Mar 29 22:30:21 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:30:21 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:30:21 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:30:21 splunk3 spamd[27585]: spamd: processing message <200903300530.n2U5ULXn007324@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:30:23 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 29 22:30:23 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57208,mid=<200903300530.n2U5ULXn007324@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 22:30:23 splunk3 sendmail[31639]: n2U5UL83031638: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:30:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:31:16 splunk3 sendmail[31864]: n2U5VGgO031864: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:31:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:32:16 splunk3 sendmail[32104]: n2U5WGxp032104: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:33:16 splunk3 sendmail[32343]: n2U5XGNe032343: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:33:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:34:16 splunk3 sendmail[32580]: n2U5YGU4032580: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:35:16 splunk3 sendmail[363]: n2U5ZGVQ000363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:35:22 splunk3 sendmail[381]: n2U5ZL9i000381: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300535.n2U5ZLlX008069@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:35:22 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57263
|
|
Mar 29 22:35:22 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:35:22 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:35:22 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:35:22 splunk3 spamd[27585]: spamd: processing message <200903300535.n2U5ZLlX008069@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:35:24 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 29 22:35:24 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57263,mid=<200903300535.n2U5ZLlX008069@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 22:35:24 splunk3 sendmail[382]: n2U5ZL9i000381: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:35:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:36:16 splunk3 sendmail[602]: n2U5aGqm000602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:36:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:37:16 splunk3 sendmail[847]: n2U5bG92000847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:38:16 splunk3 sendmail[1086]: n2U5cGKr001086: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:38:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:39:16 splunk3 sendmail[1328]: n2U5dGdT001328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:40:16 splunk3 sendmail[1578]: n2U5eG6D001578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:40:22 splunk3 sendmail[1598]: n2U5eM8C001598: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300540.n2U5eM8f008706@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:40:22 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57319
|
|
Mar 29 22:40:22 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:40:22 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:40:22 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:40:22 splunk3 spamd[27585]: spamd: processing message <200903300540.n2U5eM8f008706@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:40:24 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 29 22:40:24 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57319,mid=<200903300540.n2U5eM8f008706@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 22:40:24 splunk3 sendmail[1599]: n2U5eM8C001598: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:40:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:41:16 splunk3 sendmail[1822]: n2U5fGDq001822: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:41:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 22:42:16 splunk3 sendmail[2066]: n2U5gGPE002066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:43:16 splunk3 sendmail[2304]: n2U5hGA6002304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:43:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:44:16 splunk3 sendmail[2541]: n2U5iGCF002541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:45:16 splunk3 sendmail[2804]: n2U5jGoo002804: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:45:22 splunk3 sendmail[2825]: n2U5jMdj002825: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300545.n2U5jMiI009315@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:45:23 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57375
|
|
Mar 29 22:45:23 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:45:23 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:45:23 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:45:23 splunk3 spamd[27585]: spamd: processing message <200903300545.n2U5jMiI009315@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:45:25 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 29 22:45:25 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57375,mid=<200903300545.n2U5jMiI009315@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 22:45:25 splunk3 sendmail[2826]: n2U5jMdj002825: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:45:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:46:16 splunk3 sendmail[3056]: n2U5kG6J003056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:46:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:47:16 splunk3 sendmail[3302]: n2U5lGRe003302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:48:16 splunk3 sendmail[3535]: n2U5mGLd003535: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:48:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:49:16 splunk3 sendmail[3807]: n2U5nGS5003807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:50:16 splunk3 sendmail[4070]: n2U5oGWE004070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:50:23 splunk3 sendmail[4089]: n2U5oN4a004089: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300550.n2U5oN7S009933@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:50:23 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57431
|
|
Mar 29 22:50:23 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:50:23 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:50:23 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:50:23 splunk3 spamd[27585]: spamd: processing message <200903300550.n2U5oN7S009933@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:50:25 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Mar 29 22:50:25 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57431,mid=<200903300550.n2U5oN7S009933@virt2.int.splunk.com>,bayes=0.169414464690561,autolearn=no
|
|
Mar 29 22:50:25 splunk3 sendmail[4094]: n2U5oN4a004089: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:51:16 splunk3 sendmail[4333]: n2U5pG5t004333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:51:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:52:16 splunk3 sendmail[4575]: n2U5qGuY004575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:53:16 splunk3 sendmail[4818]: n2U5rGDG004818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:53:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:54:16 splunk3 sendmail[5067]: n2U5sG5b005067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:55:16 splunk3 sendmail[5351]: n2U5tGLL005351: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:55:24 splunk3 sendmail[5398]: n2U5tO8E005398: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300555.n2U5tNDc010544@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 22:55:24 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57487
|
|
Mar 29 22:55:24 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 22:55:24 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 22:55:24 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 22:55:24 splunk3 spamd[27585]: spamd: processing message <200903300555.n2U5tNDc010544@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 22:55:26 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 22:55:26 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57487,mid=<200903300555.n2U5tNDc010544@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 22:55:26 splunk3 sendmail[5399]: n2U5tO8E005398: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 22:55:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 22:56:16 splunk3 sendmail[5597]: n2U5uGDf005597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:56:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 22:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 22:57:16 splunk3 sendmail[5841]: n2U5vG3j005841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:58:16 splunk3 sendmail[6074]: n2U5wGrv006074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 22:58:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 22:59:16 splunk3 sendmail[6316]: n2U5xGbL006316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:00:04 splunk3 sendmail[6575]: n2U604Ue006575: from=root, size=291, class=0, nrcpts=1, msgid=<200903300600.n2U604Ue006575@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 23:00:04 splunk3 sendmail[6579]: n2U604Jf006579: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300600.n2U604Ue006575@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 23:00:04 splunk3 sendmail[6575]: n2U604Ue006575: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U604Jf006579 Message accepted for delivery)
|
|
Mar 29 23:00:06 splunk3 sendmail[6580]: n2U604Jf006579: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:00:14 splunk3 sendmail[6634]: n2U60EPN006634: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903300600.n2U60EPN006634@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 23:00:14 splunk3 sendmail[6636]: n2U60EPN006634: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 29 23:00:14 splunk3 sendmail[6636]: n2U60EPN006634: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 29 23:00:14 splunk3 sendmail[6636]: n2U60EPN006634: n2U60EPN006636: postmaster notify: User unknown
|
|
Mar 29 23:00:15 splunk3 sendmail[6636]: n2U60EPN006636: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:00:16 splunk3 sendmail[6650]: n2U60GWw006650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:00:25 splunk3 sendmail[6693]: n2U60PCT006693: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300600.n2U60Opp011188@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:00:25 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57551
|
|
Mar 29 23:00:25 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:00:25 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 23:00:25 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 23:00:25 splunk3 sendmail[6694]: n2U60PCT006693: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:00:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:01:02 splunk3 sendmail[6841]: n2U611gn006841: from=root, size=443, class=0, nrcpts=1, msgid=<200903300601.n2U611gn006841@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 23:01:02 splunk3 sendmail[6843]: n2U612YP006843: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300601.n2U611gn006841@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 23:01:02 splunk3 sendmail[6841]: n2U611gn006841: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U612YP006843 Message accepted for delivery)
|
|
Mar 29 23:01:04 splunk3 sendmail[6844]: n2U612YP006843: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:01:16 splunk3 sendmail[6908]: n2U61Grp006908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:01:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:02:16 splunk3 sendmail[7146]: n2U62Gpx007146: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:03:16 splunk3 sendmail[7386]: n2U63Gec007386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:03:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:04:16 splunk3 sendmail[7632]: n2U64G24007632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:05:17 splunk3 sendmail[7881]: n2U65Gph007881: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:05:25 splunk3 sendmail[7922]: n2U65Ppi007922: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300605.n2U65PAi011868@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:05:25 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57608
|
|
Mar 29 23:05:25 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:05:25 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 29 23:05:25 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 29 23:05:25 splunk3 sendmail[7923]: n2U65Ppi007922: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:06:17 splunk3 sendmail[8122]: n2U66Hw2008122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:06:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:07:17 splunk3 sendmail[8366]: n2U67H3x008366: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:08:17 splunk3 sendmail[8606]: n2U68HgY008606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:08:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:09:17 splunk3 sendmail[8848]: n2U69Hbm008848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:10:02 splunk3 sendmail[9126]: n2U6A2Ic009126: from=root, size=292, class=0, nrcpts=1, msgid=<200903300610.n2U6A2Ic009126@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 29 23:10:02 splunk3 sendmail[9131]: n2U6A2uA009131: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300610.n2U6A2Ic009126@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 29 23:10:02 splunk3 sendmail[9126]: n2U6A2Ic009126: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U6A2uA009131 Message accepted for delivery)
|
|
Mar 29 23:10:03 splunk3 sendmail[9132]: n2U6A2uA009131: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:10:17 splunk3 sendmail[9204]: n2U6AHu6009204: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:10:26 splunk3 sendmail[9245]: n2U6APjJ009245: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300610.n2U6APbS012481@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:10:26 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57664
|
|
Mar 29 23:10:26 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:10:26 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:10:26 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:10:26 splunk3 spamd[27585]: spamd: processing message <200903300610.n2U6APbS012481@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:10:28 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 29 23:10:28 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57664,mid=<200903300610.n2U6APbS012481@virt2.int.splunk.com>,bayes=0.112467054235847,autolearn=no
|
|
Mar 29 23:10:28 splunk3 sendmail[9246]: n2U6APjJ009245: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:10:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:11:17 splunk3 sendmail[9447]: n2U6BHOF009447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:11:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 23:12:17 splunk3 sendmail[9697]: n2U6CHSL009697: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:13:03 splunk3 sendmail[9877]: n2U6D3nt009877: from=<372LQSRQKBmwQYYQVOKVObdc-XYbOZViQYYQVO.MYWcZKWWOcZVeXUSd.MYW@alerts.bounces.google.com>, size=4461, class=0, nrcpts=1, msgid=<00163630f2419b93cc04664ff9fa@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.162]
|
|
Mar 29 23:13:03 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57691
|
|
Mar 29 23:13:03 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:13:03 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:13:03 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:13:03 splunk3 spamd[27585]: spamd: processing message <00163630f2419b93cc04664ff9fa@google.com> for spamme:501
|
|
Mar 29 23:13:06 splunk3 spamd[27585]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.3 seconds, 4891 bytes.
|
|
Mar 29 23:13:06 splunk3 spamd[27585]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.3,size=4891,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57691,mid=<00163630f2419b93cc04664ff9fa@google.com>,bayes=0,autolearn=ham
|
|
Mar 29 23:13:06 splunk3 sendmail[9894]: n2U6D3nt009877: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=34672, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:13:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:13:17 splunk3 sendmail[9943]: n2U6DHG2009943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:13:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:14:17 splunk3 sendmail[10179]: n2U6EHAl010179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:15:17 splunk3 sendmail[10427]: n2U6FHn3010427: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:15:26 splunk3 sendmail[10468]: n2U6FQLe010468: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300615.n2U6FQ7U013280@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:15:26 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57722
|
|
Mar 29 23:15:26 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:15:26 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:15:26 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:15:26 splunk3 spamd[27585]: spamd: processing message <200903300615.n2U6FQ7U013280@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:15:28 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1311 bytes.
|
|
Mar 29 23:15:28 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57722,mid=<200903300615.n2U6FQ7U013280@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 29 23:15:28 splunk3 sendmail[10469]: n2U6FQLe010468: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:16:17 splunk3 sendmail[10667]: n2U6GHW8010667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:16:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:17:17 splunk3 sendmail[10912]: n2U6HHh9010912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:18:17 splunk3 sendmail[11143]: n2U6IHZL011143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:18:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:19:17 splunk3 sendmail[11385]: n2U6JHLj011385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:20:17 splunk3 sendmail[11637]: n2U6KHb6011637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:20:27 splunk3 sendmail[11679]: n2U6KRCg011679: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300620.n2U6KQfk013919@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:20:27 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57777
|
|
Mar 29 23:20:27 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:20:27 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:20:27 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:20:27 splunk3 spamd[27585]: spamd: processing message <200903300620.n2U6KQfk013919@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:20:29 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 29 23:20:29 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57777,mid=<200903300620.n2U6KQfk013919@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 29 23:20:29 splunk3 sendmail[11680]: n2U6KRCg011679: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:20:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:21:17 splunk3 sendmail[11881]: n2U6LHfQ011881: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:21:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:22:17 splunk3 sendmail[12122]: n2U6MH2T012122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:23:17 splunk3 sendmail[12363]: n2U6NHVW012363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:23:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:24:17 splunk3 sendmail[12600]: n2U6OHru012600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:25:17 splunk3 sendmail[12849]: n2U6PHMk012849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:25:27 splunk3 sendmail[12893]: n2U6PRPO012893: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300625.n2U6PRw7014552@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:25:27 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57833
|
|
Mar 29 23:25:27 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:25:27 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:25:27 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:25:27 splunk3 spamd[27585]: spamd: processing message <200903300625.n2U6PRw7014552@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:25:29 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 23:25:29 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57833,mid=<200903300625.n2U6PRw7014552@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 29 23:25:29 splunk3 sendmail[12894]: n2U6PRPO012893: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:26:17 splunk3 sendmail[13090]: n2U6QHVl013090: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:26:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 23:27:17 splunk3 sendmail[13375]: n2U6RH3P013375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:28:17 splunk3 sendmail[13611]: n2U6SHDK013611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:28:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:29:17 splunk3 sendmail[13851]: n2U6THNU013851: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:30:17 splunk3 sendmail[14098]: n2U6UHt9014098: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:30:28 splunk3 sendmail[14142]: n2U6USvE014142: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300630.n2U6UR04015148@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:30:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57889
|
|
Mar 29 23:30:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:30:28 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:30:28 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:30:28 splunk3 spamd[27585]: spamd: processing message <200903300630.n2U6UR04015148@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:30:30 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 23:30:30 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57889,mid=<200903300630.n2U6UR04015148@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 29 23:30:30 splunk3 sendmail[14143]: n2U6USvE014142: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:31:17 splunk3 sendmail[14345]: n2U6VHDL014345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:31:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:32:17 splunk3 sendmail[14583]: n2U6WHNa014583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:33:17 splunk3 sendmail[14817]: n2U6XHKs014817: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:33:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:34:17 splunk3 sendmail[15056]: n2U6YH9V015056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:35:17 splunk3 sendmail[15296]: n2U6ZH5Y015296: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:35:28 splunk3 sendmail[15366]: n2U6ZS6D015366: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300635.n2U6ZSMr015920@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:35:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57945
|
|
Mar 29 23:35:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:35:28 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:35:28 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:35:28 splunk3 spamd[27585]: spamd: processing message <200903300635.n2U6ZSMr015920@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:35:30 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 29 23:35:30 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57945,mid=<200903300635.n2U6ZSMr015920@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 29 23:35:30 splunk3 sendmail[15367]: n2U6ZS6D015366: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:36:17 splunk3 sendmail[15547]: n2U6aHJd015547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:36:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:37:17 splunk3 sendmail[15790]: n2U6bHXt015790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:38:17 splunk3 sendmail[16028]: n2U6cHg0016028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:38:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:39:17 splunk3 sendmail[16270]: n2U6dHZf016270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:40:17 splunk3 sendmail[16511]: n2U6eHUY016511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:40:29 splunk3 sendmail[16585]: n2U6eSV3016585: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300640.n2U6eSt6016529@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:40:29 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58000
|
|
Mar 29 23:40:29 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:40:29 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:40:29 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:40:29 splunk3 spamd[27585]: spamd: processing message <200903300640.n2U6eSt6016529@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:40:31 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 29 23:40:31 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58000,mid=<200903300640.n2U6eSt6016529@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 29 23:40:31 splunk3 sendmail[16586]: n2U6eSV3016585: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:40:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:41:17 splunk3 sendmail[16767]: n2U6fHvL016767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:41:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 23:42:17 splunk3 sendmail[17008]: n2U6gHmY017008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:43:17 splunk3 sendmail[17249]: n2U6hH04017249: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:43:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:44:17 splunk3 sendmail[17485]: n2U6iHIY017485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:45:17 splunk3 sendmail[17723]: n2U6jHAJ017723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:45:29 splunk3 sendmail[17798]: n2U6jTbA017798: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300645.n2U6jT4K017172@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:45:29 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58057
|
|
Mar 29 23:45:29 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:45:29 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:45:29 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:45:29 splunk3 spamd[27585]: spamd: processing message <200903300645.n2U6jT4K017172@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:45:31 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1311 bytes.
|
|
Mar 29 23:45:31 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58057,mid=<200903300645.n2U6jT4K017172@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 29 23:45:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:45:31 splunk3 sendmail[17799]: n2U6jTbA017798: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:46:17 splunk3 sendmail[17974]: n2U6kHH9017974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:46:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:47:17 splunk3 sendmail[18216]: n2U6lHpk018216: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:48:17 splunk3 sendmail[18452]: n2U6mHPV018452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:48:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:49:17 splunk3 sendmail[18695]: n2U6nHmf018695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:50:17 splunk3 sendmail[18938]: n2U6oHVY018938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:50:30 splunk3 sendmail[19009]: n2U6oUmI019009: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300650.n2U6oTlA017766@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:50:30 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58113
|
|
Mar 29 23:50:30 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:50:30 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:50:30 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:50:30 splunk3 spamd[27585]: spamd: processing message <200903300650.n2U6oTlA017766@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:50:32 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 29 23:50:32 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58113,mid=<200903300650.n2U6oTlA017766@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 29 23:50:32 splunk3 sendmail[19010]: n2U6oUmI019009: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:50:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:51:17 splunk3 sendmail[19190]: n2U6pHxv019190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:51:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:52:17 splunk3 sendmail[19430]: n2U6qH3L019430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:53:17 splunk3 sendmail[19680]: n2U6rHph019680: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:53:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:54:17 splunk3 sendmail[19918]: n2U6sHx9019918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:55:00 splunk3 sendmail[20100]: n2U6t0Ch020100: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300655.n2U6t0Cl018299@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 29 23:55:00 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58156
|
|
Mar 29 23:55:00 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 29 23:55:00 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 29 23:55:00 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 29 23:55:00 splunk3 spamd[27585]: spamd: processing message <200903300655.n2U6t0Cl018299@virt2.int.splunk.com> for spamme:501
|
|
Mar 29 23:55:02 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 29 23:55:02 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58156,mid=<200903300655.n2U6t0Cl018299@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 29 23:55:02 splunk3 sendmail[20101]: n2U6t0Ch020100: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 29 23:55:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 29 23:55:17 splunk3 sendmail[20166]: n2U6tHWi020166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:56:17 splunk3 sendmail[20410]: n2U6uHuO020410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:56:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 29 23:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 29 23:57:17 splunk3 sendmail[20655]: n2U6vHQ5020655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:58:17 splunk3 sendmail[20889]: n2U6wHgC020889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 29 23:58:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 29 23:59:17 splunk3 sendmail[21129]: n2U6xHHI021129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:00:00 splunk3 sendmail[21306]: n2U700LS021306: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300700.n2U7007f018917@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:00:00 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58212
|
|
Mar 30 00:00:00 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:00:00 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:00:00 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:00:00 splunk3 spamd[27585]: spamd: processing message <200903300700.n2U7007f018917@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:00:03 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 00:00:03 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58212,mid=<200903300700.n2U7007f018917@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:00:03 splunk3 sendmail[21307]: n2U700LS021306: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:00:04 splunk3 sendmail[21395]: n2U704Dx021395: from=root, size=291, class=0, nrcpts=1, msgid=<200903300700.n2U704Dx021395@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 00:00:04 splunk3 sendmail[21402]: n2U704ll021402: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300700.n2U704Dx021395@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 00:00:04 splunk3 sendmail[21395]: n2U704Dx021395: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U704ll021402 Message accepted for delivery)
|
|
Mar 30 00:00:05 splunk3 sendmail[21403]: n2U704ll021402: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:00:17 splunk3 sendmail[21443]: n2U70H9O021443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:00:19 splunk3 sendmail[21473]: n2U70Jf7021473: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903300700.n2U70Jf7021473@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 00:00:19 splunk3 sendmail[21475]: n2U70Jf7021473: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 00:00:19 splunk3 sendmail[21475]: n2U70Jf7021473: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 00:00:19 splunk3 sendmail[21475]: n2U70Jf7021473: n2U70Jf7021475: postmaster notify: User unknown
|
|
Mar 30 00:00:21 splunk3 sendmail[21475]: n2U70Jf7021475: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:01:09 splunk3 sendmail[21656]: n2U711lc021656: from=root, size=443, class=0, nrcpts=1, msgid=<200903300701.n2U711lc021656@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 00:01:09 splunk3 sendmail[21698]: n2U7197Y021698: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300701.n2U711lc021656@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 00:01:09 splunk3 sendmail[21656]: n2U711lc021656: to=root, ctladdr=root (0/0), delay=00:00:08, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U7197Y021698 Message accepted for delivery)
|
|
Mar 30 00:01:10 splunk3 sendmail[21699]: n2U7197Y021698: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:01:17 splunk3 sendmail[21721]: n2U71HpO021721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:01:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:02:17 splunk3 sendmail[21961]: n2U72H2f021961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:03:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:03:17 splunk3 sendmail[22202]: n2U73Hc9022202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:04:17 splunk3 sendmail[22436]: n2U74H8K022436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:05:01 splunk3 sendmail[22619]: n2U751js022619: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300705.n2U751oI019632@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:05:01 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58276
|
|
Mar 30 00:05:01 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:05:01 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 00:05:01 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 00:05:01 splunk3 sendmail[22620]: n2U751js022619: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:05:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:05:17 splunk3 sendmail[22679]: n2U75HCZ022679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:06:17 splunk3 sendmail[22923]: n2U76H8O022923: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:06:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:07:17 splunk3 sendmail[23167]: n2U77H4T023167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:08:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:08:17 splunk3 sendmail[23407]: n2U78HMt023407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:09:17 splunk3 sendmail[23650]: n2U79HjZ023650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:10:02 splunk3 sendmail[23924]: n2U7A27U023924: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300710.n2U7A1Kw020285@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:10:02 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58332
|
|
Mar 30 00:10:02 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:10:02 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:10:02 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:10:02 splunk3 spamd[27585]: spamd: processing message <200903300710.n2U7A1Kw020285@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:10:02 splunk3 sendmail[23933]: n2U7A2HL023933: from=root, size=292, class=0, nrcpts=1, msgid=<200903300710.n2U7A2HL023933@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 00:10:02 splunk3 sendmail[23938]: n2U7A20X023938: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300710.n2U7A2HL023933@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 00:10:02 splunk3 sendmail[23933]: n2U7A2HL023933: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U7A20X023938 Message accepted for delivery)
|
|
Mar 30 00:10:03 splunk3 sendmail[23939]: n2U7A20X023938: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:10:04 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 00:10:04 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58332,mid=<200903300710.n2U7A1Kw020285@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:10:04 splunk3 sendmail[23925]: n2U7A27U023924: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:10:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:10:17 splunk3 sendmail[24001]: n2U7AHB6024001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:11:17 splunk3 sendmail[24250]: n2U7BHg3024250: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:11:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 00:12:17 splunk3 sendmail[24489]: n2U7CHHx024489: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:13:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:13:17 splunk3 sendmail[24732]: n2U7DHxO024732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:14:17 splunk3 sendmail[24966]: n2U7EHg1024966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:15:03 splunk3 sendmail[25166]: n2U7F37C025166: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300715.n2U7F2Cr021088@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:15:03 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58390
|
|
Mar 30 00:15:03 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:15:03 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:15:03 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:15:03 splunk3 spamd[27585]: spamd: processing message <200903300715.n2U7F2Cr021088@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:15:05 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 00:15:05 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58390,mid=<200903300715.n2U7F2Cr021088@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:15:05 splunk3 sendmail[25167]: n2U7F37C025166: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:15:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:15:17 splunk3 sendmail[25210]: n2U7FHax025210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:16:17 splunk3 sendmail[25458]: n2U7GHR2025458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:16:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:17:17 splunk3 sendmail[25701]: n2U7HHJt025701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:18:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:18:17 splunk3 sendmail[25939]: n2U7IH9i025939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:19:17 splunk3 sendmail[26178]: n2U7JH9I026178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:20:03 splunk3 sendmail[26380]: n2U7K3k0026380: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300720.n2U7K3Yi021730@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:20:03 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58445
|
|
Mar 30 00:20:03 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:20:03 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:20:03 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:20:03 splunk3 spamd[27585]: spamd: processing message <200903300720.n2U7K3Yi021730@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:20:05 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 00:20:05 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58445,mid=<200903300720.n2U7K3Yi021730@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:20:05 splunk3 sendmail[26381]: n2U7K3k0026380: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:20:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:20:17 splunk3 sendmail[26424]: n2U7KHbm026424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:21:17 splunk3 sendmail[26671]: n2U7LHQb026671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:21:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:22:17 splunk3 sendmail[26910]: n2U7MH7T026910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:23:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:23:17 splunk3 sendmail[27157]: n2U7NHPZ027157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:24:17 splunk3 sendmail[27393]: n2U7OHLr027393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:25:04 splunk3 sendmail[27592]: n2U7P4YS027592: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300725.n2U7P3Ji022341@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:25:04 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58501
|
|
Mar 30 00:25:04 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:25:04 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:25:04 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:25:04 splunk3 spamd[27585]: spamd: processing message <200903300725.n2U7P3Ji022341@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:25:06 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 00:25:06 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58501,mid=<200903300725.n2U7P3Ji022341@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:25:06 splunk3 sendmail[27593]: n2U7P4YS027592: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:25:17 splunk3 sendmail[27640]: n2U7PHJ2027640: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:26:17 splunk3 sendmail[27882]: n2U7QHDH027882: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:26:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 00:27:17 splunk3 sendmail[28126]: n2U7RHb9028126: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:28:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:28:17 splunk3 sendmail[28366]: n2U7SHh3028366: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:29:17 splunk3 sendmail[28603]: n2U7THLb028603: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:30:04 splunk3 sendmail[28806]: n2U7U4N4028806: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300730.n2U7U4Jc022957@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:30:04 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58557
|
|
Mar 30 00:30:04 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:30:04 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:30:05 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:30:05 splunk3 spamd[27585]: spamd: processing message <200903300730.n2U7U4Jc022957@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:30:07 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 00:30:07 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58557,mid=<200903300730.n2U7U4Jc022957@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:30:07 splunk3 sendmail[28807]: n2U7U4N4028806: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:30:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:30:17 splunk3 sendmail[28855]: n2U7UHtc028855: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:31:17 splunk3 sendmail[29106]: n2U7VHU2029106: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:31:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:32:17 splunk3 sendmail[29357]: n2U7WHDP029357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:33:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:33:17 splunk3 sendmail[29597]: n2U7XHIX029597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:34:17 splunk3 sendmail[29832]: n2U7YH1T029832: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:35:05 splunk3 sendmail[30015]: n2U7Z5Kt030015: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300735.n2U7Z535023730@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:35:05 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58613
|
|
Mar 30 00:35:05 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:35:05 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:35:05 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:35:05 splunk3 spamd[27585]: spamd: processing message <200903300735.n2U7Z535023730@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:35:07 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 00:35:07 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58613,mid=<200903300735.n2U7Z535023730@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:35:07 splunk3 sendmail[30016]: n2U7Z5Kt030015: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:35:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:35:17 splunk3 sendmail[30075]: n2U7ZH4w030075: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:36:17 splunk3 sendmail[30318]: n2U7aHwR030318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:36:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:37:17 splunk3 sendmail[30563]: n2U7bH2w030563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:38:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:38:17 splunk3 sendmail[30805]: n2U7cHMv030805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:39:17 splunk3 sendmail[31044]: n2U7dHvq031044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:40:06 splunk3 sendmail[31230]: n2U7e6Up031230: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300740.n2U7e5Pr024361@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:40:06 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58668
|
|
Mar 30 00:40:06 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:40:06 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:40:06 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:40:06 splunk3 spamd[27585]: spamd: processing message <200903300740.n2U7e5Pr024361@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:40:08 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 00:40:08 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58668,mid=<200903300740.n2U7e5Pr024361@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:40:08 splunk3 sendmail[31231]: n2U7e6Up031230: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:40:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:40:17 splunk3 sendmail[31291]: n2U7eHU9031291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:41:17 splunk3 sendmail[31537]: n2U7fHYp031537: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:41:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 00:42:17 splunk3 sendmail[31778]: n2U7gHhk031778: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:43:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:43:17 splunk3 sendmail[32020]: n2U7hHo5032020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:44:17 splunk3 sendmail[32258]: n2U7iHUR032258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:45:06 splunk3 sendmail[32441]: n2U7j6r4032441: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300745.n2U7j6En024977@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:45:06 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58725
|
|
Mar 30 00:45:06 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:45:06 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:45:06 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:45:06 splunk3 spamd[27585]: spamd: processing message <200903300745.n2U7j6En024977@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:45:08 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 00:45:08 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58725,mid=<200903300745.n2U7j6En024977@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:45:08 splunk3 sendmail[32442]: n2U7j6r4032441: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:45:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:45:17 splunk3 sendmail[32503]: n2U7jHLv032503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:46:17 splunk3 sendmail[32750]: n2U7kH8G032750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:46:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:47:17 splunk3 sendmail[524]: n2U7lH5X000524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:48:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:48:17 splunk3 sendmail[759]: n2U7mHFI000759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:49:17 splunk3 sendmail[998]: n2U7nHJh000998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:50:06 splunk3 sendmail[1185]: n2U7o6RQ001185: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300750.n2U7o6eS025593@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:50:06 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58780
|
|
Mar 30 00:50:06 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:50:06 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:50:06 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:50:06 splunk3 spamd[27585]: spamd: processing message <200903300750.n2U7o6eS025593@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:50:08 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1311 bytes.
|
|
Mar 30 00:50:08 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58780,mid=<200903300750.n2U7o6eS025593@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:50:08 splunk3 sendmail[1186]: n2U7o6RQ001185: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:50:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:50:17 splunk3 sendmail[1245]: n2U7oHZd001245: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:51:17 splunk3 sendmail[1493]: n2U7pHcj001493: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:51:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:52:17 splunk3 sendmail[1735]: n2U7qHei001735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:53:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:53:17 splunk3 sendmail[1980]: n2U7rHCm001980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:54:17 splunk3 sendmail[2214]: n2U7sHLm002214: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:55:07 splunk3 sendmail[2418]: n2U7t7mD002418: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300755.n2U7t75l026200@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 00:55:07 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58836
|
|
Mar 30 00:55:07 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 00:55:07 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 00:55:07 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 00:55:07 splunk3 spamd[27585]: spamd: processing message <200903300755.n2U7t75l026200@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 00:55:09 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 30 00:55:09 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58836,mid=<200903300755.n2U7t75l026200@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 00:55:09 splunk3 sendmail[2419]: n2U7t7mD002418: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 00:55:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 00:55:17 splunk3 sendmail[2460]: n2U7tHLi002460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:56:17 splunk3 sendmail[2712]: n2U7uHHR002712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:56:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 00:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 00:57:17 splunk3 sendmail[2967]: n2U7vH47002967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:58:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 00:58:17 splunk3 sendmail[3216]: n2U7wHZ9003216: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 00:59:17 splunk3 sendmail[3455]: n2U7xHLq003455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:00:04 splunk3 sendmail[3730]: n2U8047L003730: from=root, size=291, class=0, nrcpts=1, msgid=<200903300800.n2U8047L003730@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 01:00:04 splunk3 sendmail[3734]: n2U8045a003734: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300800.n2U8047L003730@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 01:00:04 splunk3 sendmail[3730]: n2U8047L003730: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U8045a003734 Message accepted for delivery)
|
|
Mar 30 01:00:05 splunk3 sendmail[3735]: n2U8045a003734: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:00:08 splunk3 sendmail[3755]: n2U808fu003755: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300800.n2U807Af026839@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:00:08 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58894
|
|
Mar 30 01:00:08 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:00:08 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 01:00:08 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 01:00:08 splunk3 sendmail[3756]: n2U808fu003755: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:00:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:00:17 splunk3 sendmail[3798]: n2U80HQp003798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:00:25 splunk3 sendmail[3836]: n2U80P44003836: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903300800.n2U80P44003836@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 01:00:25 splunk3 sendmail[3838]: n2U80P44003836: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 01:00:25 splunk3 sendmail[3838]: n2U80P44003836: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 30 01:00:25 splunk3 sendmail[3838]: n2U80P44003836: n2U80P44003838: postmaster notify: User unknown
|
|
Mar 30 01:00:26 splunk3 sendmail[3838]: n2U80P44003838: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:01:12 splunk3 sendmail[4006]: n2U811U3004006: from=root, size=443, class=0, nrcpts=1, msgid=<200903300801.n2U811U3004006@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 01:01:12 splunk3 sendmail[4062]: n2U81CUl004062: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300801.n2U811U3004006@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 01:01:12 splunk3 sendmail[4006]: n2U811U3004006: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U81CUl004062 Message accepted for delivery)
|
|
Mar 30 01:01:13 splunk3 sendmail[4064]: n2U81CUl004062: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:01:18 splunk3 sendmail[4088]: n2U81HZe004088: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:01:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:02:18 splunk3 sendmail[4346]: n2U82Ilm004346: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:03:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:03:18 splunk3 sendmail[4587]: n2U83I1c004587: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:04:18 splunk3 sendmail[4824]: n2U84I5o004824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:05:08 splunk3 sendmail[5038]: n2U8588V005038: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300805.n2U8580A027521@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:05:08 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58957
|
|
Mar 30 01:05:08 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:05:08 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 01:05:08 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 01:05:08 splunk3 sendmail[5039]: n2U8588V005038: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:05:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:05:18 splunk3 sendmail[5080]: n2U85IjO005080: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:06:18 splunk3 sendmail[5364]: n2U86Ifl005364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:06:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:07:18 splunk3 sendmail[5605]: n2U87Icx005605: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:08:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:08:18 splunk3 sendmail[5846]: n2U88IcT005846: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:09:18 splunk3 sendmail[6084]: n2U89Ina006084: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:10:02 splunk3 sendmail[6364]: n2U8A2O2006364: from=root, size=292, class=0, nrcpts=1, msgid=<200903300810.n2U8A2O2006364@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 01:10:02 splunk3 sendmail[6369]: n2U8A2X7006369: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300810.n2U8A2O2006364@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 01:10:02 splunk3 sendmail[6364]: n2U8A2O2006364: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U8A2X7006369 Message accepted for delivery)
|
|
Mar 30 01:10:04 splunk3 sendmail[6370]: n2U8A2X7006369: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:10:09 splunk3 sendmail[6395]: n2U8A9Ts006395: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300810.n2U8A8dD028134@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:10:09 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59014
|
|
Mar 30 01:10:09 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:10:09 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:10:09 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:10:09 splunk3 spamd[27585]: spamd: processing message <200903300810.n2U8A8dD028134@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:10:11 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.0 seconds, 1311 bytes.
|
|
Mar 30 01:10:11 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.0,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59014,mid=<200903300810.n2U8A8dD028134@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 01:10:11 splunk3 sendmail[6396]: n2U8A9Ts006395: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:10:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:10:18 splunk3 sendmail[6434]: n2U8AIol006434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:11:18 splunk3 sendmail[6683]: n2U8BIqo006683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:11:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 01:12:18 splunk3 sendmail[6925]: n2U8CIvL006925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:13:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:13:18 splunk3 sendmail[7167]: n2U8DIQQ007167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:14:18 splunk3 sendmail[7400]: n2U8EIHS007400: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:15:11 splunk3 sendmail[7612]: n2U8FBc5007612: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300815.n2U8F95E028939@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:15:11 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59070
|
|
Mar 30 01:15:11 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:15:11 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:15:11 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:15:11 splunk3 spamd[27585]: spamd: processing message <200903300815.n2U8F95E028939@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:15:13 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1311 bytes.
|
|
Mar 30 01:15:13 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59070,mid=<200903300815.n2U8F95E028939@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 01:15:13 splunk3 sendmail[7613]: n2U8FBc5007612: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:15:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:15:18 splunk3 sendmail[7654]: n2U8FIdE007654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:16:18 splunk3 sendmail[7898]: n2U8GIdG007898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:16:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:17:18 splunk3 sendmail[8142]: n2U8HICA008142: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:18:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:18:18 splunk3 sendmail[8380]: n2U8IIkp008380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:19:18 splunk3 sendmail[8621]: n2U8JIgZ008621: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:20:14 splunk3 sendmail[8842]: n2U8KEGI008842: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300820.n2U8KCiS029575@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:20:14 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59126
|
|
Mar 30 01:20:14 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:20:14 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:20:14 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:20:14 splunk3 spamd[27585]: spamd: processing message <200903300820.n2U8KCiS029575@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:20:16 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 30 01:20:16 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59126,mid=<200903300820.n2U8KCiS029575@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 01:20:16 splunk3 sendmail[8843]: n2U8KEGI008842: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:20:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:20:18 splunk3 sendmail[8867]: n2U8KIM0008867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:21:18 splunk3 sendmail[9114]: n2U8LIoK009114: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:21:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:22:18 splunk3 sendmail[9355]: n2U8MILs009355: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:23:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:23:18 splunk3 sendmail[9609]: n2U8NInn009609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:24:18 splunk3 sendmail[9843]: n2U8OI33009843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:25:15 splunk3 sendmail[10066]: n2U8PFBo010066: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300825.n2U8PEkf030191@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:25:15 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59182
|
|
Mar 30 01:25:15 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:25:15 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:25:15 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:25:15 splunk3 spamd[27585]: spamd: processing message <200903300825.n2U8PEkf030191@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:25:17 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 01:25:17 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59182,mid=<200903300825.n2U8PEkf030191@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 01:25:17 splunk3 sendmail[10067]: n2U8PFBo010066: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:25:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:25:18 splunk3 sendmail[10088]: n2U8PIKa010088: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:26:18 splunk3 sendmail[10333]: n2U8QIch010333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:26:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 01:27:18 splunk3 sendmail[10578]: n2U8RIxc010578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:28:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:28:18 splunk3 sendmail[10815]: n2U8SIME010815: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:29:18 splunk3 sendmail[11053]: n2U8TIUP011053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:30:15 splunk3 sendmail[11276]: n2U8UFs2011276: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300830.n2U8UF4j030814@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:30:15 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59238
|
|
Mar 30 01:30:15 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:30:15 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:30:15 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:30:15 splunk3 spamd[27585]: spamd: processing message <200903300830.n2U8UF4j030814@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:30:17 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1311 bytes.
|
|
Mar 30 01:30:17 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59238,mid=<200903300830.n2U8UF4j030814@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 01:30:17 splunk3 sendmail[11277]: n2U8UFs2011276: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:30:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:30:18 splunk3 sendmail[11299]: n2U8UIrV011299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:31:18 splunk3 sendmail[11549]: n2U8VIw4011549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:31:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:32:18 splunk3 sendmail[11789]: n2U8WIIr011789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:33:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:33:18 splunk3 sendmail[12032]: n2U8XIHq012032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:34:18 splunk3 sendmail[12268]: n2U8YIXX012268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:35:16 splunk3 sendmail[12489]: n2U8ZGq0012489: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300835.n2U8ZFMC031557@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:35:16 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59294
|
|
Mar 30 01:35:16 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:35:16 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:35:16 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:35:16 splunk3 spamd[27585]: spamd: processing message <200903300835.n2U8ZFMC031557@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:35:18 splunk3 sendmail[12512]: n2U8ZIlk012512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:35:18 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 01:35:18 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59294,mid=<200903300835.n2U8ZFMC031557@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 01:35:18 splunk3 sendmail[12490]: n2U8ZGq0012489: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:35:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:36:18 splunk3 sendmail[12757]: n2U8aIOK012757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:36:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:37:18 splunk3 sendmail[13001]: n2U8bIUg013001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:38:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:38:18 splunk3 sendmail[13241]: n2U8cIUx013241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:39:18 splunk3 sendmail[13518]: n2U8dIok013518: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:40:16 splunk3 sendmail[13749]: n2U8eGY2013749: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903300840.n2U8eGvP032191@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:40:17 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59350
|
|
Mar 30 01:40:17 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:40:17 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:40:17 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:40:17 splunk3 spamd[27585]: spamd: processing message <200903300840.n2U8eGvP032191@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:40:18 splunk3 sendmail[13766]: n2U8eIsu013766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:40:19 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 01:40:19 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59350,mid=<200903300840.n2U8eGvP032191@virt2.int.splunk.com>,bayes=0.11249941935995,autolearn=no
|
|
Mar 30 01:40:19 splunk3 sendmail[13761]: n2U8eGY2013749: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:40:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:41:18 splunk3 sendmail[14014]: n2U8fIFq014014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:41:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 01:42:18 splunk3 sendmail[14252]: n2U8gIxB014252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:43:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:43:18 splunk3 sendmail[14494]: n2U8hI77014494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:44:18 splunk3 sendmail[14726]: n2U8iI2h014726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:45:17 splunk3 sendmail[14962]: n2U8jHfk014962: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903300845.n2U8jHgD000340@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:45:17 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59406
|
|
Mar 30 01:45:17 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:45:17 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:45:17 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:45:17 splunk3 spamd[27585]: spamd: processing message <200903300845.n2U8jHgD000340@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:45:18 splunk3 sendmail[14968]: n2U8jINP014968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:45:19 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Mar 30 01:45:19 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59406,mid=<200903300845.n2U8jHgD000340@virt2.int.splunk.com>,bayes=0.0665077712320234,autolearn=no
|
|
Mar 30 01:45:19 splunk3 sendmail[14963]: n2U8jHfk014962: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:45:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:46:18 splunk3 sendmail[15214]: n2U8kIAa015214: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:46:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:47:18 splunk3 sendmail[15459]: n2U8lIHw015459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:48:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:48:18 splunk3 sendmail[15698]: n2U8mIVB015698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:49:18 splunk3 sendmail[15938]: n2U8nI0P015938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:50:18 splunk3 sendmail[16177]: n2U8oIL1016177: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903300850.n2U8oHTg000953@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:50:18 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59462
|
|
Mar 30 01:50:18 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:50:18 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:50:18 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:50:18 splunk3 spamd[27585]: spamd: processing message <200903300850.n2U8oHTg000953@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:50:18 splunk3 sendmail[16183]: n2U8oIh2016183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:50:20 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Mar 30 01:50:20 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59462,mid=<200903300850.n2U8oHTg000953@virt2.int.splunk.com>,bayes=0.0665077712320234,autolearn=no
|
|
Mar 30 01:50:20 splunk3 sendmail[16178]: n2U8oIL1016177: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:50:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:51:18 splunk3 sendmail[16430]: n2U8pIL1016430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:51:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:52:18 splunk3 sendmail[16675]: n2U8qIxj016675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:53:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:53:18 splunk3 sendmail[16920]: n2U8rISW016920: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:54:18 splunk3 sendmail[17155]: n2U8sIT7017155: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:55:18 splunk3 sendmail[17403]: n2U8tIG2017403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:55:18 splunk3 sendmail[17404]: n2U8tIMY017404: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300855.n2U8tIP3001588@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 01:55:18 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59525
|
|
Mar 30 01:55:18 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 01:55:18 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 01:55:18 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 01:55:18 splunk3 spamd[27585]: spamd: processing message <200903300855.n2U8tIP3001588@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 01:55:20 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 30 01:55:20 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59525,mid=<200903300855.n2U8tIP3001588@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 01:55:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 01:55:20 splunk3 sendmail[17405]: n2U8tIMY017404: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 01:56:18 splunk3 sendmail[17645]: n2U8uI8U017645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:56:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 01:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 01:57:18 splunk3 sendmail[17888]: n2U8vIE7017888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:58:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 01:58:18 splunk3 sendmail[18123]: n2U8wIRJ018123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 01:59:18 splunk3 sendmail[18361]: n2U8xICE018361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:00:00 splunk3 sendmail[18531]: n2U900le018531: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903300900.n2U900le018531@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 02:00:00 splunk3 sendmail[18533]: n2U900le018531: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 02:00:00 splunk3 sendmail[18533]: n2U900le018531: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 02:00:00 splunk3 sendmail[18533]: n2U900le018531: n2U900le018533: postmaster notify: User unknown
|
|
Mar 30 02:00:02 splunk3 sendmail[18533]: n2U900le018533: to=root, delay=00:00:02, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:00:04 splunk3 sendmail[18630]: n2U904e9018630: from=root, size=291, class=0, nrcpts=1, msgid=<200903300900.n2U904e9018630@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 02:00:04 splunk3 sendmail[18634]: n2U904JJ018634: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903300900.n2U904e9018630@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 02:00:04 splunk3 sendmail[18630]: n2U904e9018630: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U904JJ018634 Message accepted for delivery)
|
|
Mar 30 02:00:06 splunk3 sendmail[18635]: n2U904JJ018634: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:00:18 splunk3 sendmail[18696]: n2U90I01018696: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:00:19 splunk3 sendmail[18697]: n2U90Ivq018697: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300900.n2U90IQC002244@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:00:19 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59590
|
|
Mar 30 02:00:19 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:00:19 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 02:00:19 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 02:00:19 splunk3 sendmail[18698]: n2U90Ivq018697: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:00:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:01:02 splunk3 sendmail[18889]: n2U911rs018889: from=root, size=443, class=0, nrcpts=1, msgid=<200903300901.n2U911rs018889@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 02:01:02 splunk3 sendmail[18892]: n2U912Zs018892: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903300901.n2U911rs018889@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 02:01:02 splunk3 sendmail[18889]: n2U911rs018889: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U912Zs018892 Message accepted for delivery)
|
|
Mar 30 02:01:04 splunk3 sendmail[18893]: n2U912Zs018892: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:01:18 splunk3 sendmail[18956]: n2U91IGq018956: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:01:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:02:18 splunk3 sendmail[19195]: n2U92Imc019195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:03:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:03:18 splunk3 sendmail[19438]: n2U93I9u019438: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:04:18 splunk3 sendmail[19672]: n2U94IBn019672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:05:18 splunk3 sendmail[19919]: n2U95IoM019919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:05:19 splunk3 sendmail[19921]: n2U95J97019921: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300905.n2U95JTl002929@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:05:19 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59646
|
|
Mar 30 02:05:19 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:05:19 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 02:05:19 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 02:05:19 splunk3 sendmail[19922]: n2U95J97019921: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:05:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:06:18 splunk3 sendmail[20160]: n2U96IIu020160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:06:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:07:18 splunk3 sendmail[20405]: n2U97Icw020405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:08:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:08:18 splunk3 sendmail[20648]: n2U98Iak020648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:09:18 splunk3 sendmail[20888]: n2U99ISD020888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:10:02 splunk3 sendmail[21174]: n2U9A2fh021174: from=root, size=292, class=0, nrcpts=1, msgid=<200903300910.n2U9A2fh021174@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 02:10:02 splunk3 sendmail[21179]: n2U9A2ZQ021179: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903300910.n2U9A2fh021174@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 02:10:02 splunk3 sendmail[21174]: n2U9A2fh021174: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2U9A2ZQ021179 Message accepted for delivery)
|
|
Mar 30 02:10:04 splunk3 sendmail[21180]: n2U9A2ZQ021179: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:10:18 splunk3 sendmail[21243]: n2U9AIsi021243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:10:20 splunk3 sendmail[21244]: n2U9AKxO021244: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300910.n2U9AJlv003550@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:10:20 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59703
|
|
Mar 30 02:10:20 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:10:20 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:10:20 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:10:20 splunk3 spamd[27585]: spamd: processing message <200903300910.n2U9AJlv003550@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:10:22 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 30 02:10:22 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59703,mid=<200903300910.n2U9AJlv003550@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:10:22 splunk3 sendmail[21245]: n2U9AKxO021244: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:10:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:11:18 splunk3 sendmail[21485]: n2U9BIZp021485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:11:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 02:12:18 splunk3 sendmail[21723]: n2U9CI1c021723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:13:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:13:18 splunk3 sendmail[21964]: n2U9DISI021964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:14:18 splunk3 sendmail[22200]: n2U9EIgi022200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:15:18 splunk3 sendmail[22450]: n2U9FIlF022450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:15:22 splunk3 sendmail[22472]: n2U9FMgh022472: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300915.n2U9FKLI004347@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:15:22 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59759
|
|
Mar 30 02:15:22 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:15:22 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:15:22 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:15:22 splunk3 spamd[27585]: spamd: processing message <200903300915.n2U9FKLI004347@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:15:26 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1308 bytes.
|
|
Mar 30 02:15:26 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59759,mid=<200903300915.n2U9FKLI004347@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:15:26 splunk3 sendmail[22473]: n2U9FMgh022472: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:15:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:16:18 splunk3 sendmail[22691]: n2U9GIvh022691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:16:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:17:18 splunk3 sendmail[22933]: n2U9HI3H022933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:18:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:18:18 splunk3 sendmail[23168]: n2U9IIp9023168: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:19:18 splunk3 sendmail[23407]: n2U9JI6E023407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:20:18 splunk3 sendmail[23656]: n2U9KI3G023656: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:20:23 splunk3 sendmail[23680]: n2U9KMIT023680: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300920.n2U9KMJx004986@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:20:23 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59814
|
|
Mar 30 02:20:23 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:20:23 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:20:23 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:20:23 splunk3 spamd[27585]: spamd: processing message <200903300920.n2U9KMJx004986@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:20:25 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 30 02:20:25 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59814,mid=<200903300920.n2U9KMJx004986@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:20:25 splunk3 sendmail[23681]: n2U9KMIT023680: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:20:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:21:18 splunk3 sendmail[23903]: n2U9LIIS023903: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:21:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:22:18 splunk3 sendmail[24145]: n2U9MIam024145: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:23:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:23:18 splunk3 sendmail[24391]: n2U9NINe024391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:24:18 splunk3 sendmail[24624]: n2U9OI4L024624: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:25:18 splunk3 sendmail[24872]: n2U9PIYe024872: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:25:23 splunk3 sendmail[24897]: n2U9PNxY024897: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300925.n2U9PNKx005592@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:25:23 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59870
|
|
Mar 30 02:25:23 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:25:23 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:25:23 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:25:23 splunk3 spamd[27585]: spamd: processing message <200903300925.n2U9PNKx005592@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:25:25 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 02:25:25 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59870,mid=<200903300925.n2U9PNKx005592@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:25:25 splunk3 sendmail[24898]: n2U9PNxY024897: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:25:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:26:18 splunk3 sendmail[25113]: n2U9QI76025113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:26:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 02:27:18 splunk3 sendmail[25355]: n2U9RI9A025355: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:28:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:28:18 splunk3 sendmail[25595]: n2U9SItN025595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:29:18 splunk3 sendmail[25833]: n2U9TIIt025833: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:30:18 splunk3 sendmail[26082]: n2U9UIxX026082: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:30:24 splunk3 sendmail[26106]: n2U9UOoM026106: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300930.n2U9UOY6006212@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:30:24 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59926
|
|
Mar 30 02:30:24 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:30:24 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:30:24 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:30:24 splunk3 spamd[27585]: spamd: processing message <200903300930.n2U9UOY6006212@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:30:26 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 02:30:26 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59926,mid=<200903300930.n2U9UOY6006212@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:30:26 splunk3 sendmail[26107]: n2U9UOoM026106: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:30:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:31:18 splunk3 sendmail[26327]: n2U9VINh026327: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:31:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:32:18 splunk3 sendmail[26567]: n2U9WION026567: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:33:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:33:18 splunk3 sendmail[26806]: n2U9XID0026806: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:34:18 splunk3 sendmail[27041]: n2U9YIpu027041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:35:18 splunk3 sendmail[27289]: n2U9ZIxn027289: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:35:24 splunk3 sendmail[27312]: n2U9ZOrb027312: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300935.n2U9ZODX006962@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:35:24 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59982
|
|
Mar 30 02:35:24 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:35:24 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:35:24 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:35:24 splunk3 spamd[27585]: spamd: processing message <200903300935.n2U9ZODX006962@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:35:26 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Mar 30 02:35:26 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59982,mid=<200903300935.n2U9ZODX006962@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:35:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:35:26 splunk3 sendmail[27313]: n2U9ZOrb027312: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:36:18 splunk3 sendmail[27532]: n2U9aIbC027532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:36:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:37:18 splunk3 sendmail[27777]: n2U9bIZe027777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:38:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:38:18 splunk3 sendmail[28018]: n2U9cItF028018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:39:18 splunk3 sendmail[28257]: n2U9dIpN028257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:40:18 splunk3 sendmail[28506]: n2U9eI4G028506: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:40:25 splunk3 sendmail[28533]: n2U9ePgU028533: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300940.n2U9ePv9007596@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:40:25 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60037
|
|
Mar 30 02:40:25 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:40:25 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:40:25 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:40:25 splunk3 spamd[27585]: spamd: processing message <200903300940.n2U9ePv9007596@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:40:27 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 02:40:27 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60037,mid=<200903300940.n2U9ePv9007596@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:40:27 splunk3 sendmail[28534]: n2U9ePgU028533: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:40:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:41:18 splunk3 sendmail[28753]: n2U9fIY6028753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:41:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 02:42:18 splunk3 sendmail[28994]: n2U9gI1x028994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:43:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:43:18 splunk3 sendmail[29237]: n2U9hIVd029237: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:44:18 splunk3 sendmail[29470]: n2U9iIB7029470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:45:18 splunk3 sendmail[29717]: n2U9jIs5029717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:45:26 splunk3 sendmail[29759]: n2U9jQYu029759: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300945.n2U9jQeu008207@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:45:26 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60094
|
|
Mar 30 02:45:26 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:45:26 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:45:26 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:45:26 splunk3 spamd[27585]: spamd: processing message <200903300945.n2U9jQeu008207@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:45:28 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 02:45:28 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60094,mid=<200903300945.n2U9jQeu008207@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:45:28 splunk3 sendmail[29760]: n2U9jQYu029759: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:45:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:46:18 splunk3 sendmail[29959]: n2U9kITa029959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:46:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:47:18 splunk3 sendmail[30200]: n2U9lIwQ030200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:48:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:48:18 splunk3 sendmail[30436]: n2U9mIBi030436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:49:18 splunk3 sendmail[30674]: n2U9nIrH030674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:50:18 splunk3 sendmail[30925]: n2U9oImd030925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:50:27 splunk3 sendmail[30964]: n2U9oRWH030964: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300950.n2U9oRCI008827@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:50:27 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60150
|
|
Mar 30 02:50:27 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:50:27 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:50:27 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:50:27 splunk3 spamd[27585]: spamd: processing message <200903300950.n2U9oRCI008827@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:50:29 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 02:50:29 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60150,mid=<200903300950.n2U9oRCI008827@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:50:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:50:29 splunk3 sendmail[30965]: n2U9oRWH030964: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:51:18 splunk3 sendmail[31170]: n2U9pIch031170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:51:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:52:18 splunk3 sendmail[31410]: n2U9qItj031410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:53:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:53:18 splunk3 sendmail[31655]: n2U9rIfR031655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:54:18 splunk3 sendmail[31890]: n2U9sIY6031890: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:55:18 splunk3 sendmail[32140]: n2U9tIf0032140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:55:28 splunk3 sendmail[32183]: n2U9tSOT032183: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903300955.n2U9tRVr009461@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 02:55:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60205
|
|
Mar 30 02:55:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:55:28 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:55:28 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:55:28 splunk3 spamd[27585]: spamd: processing message <200903300955.n2U9tRVr009461@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 02:55:31 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 30 02:55:31 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60205,mid=<200903300955.n2U9tRVr009461@virt2.int.splunk.com>,bayes=0.169452617328545,autolearn=no
|
|
Mar 30 02:55:31 splunk3 sendmail[32184]: n2U9tSOT032183: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:55:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:55:44 splunk3 sendmail[32030]: n2U9su0W032030: from=<teresax@malwaredomains.com>, size=5747, class=0, nrcpts=1, msgid=<879d019dc110$b439ea03$a6049b7a@malwaredomains.com>, proto=ESMTP, daemon=MTA, relay=59-115-95-13.dynamic.hinet.net [59.115.95.13]
|
|
Mar 30 02:55:44 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60208
|
|
Mar 30 02:55:44 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 02:55:44 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 02:55:44 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 02:55:44 splunk3 spamd[27585]: spamd: processing message <879d019dc110$b439ea03$a6049b7a@malwaredomains.com> for spamme:501
|
|
Mar 30 02:55:47 splunk3 spamd[27585]: spamd: identified spam (30.6/5.0) for spamme:501 in 2.7 seconds, 6081 bytes.
|
|
Mar 30 02:55:47 splunk3 spamd[27585]: spamd: result: Y 30 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_BOGUSMX,DNS_FROM_RFC_POST,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_SORBS_DUL,SUBJECT_EXCESS_BASE64,URIBL_JP_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=2.7,size=6081,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60208,mid=<879d019dc110$b439ea03$a6049b7a@malwaredomains.com>,bayes=1,autolearn=spam
|
|
Mar 30 02:55:47 splunk3 sendmail[32243]: n2U9su0W032030: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:03, mailer=local, pri=35976, dsn=2.0.0, stat=Sent
|
|
Mar 30 02:55:47 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 02:56:18 splunk3 sendmail[32387]: n2U9uIOF032387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:56:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 02:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 02:57:18 splunk3 sendmail[32633]: n2U9vI5N032633: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:58:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 02:58:18 splunk3 sendmail[404]: n2U9wINL000404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 02:59:18 splunk3 sendmail[643]: n2U9xI23000643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:00:04 splunk3 sendmail[887]: n2UA04Hj000887: from=root, size=291, class=0, nrcpts=1, msgid=<200903301000.n2UA04Hj000887@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 03:00:04 splunk3 sendmail[891]: n2UA045C000891: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301000.n2UA04Hj000887@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 03:00:04 splunk3 sendmail[887]: n2UA04Hj000887: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UA045C000891 Message accepted for delivery)
|
|
Mar 30 03:00:06 splunk3 sendmail[924]: n2UA06Gw000924: from=<splunk@localhost>, size=717, class=0, nrcpts=1, msgid=<200903301000.n2UA06Gw000924@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 03:00:06 splunk3 sendmail[926]: n2UA06Gw000924: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120717, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 03:00:06 splunk3 sendmail[926]: n2UA06Gw000924: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120717, dsn=5.1.1, stat=User unknown
|
|
Mar 30 03:00:06 splunk3 sendmail[926]: n2UA06Gw000924: n2UA06Gw000926: postmaster notify: User unknown
|
|
Mar 30 03:00:07 splunk3 sendmail[892]: n2UA045C000891: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:00:15 splunk3 sendmail[926]: n2UA06Gw000926: to=root, delay=00:00:09, xdelay=00:00:09, mailer=local, pri=32087, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:00:18 splunk3 sendmail[976]: n2UA0IP8000976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:00:29 splunk3 sendmail[1020]: n2UA0TQi001020: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301000.n2UA0S0e010074@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:00:29 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60271
|
|
Mar 30 03:00:29 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:00:29 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 03:00:29 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 03:00:29 splunk3 sendmail[1021]: n2UA0TQi001020: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:00:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:01:05 splunk3 sendmail[1167]: n2UA11wg001167: from=root, size=443, class=0, nrcpts=1, msgid=<200903301001.n2UA11wg001167@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 03:01:06 splunk3 sendmail[1189]: n2UA15CD001189: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301001.n2UA11wg001167@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 03:01:06 splunk3 sendmail[1167]: n2UA11wg001167: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UA15CD001189 Message accepted for delivery)
|
|
Mar 30 03:01:09 splunk3 sendmail[1190]: n2UA15CD001189: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:04, xdelay=00:00:03, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:01:18 splunk3 sendmail[1233]: n2UA1IGV001233: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:01:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:02:18 splunk3 sendmail[1473]: n2UA2IV0001473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:03:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:03:18 splunk3 sendmail[1714]: n2UA3IeZ001714: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:04:18 splunk3 sendmail[1950]: n2UA4IaT001950: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:05:18 splunk3 sendmail[2197]: n2UA5IIq002197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:05:29 splunk3 sendmail[2237]: n2UA5TCF002237: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301005.n2UA5THm010780@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:05:29 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60327
|
|
Mar 30 03:05:29 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:05:29 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 03:05:29 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 03:05:29 splunk3 sendmail[2238]: n2UA5TCF002237: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:05:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:06:18 splunk3 sendmail[2436]: n2UA6Ila002436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:06:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:07:18 splunk3 sendmail[2687]: n2UA7Iwn002687: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:08:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:08:19 splunk3 sendmail[2938]: n2UA8IX3002938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:09:19 splunk3 sendmail[3189]: n2UA9JHD003189: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:10:02 splunk3 sendmail[3463]: n2UAA2Tn003463: from=root, size=292, class=0, nrcpts=1, msgid=<200903301010.n2UAA2Tn003463@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 03:10:02 splunk3 sendmail[3468]: n2UAA2vF003468: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301010.n2UAA2Tn003463@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 03:10:02 splunk3 sendmail[3463]: n2UAA2Tn003463: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UAA2vF003468 Message accepted for delivery)
|
|
Mar 30 03:10:03 splunk3 sendmail[3469]: n2UAA2vF003468: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:10:19 splunk3 sendmail[3543]: n2UAAJUd003543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:10:30 splunk3 sendmail[3605]: n2UAAUuM003605: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301010.n2UAATKp011378@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:10:30 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60384
|
|
Mar 30 03:10:30 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:10:30 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:10:30 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:10:30 splunk3 spamd[27585]: spamd: processing message <200903301010.n2UAATKp011378@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:10:32 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 03:10:32 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60384,mid=<200903301010.n2UAATKp011378@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:10:32 splunk3 sendmail[3606]: n2UAAUuM003605: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:10:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:11:19 splunk3 sendmail[3819]: n2UABJjt003819: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:11:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 03:12:19 splunk3 sendmail[4071]: n2UACJ2u004071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:13:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:13:19 splunk3 sendmail[4337]: n2UADJZ5004337: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:14:19 splunk3 sendmail[4571]: n2UAEJRW004571: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:15:00 splunk3 sendmail[4750]: n2UAF0iO004750: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301015.n2UAF0CP012103@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:15:00 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60429
|
|
Mar 30 03:15:00 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:15:00 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:15:00 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:15:00 splunk3 spamd[27585]: spamd: processing message <200903301015.n2UAF0CP012103@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:15:02 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 30 03:15:02 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60429,mid=<200903301015.n2UAF0CP012103@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:15:02 splunk3 sendmail[4752]: n2UAF0iO004750: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:15:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:15:19 splunk3 sendmail[4825]: n2UAFJt4004825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:16:19 splunk3 sendmail[5073]: n2UAGJS5005073: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:16:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:17:19 splunk3 sendmail[5354]: n2UAHJBG005354: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:18:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:18:19 splunk3 sendmail[5597]: n2UAIJ5P005597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:19:19 splunk3 sendmail[5835]: n2UAJJcC005835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:20:01 splunk3 sendmail[6010]: n2UAK12W006010: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301020.n2UAK0Wc012718@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:20:01 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60484
|
|
Mar 30 03:20:01 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:20:01 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:20:01 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:20:01 splunk3 spamd[27585]: spamd: processing message <200903301020.n2UAK0Wc012718@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:20:03 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 30 03:20:03 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60484,mid=<200903301020.n2UAK0Wc012718@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:20:03 splunk3 sendmail[6011]: n2UAK12W006010: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:20:19 splunk3 sendmail[6089]: n2UAKJSk006089: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:21:19 splunk3 sendmail[6327]: n2UALJeG006327: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:21:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:22:19 splunk3 sendmail[6567]: n2UAMJra006567: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:23:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:23:19 splunk3 sendmail[6814]: n2UANJjj006814: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:24:19 splunk3 sendmail[7048]: n2UAOJ5O007048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:25:02 splunk3 sendmail[7226]: n2UAP26D007226: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301025.n2UAP11J013346@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:25:02 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60540
|
|
Mar 30 03:25:02 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:25:02 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:25:02 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:25:02 splunk3 spamd[27585]: spamd: processing message <200903301025.n2UAP11J013346@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:25:04 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 03:25:04 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60540,mid=<200903301025.n2UAP11J013346@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:25:04 splunk3 sendmail[7227]: n2UAP26D007226: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:25:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:25:19 splunk3 sendmail[7304]: n2UAPJvw007304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:26:19 splunk3 sendmail[7544]: n2UAQJ7l007544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:26:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 03:27:19 splunk3 sendmail[7792]: n2UARJN5007792: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:28:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:28:19 splunk3 sendmail[8028]: n2UASJOQ008028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:29:19 splunk3 sendmail[8267]: n2UATJiG008267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:30:02 splunk3 sendmail[8448]: n2UAU2fv008448: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301030.n2UAU2ID014007@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:30:02 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60596
|
|
Mar 30 03:30:02 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:30:02 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:30:02 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:30:02 splunk3 spamd[27585]: spamd: processing message <200903301030.n2UAU2ID014007@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:30:04 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 03:30:04 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60596,mid=<200903301030.n2UAU2ID014007@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:30:04 splunk3 sendmail[8449]: n2UAU2fv008448: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:30:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:30:19 splunk3 sendmail[8524]: n2UAUJaf008524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:31:19 splunk3 sendmail[8765]: n2UAVJHi008765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:31:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:32:19 splunk3 sendmail[9006]: n2UAWJel009006: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:33:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:33:19 splunk3 sendmail[9247]: n2UAXJta009247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:34:19 splunk3 sendmail[9483]: n2UAYJKn009483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:35:03 splunk3 sendmail[9674]: n2UAZ3Ns009674: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301035.n2UAZ3TB014757@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:35:03 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60652
|
|
Mar 30 03:35:03 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:35:03 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:35:03 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:35:03 splunk3 spamd[27585]: spamd: processing message <200903301035.n2UAZ3TB014757@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:35:05 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 03:35:05 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60652,mid=<200903301035.n2UAZ3TB014757@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:35:05 splunk3 sendmail[9675]: n2UAZ3Ns009674: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:35:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:35:19 splunk3 sendmail[9743]: n2UAZJQF009743: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:36:19 splunk3 sendmail[9978]: n2UAaJHB009978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:36:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:37:19 splunk3 sendmail[10224]: n2UAbJtf010224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:38:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:38:19 splunk3 sendmail[10466]: n2UAcJF4010466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:39:19 splunk3 sendmail[10706]: n2UAdJc9010706: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:40:03 splunk3 sendmail[10886]: n2UAe396010886: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301040.n2UAe31T015389@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:40:03 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60708
|
|
Mar 30 03:40:03 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:40:03 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:40:03 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:40:03 splunk3 spamd[27585]: spamd: processing message <200903301040.n2UAe31T015389@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:40:05 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 03:40:05 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60708,mid=<200903301040.n2UAe31T015389@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:40:05 splunk3 sendmail[10887]: n2UAe396010886: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:40:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:40:19 splunk3 sendmail[10962]: n2UAeJjK010962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:41:19 splunk3 sendmail[11201]: n2UAfJXD011201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:41:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 03:42:19 splunk3 sendmail[11439]: n2UAgJbB011439: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:43:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:43:19 splunk3 sendmail[11682]: n2UAhJgS011682: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:44:19 splunk3 sendmail[11918]: n2UAiJOU011918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:45:05 splunk3 sendmail[12101]: n2UAj51F012101: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301045.n2UAj4hI016004@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:45:05 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60763
|
|
Mar 30 03:45:05 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:45:05 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:45:05 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:45:05 splunk3 spamd[27585]: spamd: processing message <200903301045.n2UAj4hI016004@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:45:07 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 03:45:07 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60763,mid=<200903301045.n2UAj4hI016004@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:45:07 splunk3 sendmail[12114]: n2UAj51F012101: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:45:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:45:19 splunk3 sendmail[12172]: n2UAjJUq012172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:46:19 splunk3 sendmail[12411]: n2UAkJrG012411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:46:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:47:19 splunk3 sendmail[12654]: n2UAlJfV012654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:48:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:48:19 splunk3 sendmail[12891]: n2UAmJOT012891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:49:19 splunk3 sendmail[13129]: n2UAnJOr013129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:50:06 splunk3 sendmail[13369]: n2UAo5Wl013369: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301050.n2UAo5YQ016619@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:50:06 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60819
|
|
Mar 30 03:50:06 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:50:06 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:50:06 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:50:06 splunk3 spamd[27585]: spamd: processing message <200903301050.n2UAo5YQ016619@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:50:08 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 30 03:50:08 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60819,mid=<200903301050.n2UAo5YQ016619@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:50:08 splunk3 sendmail[13370]: n2UAo5Wl013369: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:50:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:50:19 splunk3 sendmail[13421]: n2UAoJGY013421: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:51:19 splunk3 sendmail[13661]: n2UApJ8i013661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:51:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:52:19 splunk3 sendmail[13902]: n2UAqJeY013902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:53:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:53:19 splunk3 sendmail[14147]: n2UArJdd014147: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:54:19 splunk3 sendmail[14380]: n2UAsJXA014380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:55:06 splunk3 sendmail[14575]: n2UAt6Ag014575: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301055.n2UAt6Vo017230@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 03:55:06 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60874
|
|
Mar 30 03:55:06 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 03:55:06 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 03:55:06 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 03:55:06 splunk3 spamd[27585]: spamd: processing message <200903301055.n2UAt6Vo017230@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 03:55:09 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 03:55:09 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60874,mid=<200903301055.n2UAt6Vo017230@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 03:55:09 splunk3 sendmail[14576]: n2UAt6Ag014575: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 03:55:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 03:55:19 splunk3 sendmail[14632]: n2UAtJ7T014632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:56:19 splunk3 sendmail[14867]: n2UAuJth014867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:56:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 03:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 03:57:19 splunk3 sendmail[15109]: n2UAvJSR015109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:58:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 03:58:19 splunk3 sendmail[15348]: n2UAwJY8015348: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 03:59:19 splunk3 sendmail[15588]: n2UAxJpJ015588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:00:04 splunk3 sendmail[15830]: n2UB04E0015830: from=root, size=291, class=0, nrcpts=1, msgid=<200903301100.n2UB04E0015830@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 04:00:04 splunk3 sendmail[15834]: n2UB04nG015834: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301100.n2UB04E0015830@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 04:00:04 splunk3 sendmail[15830]: n2UB04E0015830: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UB04nG015834 Message accepted for delivery)
|
|
Mar 30 04:00:05 splunk3 sendmail[15835]: n2UB04nG015834: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:00:08 splunk3 sendmail[15856]: n2UB07hs015856: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301100.n2UB07Tx017861@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:00:08 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60931
|
|
Mar 30 04:00:08 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:00:08 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 04:00:08 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 04:00:08 splunk3 sendmail[15857]: n2UB07hs015856: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:00:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:00:11 splunk3 sendmail[15893]: n2UB0B3Q015893: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903301100.n2UB0B3Q015893@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 04:00:11 splunk3 sendmail[15895]: n2UB0B3Q015893: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 04:00:11 splunk3 sendmail[15895]: n2UB0B3Q015893: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 04:00:11 splunk3 sendmail[15895]: n2UB0B3Q015893: n2UB0B3Q015895: postmaster notify: User unknown
|
|
Mar 30 04:00:13 splunk3 sendmail[15895]: n2UB0B3Q015895: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:00:19 splunk3 sendmail[15929]: n2UB0JqK015929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:01:10 splunk3 sendmail[16112]: n2UB11FJ016112: from=root, size=443, class=0, nrcpts=1, msgid=<200903301101.n2UB11FJ016112@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 04:01:10 splunk3 sendmail[16150]: n2UB1Ada016150: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301101.n2UB11FJ016112@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 04:01:10 splunk3 sendmail[16112]: n2UB11FJ016112: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UB1Ada016150 Message accepted for delivery)
|
|
Mar 30 04:01:11 splunk3 sendmail[16151]: n2UB1Ada016150: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:01:19 splunk3 sendmail[16182]: n2UB1JIU016182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:01:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:02:03 splunk3 sendmail[16676]: n2UB23kh016676: from=root, size=1567, class=0, nrcpts=1, msgid=<200903301102.n2UB23kh016676@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 04:02:04 splunk3 sendmail[16678]: n2UB23UT016678: from=<root@splunk3.splunkit.com>, size=1869, class=0, nrcpts=1, msgid=<200903301102.n2UB23kh016676@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 04:02:04 splunk3 sendmail[16676]: n2UB23kh016676: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=31567, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UB23UT016678 Message accepted for delivery)
|
|
Mar 30 04:02:06 splunk3 sendmail[16679]: n2UB23UT016678: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=32103, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:02:19 splunk3 sendmail[16883]: n2UB2Jmg016883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:03:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:03:19 splunk3 sendmail[17122]: n2UB3Jng017122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:04:19 splunk3 sendmail[17358]: n2UB4JnY017358: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:05:08 splunk3 sendmail[17558]: n2UB58Bj017558: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301105.n2UB58DH020320@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:05:08 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60996
|
|
Mar 30 04:05:08 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:05:08 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 04:05:08 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 04:05:08 splunk3 sendmail[17559]: n2UB58Bj017558: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:05:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:05:19 splunk3 sendmail[17612]: n2UB5JWB017612: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:06:19 splunk3 sendmail[17847]: n2UB6Jxu017847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:06:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:07:19 splunk3 sendmail[18093]: n2UB7JD0018093: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:08:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:08:19 splunk3 sendmail[18334]: n2UB8Jmt018334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:09:19 splunk3 sendmail[18573]: n2UB9JrC018573: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:09:32 splunk3 sendmail[18633]: n2UB9WeO018633: from=<3a6jQSRQKBi4QYYQVOKVObdc-XYbOZViQYYQVO.MYWcZKWWOcZVeXUSd.MYW@alerts.bounces.google.com>, size=11299, class=0, nrcpts=1, msgid=<00151750d9b8e847120466541d96@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.163]
|
|
Mar 30 04:09:32 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32816
|
|
Mar 30 04:09:32 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:09:32 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 04:09:32 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 04:09:32 splunk3 sendmail[18634]: n2UB9WeO018633: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=41510, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:09:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:10:02 splunk3 sendmail[18853]: n2UBA2Gc018853: from=root, size=292, class=0, nrcpts=1, msgid=<200903301110.n2UBA2Gc018853@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 04:10:02 splunk3 sendmail[18858]: n2UBA2DO018858: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301110.n2UBA2Gc018853@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 04:10:02 splunk3 sendmail[18853]: n2UBA2Gc018853: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UBA2DO018858 Message accepted for delivery)
|
|
Mar 30 04:10:03 splunk3 sendmail[18859]: n2UBA2DO018858: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:10:09 splunk3 sendmail[18896]: n2UBA8I6018896: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301110.n2UBA87G020934@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:10:09 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32822
|
|
Mar 30 04:10:09 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:10:09 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:10:09 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:10:09 splunk3 spamd[27585]: spamd: processing message <200903301110.n2UBA87G020934@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:10:11 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 30 04:10:11 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32822,mid=<200903301110.n2UBA87G020934@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:10:11 splunk3 sendmail[18897]: n2UBA8I6018896: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:10:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:10:19 splunk3 sendmail[18949]: n2UBAJDB018949: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:11:19 splunk3 sendmail[19189]: n2UBBJFo019189: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:11:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 04:12:19 splunk3 sendmail[19430]: n2UBCJCg019430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:13:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:13:19 splunk3 sendmail[19674]: n2UBDJdc019674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:14:19 splunk3 sendmail[19911]: n2UBEJtU019911: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:15:09 splunk3 sendmail[20124]: n2UBF9jq020124: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301115.n2UBF99a021737@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:15:09 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32880
|
|
Mar 30 04:15:09 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:15:09 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:15:09 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:15:09 splunk3 spamd[27585]: spamd: processing message <200903301115.n2UBF99a021737@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:15:12 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 04:15:12 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32880,mid=<200903301115.n2UBF99a021737@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:15:12 splunk3 sendmail[20125]: n2UBF9jq020124: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:15:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:15:19 splunk3 sendmail[20165]: n2UBFJaC020165: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:16:19 splunk3 sendmail[20401]: n2UBGJmp020401: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:16:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:17:19 splunk3 sendmail[20642]: n2UBHJfZ020642: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:18:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:18:19 splunk3 sendmail[20899]: n2UBIJ4d020899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:19:19 splunk3 sendmail[21140]: n2UBJJMx021140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:20:10 splunk3 sendmail[21338]: n2UBKAWs021338: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301120.n2UBKAOC022375@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:20:10 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32935
|
|
Mar 30 04:20:10 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:20:10 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:20:10 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:20:10 splunk3 spamd[27585]: spamd: processing message <200903301120.n2UBKAOC022375@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:20:12 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 04:20:12 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32935,mid=<200903301120.n2UBKAOC022375@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:20:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:20:12 splunk3 sendmail[21339]: n2UBKAWs021338: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:20:19 splunk3 sendmail[21396]: n2UBKJdm021396: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:21:19 splunk3 sendmail[21633]: n2UBLJ6r021633: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:21:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:22:19 splunk3 sendmail[21876]: n2UBMJaK021876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:23:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:23:19 splunk3 sendmail[22122]: n2UBNJI0022122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:24:19 splunk3 sendmail[22352]: n2UBOJWL022352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:25:10 splunk3 sendmail[22551]: n2UBPAeh022551: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301125.n2UBPAJL022981@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:25:10 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32991
|
|
Mar 30 04:25:10 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:25:10 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:25:10 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:25:10 splunk3 spamd[27585]: spamd: processing message <200903301125.n2UBPAJL022981@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:25:13 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 30 04:25:13 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32991,mid=<200903301125.n2UBPAJL022981@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:25:13 splunk3 sendmail[22552]: n2UBPAeh022551: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:25:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:25:19 splunk3 sendmail[22606]: n2UBPJmT022606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:26:19 splunk3 sendmail[22841]: n2UBQJL3022841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:26:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 04:27:19 splunk3 sendmail[23087]: n2UBRJUP023087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:28:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:28:19 splunk3 sendmail[23328]: n2UBSJNt023328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:29:19 splunk3 sendmail[23566]: n2UBTJIe023566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:30:11 splunk3 sendmail[23762]: n2UBUBmS023762: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301130.n2UBUAPF023627@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:30:11 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33047
|
|
Mar 30 04:30:11 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:30:11 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:30:11 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:30:11 splunk3 spamd[27585]: spamd: processing message <200903301130.n2UBUAPF023627@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:30:14 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 04:30:14 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33047,mid=<200903301130.n2UBUAPF023627@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:30:14 splunk3 sendmail[23763]: n2UBUBmS023762: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:30:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:30:19 splunk3 sendmail[23821]: n2UBUJNp023821: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:31:19 splunk3 sendmail[24061]: n2UBVJVf024061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:31:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:32:19 splunk3 sendmail[24299]: n2UBWJbO024299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:33:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:33:19 splunk3 sendmail[24542]: n2UBXJ2t024542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:34:19 splunk3 sendmail[24777]: n2UBYJvv024777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:35:12 splunk3 sendmail[24974]: n2UBZBae024974: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301135.n2UBZBC9024377@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:35:12 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33103
|
|
Mar 30 04:35:12 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:35:12 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:35:12 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:35:12 splunk3 spamd[27585]: spamd: processing message <200903301135.n2UBZBC9024377@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:35:14 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 04:35:14 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33103,mid=<200903301135.n2UBZBC9024377@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:35:14 splunk3 sendmail[24975]: n2UBZBae024974: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:35:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:35:19 splunk3 sendmail[25033]: n2UBZJ6r025033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:36:19 splunk3 sendmail[25268]: n2UBaJv0025268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:36:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:37:19 splunk3 sendmail[25512]: n2UBbJqV025512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:38:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:38:19 splunk3 sendmail[25753]: n2UBcJJZ025753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:39:19 splunk3 sendmail[25988]: n2UBdJac025988: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:40:12 splunk3 sendmail[26190]: n2UBeCXr026190: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301140.n2UBeCed025013@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:40:12 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33158
|
|
Mar 30 04:40:12 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:40:12 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:40:12 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:40:12 splunk3 spamd[27585]: spamd: processing message <200903301140.n2UBeCed025013@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:40:14 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 04:40:14 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33158,mid=<200903301140.n2UBeCed025013@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:40:14 splunk3 sendmail[26191]: n2UBeCXr026190: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:40:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:40:19 splunk3 sendmail[26245]: n2UBeJ5R026245: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:41:19 splunk3 sendmail[26483]: n2UBfJCp026483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:41:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 04:42:19 splunk3 sendmail[26726]: n2UBgJMi026726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:43:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:43:19 splunk3 sendmail[26967]: n2UBhJWs026967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:44:19 splunk3 sendmail[27201]: n2UBiJ3M027201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:45:13 splunk3 sendmail[27397]: n2UBjDVZ027397: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301145.n2UBjCjF025626@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:45:13 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33215
|
|
Mar 30 04:45:13 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:45:13 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:45:13 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:45:13 splunk3 spamd[27585]: spamd: processing message <200903301145.n2UBjCjF025626@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:45:15 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 04:45:15 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33215,mid=<200903301145.n2UBjCjF025626@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:45:15 splunk3 sendmail[27398]: n2UBjDVZ027397: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:45:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:45:19 splunk3 sendmail[27455]: n2UBjJ5m027455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:46:19 splunk3 sendmail[27691]: n2UBkJT2027691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:46:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:47:19 splunk3 sendmail[27936]: n2UBlJOK027936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:48:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:48:19 splunk3 sendmail[28173]: n2UBmJS1028173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:49:19 splunk3 sendmail[28415]: n2UBnJl2028415: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:50:13 splunk3 sendmail[28612]: n2UBoDug028612: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301150.n2UBoDJ0026243@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:50:13 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33271
|
|
Mar 30 04:50:13 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:50:13 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:50:13 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:50:13 splunk3 spamd[27585]: spamd: processing message <200903301150.n2UBoDJ0026243@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:50:15 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 04:50:15 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33271,mid=<200903301150.n2UBoDJ0026243@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:50:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:50:15 splunk3 sendmail[28613]: n2UBoDug028612: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:50:19 splunk3 sendmail[28671]: n2UBoJsa028671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:51:19 splunk3 sendmail[28910]: n2UBpJLN028910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:51:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:52:19 splunk3 sendmail[29150]: n2UBqJ3b029150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:53:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:53:19 splunk3 sendmail[29395]: n2UBrJAr029395: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:54:19 splunk3 sendmail[29631]: n2UBsJVA029631: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:55:14 splunk3 sendmail[29830]: n2UBtEMI029830: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301155.n2UBtD0b026850@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 04:55:14 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33326
|
|
Mar 30 04:55:14 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 04:55:14 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 04:55:14 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 04:55:14 splunk3 spamd[27585]: spamd: processing message <200903301155.n2UBtD0b026850@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 04:55:16 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 04:55:16 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33326,mid=<200903301155.n2UBtD0b026850@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 04:55:16 splunk3 sendmail[29831]: n2UBtEMI029830: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 04:55:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 04:55:19 splunk3 sendmail[29885]: n2UBtJjE029885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:56:19 splunk3 sendmail[30122]: n2UBuJt1030122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:56:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 04:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 04:57:19 splunk3 sendmail[30367]: n2UBvJdp030367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:58:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 04:58:19 splunk3 sendmail[30604]: n2UBwJ8U030604: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 04:59:19 splunk3 sendmail[30840]: n2UBxJhn030840: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:00:04 splunk3 sendmail[31080]: n2UC04LG031080: from=root, size=291, class=0, nrcpts=1, msgid=<200903301200.n2UC04LG031080@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 05:00:04 splunk3 sendmail[31084]: n2UC04bm031084: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301200.n2UC04LG031080@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 05:00:04 splunk3 sendmail[31080]: n2UC04LG031080: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UC04bm031084 Message accepted for delivery)
|
|
Mar 30 05:00:08 splunk3 sendmail[31085]: n2UC04bm031084: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:04, xdelay=00:00:03, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:00:14 splunk3 sendmail[31124]: n2UC0EjA031124: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301200.n2UC0Ewm027489@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:00:14 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33384
|
|
Mar 30 05:00:14 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:00:14 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 05:00:14 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 05:00:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:00:14 splunk3 sendmail[31125]: n2UC0EjA031124: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:00:18 splunk3 sendmail[31143]: n2UC0Iog031143: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903301200.n2UC0Iog031143@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 05:00:18 splunk3 sendmail[31145]: n2UC0Iog031143: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 05:00:18 splunk3 sendmail[31145]: n2UC0Iog031143: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 05:00:18 splunk3 sendmail[31145]: n2UC0Iog031143: n2UC0Iog031145: postmaster notify: User unknown
|
|
Mar 30 05:00:19 splunk3 sendmail[31145]: n2UC0Iog031145: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:00:19 splunk3 sendmail[31178]: n2UC0JYm031178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:01:11 splunk3 sendmail[31342]: n2UC1154031342: from=root, size=443, class=0, nrcpts=1, msgid=<200903301201.n2UC1154031342@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 05:01:11 splunk3 sendmail[31386]: n2UC1BNX031386: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301201.n2UC1154031342@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 05:01:11 splunk3 sendmail[31342]: n2UC1154031342: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UC1BNX031386 Message accepted for delivery)
|
|
Mar 30 05:01:13 splunk3 sendmail[31387]: n2UC1BNX031386: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:01:19 splunk3 sendmail[31431]: n2UC1JuA031431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:01:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:02:19 splunk3 sendmail[31671]: n2UC2JvJ031671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:03:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:03:19 splunk3 sendmail[31915]: n2UC3JhI031915: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:04:19 splunk3 sendmail[32151]: n2UC4JlT032151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:05:15 splunk3 sendmail[32361]: n2UC5Fu2032361: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301205.n2UC5FGA028170@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:05:15 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33447
|
|
Mar 30 05:05:15 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:05:15 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 05:05:15 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 05:05:15 splunk3 sendmail[32362]: n2UC5Fu2032361: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:05:19 splunk3 sendmail[32403]: n2UC5Jps032403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:06:19 splunk3 sendmail[32637]: n2UC6JKO032637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:06:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:07:19 splunk3 sendmail[414]: n2UC7JjG000414: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:08:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:08:19 splunk3 sendmail[657]: n2UC8J9L000657: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:09:19 splunk3 sendmail[897]: n2UC9JC4000897: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:10:03 splunk3 sendmail[1153]: n2UCA3rI001153: from=root, size=292, class=0, nrcpts=1, msgid=<200903301210.n2UCA3rI001153@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 05:10:03 splunk3 sendmail[1157]: n2UCA3EJ001157: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301210.n2UCA3rI001153@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 05:10:03 splunk3 sendmail[1153]: n2UCA3rI001153: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UCA3EJ001157 Message accepted for delivery)
|
|
Mar 30 05:10:04 splunk3 sendmail[1158]: n2UCA3EJ001157: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:10:15 splunk3 sendmail[1218]: n2UCAFXg001218: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301210.n2UCAFRP028786@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:10:15 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33504
|
|
Mar 30 05:10:15 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:10:15 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:10:15 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:10:15 splunk3 spamd[27585]: spamd: processing message <200903301210.n2UCAFRP028786@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:10:17 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1311 bytes.
|
|
Mar 30 05:10:17 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33504,mid=<200903301210.n2UCAFRP028786@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 05:10:17 splunk3 sendmail[1219]: n2UCAFXg001218: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:10:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:10:19 splunk3 sendmail[1259]: n2UCAJPv001259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:11:19 splunk3 sendmail[1499]: n2UCBJlD001499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:11:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 05:12:19 splunk3 sendmail[1740]: n2UCCJGG001740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:13:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:13:19 splunk3 sendmail[1979]: n2UCDJKX001979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:14:19 splunk3 sendmail[2214]: n2UCEJ8b002214: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:15:16 splunk3 sendmail[2427]: n2UCFGJr002427: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301215.n2UCFGuw029587@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:15:16 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33560
|
|
Mar 30 05:15:16 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:15:16 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:15:16 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:15:16 splunk3 spamd[27585]: spamd: processing message <200903301215.n2UCFGuw029587@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:15:18 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 05:15:18 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33560,mid=<200903301215.n2UCFGuw029587@virt2.int.splunk.com>,bayes=0.112494937019249,autolearn=no
|
|
Mar 30 05:15:18 splunk3 sendmail[2428]: n2UCFGJr002427: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:15:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:15:20 splunk3 sendmail[2460]: n2UCFKHJ002460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:16:20 splunk3 sendmail[2709]: n2UCGKPd002709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:16:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:17:20 splunk3 sendmail[2964]: n2UCHKS3002964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:18:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:18:20 splunk3 sendmail[3209]: n2UCIK2X003209: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:18:22 splunk3 sendmail[3216]: n2UCIM6X003216: from=<3jbjQSRQKBmAEMMEJC8JCPRQ-LMPCNJWEMMEJC.AMKQN8KKCQNJSLIGR.AMK@alerts.bounces.google.com>, size=2804, class=0, nrcpts=1, msgid=<00163630f1df14a12f04665514fd@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 30 05:18:22 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33600
|
|
Mar 30 05:18:22 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:18:22 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:18:22 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:18:22 splunk3 spamd[27585]: spamd: processing message <00163630f1df14a12f04665514fd@google.com> for spamme:501
|
|
Mar 30 05:18:24 splunk3 spamd[27585]: spamd: clean message (-2.4/5.0) for spamme:501 in 1.8 seconds, 3239 bytes.
|
|
Mar 30 05:18:24 splunk3 spamd[27585]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.8,size=3239,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33600,mid=<00163630f1df14a12f04665514fd@google.com>,bayes=0,autolearn=ham
|
|
Mar 30 05:18:24 splunk3 sendmail[3217]: n2UCIM6X003216: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33020, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:18:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:19:20 splunk3 sendmail[3454]: n2UCJKrk003454: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:20:16 splunk3 sendmail[3694]: n2UCKGB3003694: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301220.n2UCKGm3030218@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:20:17 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33617
|
|
Mar 30 05:20:17 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:20:17 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:20:17 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:20:17 splunk3 spamd[27585]: spamd: processing message <200903301220.n2UCKGm3030218@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:20:19 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 05:20:19 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33617,mid=<200903301220.n2UCKGm3030218@virt2.int.splunk.com>,bayes=0.11252730096933,autolearn=no
|
|
Mar 30 05:20:19 splunk3 sendmail[3696]: n2UCKGB3003694: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:20:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:20:20 splunk3 sendmail[3728]: n2UCKKoM003728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:21:20 splunk3 sendmail[3979]: n2UCLKHQ003979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:21:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:22:20 splunk3 sendmail[4238]: n2UCMKg5004238: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:23:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:23:20 splunk3 sendmail[4495]: n2UCNKQu004495: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:24:20 splunk3 sendmail[4732]: n2UCOKc7004732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:25:17 splunk3 sendmail[4961]: n2UCPH5d004961: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301225.n2UCPHS5030832@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:25:17 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33672
|
|
Mar 30 05:25:17 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:25:17 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:25:17 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:25:17 splunk3 spamd[27585]: spamd: processing message <200903301225.n2UCPHS5030832@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:25:19 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 30 05:25:19 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33672,mid=<200903301225.n2UCPHS5030832@virt2.int.splunk.com>,bayes=0.11252730096933,autolearn=no
|
|
Mar 30 05:25:19 splunk3 sendmail[4962]: n2UCPH5d004961: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:25:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:25:20 splunk3 sendmail[4989]: n2UCPKN6004989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:26:20 splunk3 sendmail[5269]: n2UCQKZQ005269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:26:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 05:27:20 splunk3 sendmail[5515]: n2UCRKYn005515: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:28:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:28:20 splunk3 sendmail[5753]: n2UCSKAa005753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:29:20 splunk3 sendmail[5991]: n2UCTKHK005991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:30:20 splunk3 sendmail[6230]: n2UCUKQi006230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:30:21 splunk3 sendmail[6231]: n2UCULV0006231: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301230.n2UCUIEl031456@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:30:21 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33729
|
|
Mar 30 05:30:21 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:30:21 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:30:21 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:30:21 splunk3 spamd[27585]: spamd: processing message <200903301230.n2UCUIEl031456@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:30:23 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 05:30:23 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33729,mid=<200903301230.n2UCUIEl031456@virt2.int.splunk.com>,bayes=0.11252730096933,autolearn=no
|
|
Mar 30 05:30:23 splunk3 sendmail[6232]: n2UCULV0006231: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:30:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:31:20 splunk3 sendmail[6486]: n2UCVKmS006486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:31:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:32:20 splunk3 sendmail[6727]: n2UCWKa5006727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:33:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:33:20 splunk3 sendmail[6968]: n2UCXKSu006968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:34:20 splunk3 sendmail[7201]: n2UCYK2l007201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:35:20 splunk3 sendmail[7440]: n2UCZKtd007440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:35:21 splunk3 sendmail[7442]: n2UCZLss007442: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301235.n2UCZLsk032202@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:35:21 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33785
|
|
Mar 30 05:35:21 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:35:21 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:35:21 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:35:21 splunk3 spamd[27585]: spamd: processing message <200903301235.n2UCZLsk032202@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:35:23 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 30 05:35:23 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33785,mid=<200903301235.n2UCZLsk032202@virt2.int.splunk.com>,bayes=0.11252730096933,autolearn=no
|
|
Mar 30 05:35:23 splunk3 sendmail[7443]: n2UCZLss007442: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:36:20 splunk3 sendmail[7700]: n2UCaKZr007700: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:36:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:37:20 splunk3 sendmail[7945]: n2UCbKBt007945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:38:03 splunk3 sendmail[8104]: n2UCc21J008104: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=118-160-248-184.dynamic.hinet.net [118.160.248.184], reject=550 5.7.1 <bibiorm@gmail.com>... Relaying denied
|
|
Mar 30 05:38:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:38:20 splunk3 sendmail[8190]: n2UCcKUM008190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:39:20 splunk3 sendmail[8429]: n2UCdKHf008429: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:40:20 splunk3 sendmail[8670]: n2UCeKIc008670: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:40:22 splunk3 sendmail[8685]: n2UCeMu1008685: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903301240.n2UCeMeV000378@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:40:22 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33848
|
|
Mar 30 05:40:22 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:40:22 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:40:22 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:40:22 splunk3 spamd[27585]: spamd: processing message <200903301240.n2UCeMeV000378@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:40:24 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Mar 30 05:40:24 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33848,mid=<200903301240.n2UCeMeV000378@virt2.int.splunk.com>,bayes=0.0665265738572151,autolearn=no
|
|
Mar 30 05:40:24 splunk3 sendmail[8686]: n2UCeMu1008685: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:40:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:41:20 splunk3 sendmail[8922]: n2UCfKji008922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:41:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 05:42:20 splunk3 sendmail[9163]: n2UCgKLB009163: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:43:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:43:20 splunk3 sendmail[9406]: n2UChK2Y009406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:44:20 splunk3 sendmail[9651]: n2UCiKPN009651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:45:20 splunk3 sendmail[9890]: n2UCjKWE009890: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:45:23 splunk3 sendmail[9904]: n2UCjMcm009904: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903301245.n2UCjMlP000987@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:45:23 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33905
|
|
Mar 30 05:45:23 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:45:23 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:45:23 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:45:23 splunk3 spamd[27585]: spamd: processing message <200903301245.n2UCjMlP000987@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:45:25 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Mar 30 05:45:25 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33905,mid=<200903301245.n2UCjMlP000987@virt2.int.splunk.com>,bayes=0.0665265738572151,autolearn=no
|
|
Mar 30 05:45:25 splunk3 sendmail[9905]: n2UCjMcm009904: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:45:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:46:20 splunk3 sendmail[10141]: n2UCkKgn010141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:46:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:47:20 splunk3 sendmail[10385]: n2UClKEK010385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:48:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:48:20 splunk3 sendmail[10617]: n2UCmK5j010617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:49:20 splunk3 sendmail[10855]: n2UCnKKu010855: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:50:20 splunk3 sendmail[11096]: n2UCoK5p011096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:50:24 splunk3 sendmail[11125]: n2UCoOSp011125: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301250.n2UCoNfw001630@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:50:24 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33961
|
|
Mar 30 05:50:24 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:50:24 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:50:24 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:50:24 splunk3 spamd[27585]: spamd: processing message <200903301250.n2UCoNfw001630@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:50:26 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 30 05:50:26 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33961,mid=<200903301250.n2UCoNfw001630@virt2.int.splunk.com>,bayes=0.169485392179963,autolearn=no
|
|
Mar 30 05:50:26 splunk3 sendmail[11126]: n2UCoOSp011125: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:50:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:51:20 splunk3 sendmail[11349]: n2UCpKgE011349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:51:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:52:20 splunk3 sendmail[11592]: n2UCqKee011592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:53:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:53:20 splunk3 sendmail[11838]: n2UCrKPJ011838: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:54:20 splunk3 sendmail[12072]: n2UCsKxY012072: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:55:20 splunk3 sendmail[12310]: n2UCtKrG012310: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:55:24 splunk3 sendmail[12344]: n2UCtOgB012344: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301255.n2UCtOia002251@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 05:55:24 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34016
|
|
Mar 30 05:55:24 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 05:55:24 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 05:55:24 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 05:55:24 splunk3 spamd[27585]: spamd: processing message <200903301255.n2UCtOia002251@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 05:55:26 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Mar 30 05:55:26 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34016,mid=<200903301255.n2UCtOia002251@virt2.int.splunk.com>,bayes=0.169485392179963,autolearn=no
|
|
Mar 30 05:55:26 splunk3 sendmail[12345]: n2UCtOgB012344: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 05:55:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 05:56:20 splunk3 sendmail[12562]: n2UCuKXt012562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:56:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 05:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 05:57:20 splunk3 sendmail[12808]: n2UCvKFE012808: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:58:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 05:58:20 splunk3 sendmail[13046]: n2UCwKB8013046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 05:59:20 splunk3 sendmail[13312]: n2UCxKag013312: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:00:05 splunk3 sendmail[13565]: n2UD05KR013565: from=root, size=291, class=0, nrcpts=1, msgid=<200903301300.n2UD05KR013565@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 06:00:05 splunk3 sendmail[13569]: n2UD05Ar013569: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301300.n2UD05KR013565@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 06:00:05 splunk3 sendmail[13565]: n2UD05KR013565: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UD05Ar013569 Message accepted for delivery)
|
|
Mar 30 06:00:06 splunk3 sendmail[13570]: n2UD05Ar013569: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:00:20 splunk3 sendmail[13634]: n2UD0K62013634: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:00:24 splunk3 sendmail[13666]: n2UD0OwR013666: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903301300.n2UD0OwR013666@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 06:00:24 splunk3 sendmail[13668]: n2UD0OwR013666: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 06:00:24 splunk3 sendmail[13668]: n2UD0OwR013666: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 06:00:24 splunk3 sendmail[13668]: n2UD0OwR013666: n2UD0OwR013668: postmaster notify: User unknown
|
|
Mar 30 06:00:25 splunk3 sendmail[13681]: n2UD0P8f013681: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301300.n2UD0OGa002891@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:00:25 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34081
|
|
Mar 30 06:00:25 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:00:25 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 06:00:25 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 06:00:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:00:25 splunk3 sendmail[13682]: n2UD0P8f013681: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:00:25 splunk3 sendmail[13668]: n2UD0OwR013668: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:01:15 splunk3 sendmail[13831]: n2UD11dG013831: from=root, size=443, class=0, nrcpts=1, msgid=<200903301301.n2UD11dG013831@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 06:01:16 splunk3 sendmail[13888]: n2UD1G7L013888: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301301.n2UD11dG013831@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 06:01:16 splunk3 sendmail[13831]: n2UD11dG013831: to=root, ctladdr=root (0/0), delay=00:00:15, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UD1G7L013888 Message accepted for delivery)
|
|
Mar 30 06:01:17 splunk3 sendmail[13889]: n2UD1G7L013888: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:01:20 splunk3 sendmail[13917]: n2UD1KSn013917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:01:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:02:20 splunk3 sendmail[14153]: n2UD2KQM014153: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:03:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:03:20 splunk3 sendmail[14393]: n2UD3KBq014393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:04:20 splunk3 sendmail[14629]: n2UD4KOp014629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:05:20 splunk3 sendmail[14867]: n2UD5Kvw014867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:05:25 splunk3 sendmail[14898]: n2UD5PX3014898: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301305.n2UD5PTJ003574@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:05:25 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34137
|
|
Mar 30 06:05:25 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:05:25 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 06:05:25 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 06:05:25 splunk3 sendmail[14899]: n2UD5PX3014898: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:06:20 splunk3 sendmail[15117]: n2UD6KDH015117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:06:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:07:20 splunk3 sendmail[15362]: n2UD7KNL015362: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:08:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:08:20 splunk3 sendmail[15604]: n2UD8KpA015604: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:09:20 splunk3 sendmail[15843]: n2UD9Kq6015843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:10:02 splunk3 sendmail[16102]: n2UDA2HA016102: from=root, size=292, class=0, nrcpts=1, msgid=<200903301310.n2UDA2HA016102@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 06:10:02 splunk3 sendmail[16105]: n2UDA26B016105: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301310.n2UDA2HA016102@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 06:10:02 splunk3 sendmail[16102]: n2UDA2HA016102: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UDA26B016105 Message accepted for delivery)
|
|
Mar 30 06:10:03 splunk3 sendmail[16106]: n2UDA26B016105: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:10:20 splunk3 sendmail[16187]: n2UDAKpM016187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:10:26 splunk3 sendmail[16221]: n2UDAQvp016221: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301310.n2UDAPRs004190@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:10:26 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34194
|
|
Mar 30 06:10:26 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:10:26 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:10:26 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:10:26 splunk3 spamd[27585]: spamd: processing message <200903301310.n2UDAPRs004190@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:10:28 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 30 06:10:28 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34194,mid=<200903301310.n2UDAPRs004190@virt2.int.splunk.com>,bayes=0.169485392179963,autolearn=no
|
|
Mar 30 06:10:28 splunk3 sendmail[16222]: n2UDAQvp016221: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:10:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:11:20 splunk3 sendmail[16443]: n2UDBKR7016443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:11:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 06:12:20 splunk3 sendmail[16684]: n2UDCKh5016684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:13:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:13:20 splunk3 sendmail[16928]: n2UDDKCY016928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:14:20 splunk3 sendmail[17163]: n2UDEKtE017163: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:15:20 splunk3 sendmail[17402]: n2UDFK9b017402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:15:26 splunk3 sendmail[17435]: n2UDFQbs017435: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301315.n2UDFQas004990@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:15:26 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34250
|
|
Mar 30 06:15:26 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:15:26 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:15:26 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:15:26 splunk3 spamd[27585]: spamd: processing message <200903301315.n2UDFQas004990@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:15:28 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 30 06:15:28 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34250,mid=<200903301315.n2UDFQas004990@virt2.int.splunk.com>,bayes=0.169485392179963,autolearn=no
|
|
Mar 30 06:15:28 splunk3 sendmail[17436]: n2UDFQbs017435: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:16:09 splunk3 sendmail[17573]: n2UDG4ee017573: from=<Gary@sknetdata.com>, size=41105, class=0, nrcpts=1, msgid=<200903302115139068486@sknetdata.com>, proto=ESMTP, daemon=MTA, relay=master.mail241.cn4e.com [218.85.132.241]
|
|
Mar 30 06:16:09 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34257
|
|
Mar 30 06:16:09 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:16:09 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:16:09 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:16:09 splunk3 spamd[27585]: spamd: processing message <200903302115139068486@sknetdata.com> for spamme:501
|
|
Mar 30 06:16:14 splunk3 spamd[27585]: spamd: clean message (3.6/5.0) for spamme:501 in 5.4 seconds, 41401 bytes.
|
|
Mar 30 06:16:14 splunk3 spamd[27585]: spamd: result: . 3 - BAYES_50,EXTRA_MPART_TYPE,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,X_PRIORITY_HIGH scantime=5.4,size=41401,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34257,mid=<200903302115139068486@sknetdata.com>,bayes=0.499999999665258,autolearn=no
|
|
Mar 30 06:16:14 splunk3 sendmail[17612]: n2UDG4ee017573: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:05, mailer=local, pri=71322, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:16:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:16:20 splunk3 sendmail[17657]: n2UDGK2s017657: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:16:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:17:20 splunk3 sendmail[17899]: n2UDHK5v017899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:18:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:18:20 splunk3 sendmail[18137]: n2UDIKEZ018137: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:19:20 splunk3 sendmail[18375]: n2UDJK40018375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:20:20 splunk3 sendmail[18616]: n2UDKKH5018616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:20:27 splunk3 sendmail[18647]: n2UDKRbA018647: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301320.n2UDKQ19005624@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:20:27 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34307
|
|
Mar 30 06:20:27 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:20:27 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:20:27 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:20:27 splunk3 spamd[27585]: spamd: processing message <200903301320.n2UDKQ19005624@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:20:29 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1308 bytes.
|
|
Mar 30 06:20:29 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34307,mid=<200903301320.n2UDKQ19005624@virt2.int.splunk.com>,bayes=0.169485392179963,autolearn=no
|
|
Mar 30 06:20:29 splunk3 sendmail[18648]: n2UDKRbA018647: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:20:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:21:20 splunk3 sendmail[18869]: n2UDLKEr018869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:21:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:22:20 splunk3 sendmail[19110]: n2UDMK8x019110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:23:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:23:20 splunk3 sendmail[19351]: n2UDNKZb019351: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:24:20 splunk3 sendmail[19585]: n2UDOKNY019585: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:25:20 splunk3 sendmail[19827]: n2UDPK2D019827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:25:27 splunk3 sendmail[19858]: n2UDPR4R019858: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301325.n2UDPRhj006253@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:25:27 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34362
|
|
Mar 30 06:25:27 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:25:27 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:25:27 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:25:27 splunk3 spamd[27585]: spamd: processing message <200903301325.n2UDPRhj006253@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:25:29 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 06:25:29 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34362,mid=<200903301325.n2UDPRhj006253@virt2.int.splunk.com>,bayes=0.169485392179963,autolearn=no
|
|
Mar 30 06:25:29 splunk3 sendmail[19859]: n2UDPR4R019858: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:26:20 splunk3 sendmail[20076]: n2UDQKZm020076: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:26:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 06:27:20 splunk3 sendmail[20323]: n2UDRKxv020323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:28:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:28:20 splunk3 sendmail[20562]: n2UDSKFA020562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:29:20 splunk3 sendmail[20799]: n2UDTKXl020799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:29:33 splunk3 sendmail[20841]: n2UDTWX0020841: from=<spamme@splunkit.com>, size=1891, class=0, nrcpts=1, msgid=<200903301329.n2UDTWX0020841@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=c915b5b9.virtua.com.br [201.21.181.185] (may be forged)
|
|
Mar 30 06:29:33 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34404
|
|
Mar 30 06:29:33 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:29:33 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:29:33 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:29:33 splunk3 spamd[27585]: spamd: processing message <200903301329.n2UDTWX0020841@splunk3.splunkit.com> for spamme:501
|
|
Mar 30 06:29:37 splunk3 spamd[27585]: spamd: identified spam (15.3/5.0) for spamme:501 in 3.3 seconds, 2305 bytes.
|
|
Mar 30 06:29:37 splunk3 spamd[27585]: spamd: result: Y 15 - BAYES_99,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URI_NOVOWEL scantime=3.3,size=2305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34404,mid=<200903301329.n2UDTWX0020841@splunk3.splunkit.com>,bayes=0.992859857301078,autolearn=no
|
|
Mar 30 06:29:37 splunk3 sendmail[20858]: n2UDTWX0020841: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:04, mailer=local, pri=32228, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:29:37 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:30:20 splunk3 sendmail[21044]: n2UDUKEJ021044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:30:28 splunk3 sendmail[21097]: n2UDUSv8021097: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301330.n2UDUR1v006849@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:30:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34420
|
|
Mar 30 06:30:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:30:28 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:30:28 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:30:28 splunk3 spamd[27585]: spamd: processing message <200903301330.n2UDUR1v006849@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:30:30 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 30 06:30:30 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34420,mid=<200903301330.n2UDUR1v006849@virt2.int.splunk.com>,bayes=0.169485392179963,autolearn=no
|
|
Mar 30 06:30:30 splunk3 sendmail[21098]: n2UDUSv8021097: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:31:20 splunk3 sendmail[21302]: n2UDVK6P021302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:31:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:31:35 splunk3 sendmail[21158]: n2UDUjA2021158: from=<su-linh@barbarajordan.com>, size=2155, class=0, nrcpts=1, msgid=<c10a019dbde7$c2406dc8$21303c99@barbarajordan.com>, proto=ESMTP, daemon=MTA, relay=[41.201.87.116]
|
|
Mar 30 06:31:35 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34432
|
|
Mar 30 06:31:35 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:31:35 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:31:35 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:31:35 splunk3 spamd[27585]: spamd: processing message <c10a019dbde7$c2406dc8$21303c99@barbarajordan.com> for spamme:501
|
|
Mar 30 06:31:37 splunk3 spamd[27585]: spamd: identified spam (36.8/5.0) for spamme:501 in 2.6 seconds, 2436 bytes.
|
|
Mar 30 06:31:37 splunk3 spamd[27585]: spamd: result: Y 36 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_BOGUSMX,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,REPLICA_WATCH,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.6,size=2436,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34432,mid=<c10a019dbde7$c2406dc8$21303c99@barbarajordan.com>,bayes=1,autolearn=spam
|
|
Mar 30 06:31:37 splunk3 sendmail[21368]: n2UDUjA2021158: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:02, mailer=local, pri=32333, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:31:37 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:32:20 splunk3 sendmail[21548]: n2UDWK3J021548: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:33:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:33:20 splunk3 sendmail[21789]: n2UDXK1O021789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:34:20 splunk3 sendmail[22026]: n2UDYKo8022026: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:35:20 splunk3 sendmail[22263]: n2UDZKGJ022263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:35:28 splunk3 sendmail[22310]: n2UDZSiT022310: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301335.n2UDZSf3007622@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:35:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34477
|
|
Mar 30 06:35:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:35:28 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:35:28 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:35:28 splunk3 spamd[27585]: spamd: processing message <200903301335.n2UDZSf3007622@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:35:30 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 06:35:30 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34477,mid=<200903301335.n2UDZSf3007622@virt2.int.splunk.com>,bayes=0.169480017987611,autolearn=no
|
|
Mar 30 06:35:30 splunk3 sendmail[22311]: n2UDZSiT022310: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:36:20 splunk3 sendmail[22509]: n2UDaKmZ022509: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:36:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:37:20 splunk3 sendmail[22752]: n2UDbKBX022752: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:38:03 splunk3 sendmail[8104]: n2UCc21J008104: timeout waiting for input from 118-160-248-184.dynamic.hinet.net during server cmd read
|
|
Mar 30 06:38:03 splunk3 sendmail[8104]: n2UCc21J008104: lost input channel from 118-160-248-184.dynamic.hinet.net [118.160.248.184] to MTA after rcpt
|
|
Mar 30 06:38:03 splunk3 sendmail[8104]: n2UCc21J008104: from=<neal_chen99@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-160-248-184.dynamic.hinet.net [118.160.248.184]
|
|
Mar 30 06:38:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:38:20 splunk3 sendmail[22992]: n2UDcKdx022992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:39:20 splunk3 sendmail[23232]: n2UDdKQT023232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:40:20 splunk3 sendmail[23473]: n2UDeKc5023473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:40:28 splunk3 sendmail[23521]: n2UDeSgr023521: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301340.n2UDeSgs008235@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:40:28 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34532
|
|
Mar 30 06:40:28 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:40:29 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:40:29 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:40:29 splunk3 spamd[27585]: spamd: processing message <200903301340.n2UDeSgs008235@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:40:31 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1308 bytes.
|
|
Mar 30 06:40:31 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34532,mid=<200903301340.n2UDeSgs008235@virt2.int.splunk.com>,bayes=0.169480017987611,autolearn=no
|
|
Mar 30 06:40:31 splunk3 sendmail[23522]: n2UDeSgr023521: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:40:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:41:20 splunk3 sendmail[23727]: n2UDfKII023727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:41:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 06:42:20 splunk3 sendmail[23968]: n2UDgKqf023968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:43:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:43:20 splunk3 sendmail[24210]: n2UDhKWj024210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:44:20 splunk3 sendmail[24443]: n2UDiKLG024443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:44:55 splunk3 sendmail[24582]: n2UDisTp024582: from=<31szQSRQKBr0jrrjohdohuwv-qruhso1jrrjoh.frpvsdpphvsoxqnlw.frp@alerts.bounces.google.com>, size=11998, class=0, nrcpts=1, msgid=<000e0cd4d91a937c970466564925@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.166]
|
|
Mar 30 06:44:55 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34576
|
|
Mar 30 06:44:55 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:44:55 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:44:55 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:44:55 splunk3 spamd[27585]: spamd: processing message <000e0cd4d91a937c970466564925@google.com> for spamme:501
|
|
Mar 30 06:44:57 splunk3 spamd[27585]: spamd: clean message (-1.1/5.0) for spamme:501 in 2.7 seconds, 12428 bytes.
|
|
Mar 30 06:44:57 splunk3 spamd[27585]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=2.7,size=12428,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34576,mid=<000e0cd4d91a937c970466564925@google.com>,bayes=0,autolearn=no
|
|
Mar 30 06:44:57 splunk3 sendmail[24583]: n2UDisTp024582: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=42209, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:44:57 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:45:20 splunk3 sendmail[24688]: n2UDjKlc024688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:45:29 splunk3 sendmail[24740]: n2UDjTG7024740: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301345.n2UDjS9E008866@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:45:29 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34590
|
|
Mar 30 06:45:29 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:45:29 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:45:29 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:45:29 splunk3 spamd[27585]: spamd: processing message <200903301345.n2UDjS9E008866@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:45:31 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 30 06:45:31 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34590,mid=<200903301345.n2UDjS9E008866@virt2.int.splunk.com>,bayes=0.169480017987611,autolearn=no
|
|
Mar 30 06:45:31 splunk3 sendmail[24741]: n2UDjTG7024740: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:45:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:46:20 splunk3 sendmail[24940]: n2UDkK5S024940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:46:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:47:20 splunk3 sendmail[25184]: n2UDlKv5025184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:48:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:48:20 splunk3 sendmail[25423]: n2UDmK4C025423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:49:20 splunk3 sendmail[25664]: n2UDnKtl025664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:50:20 splunk3 sendmail[25904]: n2UDoKWr025904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:50:29 splunk3 sendmail[25953]: n2UDoT49025953: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301350.n2UDoToe009461@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:50:29 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34645
|
|
Mar 30 06:50:29 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:50:29 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:50:29 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:50:29 splunk3 spamd[27585]: spamd: processing message <200903301350.n2UDoToe009461@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:50:32 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 30 06:50:32 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34645,mid=<200903301350.n2UDoToe009461@virt2.int.splunk.com>,bayes=0.169480017987611,autolearn=no
|
|
Mar 30 06:50:32 splunk3 sendmail[25954]: n2UDoT49025953: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:50:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:51:20 splunk3 sendmail[26156]: n2UDpKun026156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:51:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:52:20 splunk3 sendmail[26398]: n2UDqK6e026398: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:53:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:53:20 splunk3 sendmail[26644]: n2UDrKbA026644: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:54:20 splunk3 sendmail[26876]: n2UDsKB9026876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:55:00 splunk3 sendmail[27038]: n2UDt0nf027038: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301355.n2UDt077009994@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 06:55:00 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34689
|
|
Mar 30 06:55:00 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 06:55:00 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 06:55:00 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 06:55:00 splunk3 spamd[27585]: spamd: processing message <200903301355.n2UDt077009994@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 06:55:02 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 30 06:55:02 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34689,mid=<200903301355.n2UDt077009994@virt2.int.splunk.com>,bayes=0.169480017987611,autolearn=no
|
|
Mar 30 06:55:02 splunk3 sendmail[27039]: n2UDt0nf027038: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 06:55:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 06:55:20 splunk3 sendmail[27123]: n2UDtKlC027123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:56:20 splunk3 sendmail[27366]: n2UDuK3Q027366: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:56:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 06:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 06:57:20 splunk3 sendmail[27611]: n2UDvKr0027611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:58:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 06:58:20 splunk3 sendmail[27848]: n2UDwKYT027848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 06:59:20 splunk3 sendmail[28087]: n2UDxKrZ028087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:00:00 splunk3 sendmail[28245]: n2UE00tB028245: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301400.n2UE00ER010613@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:00:00 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34745
|
|
Mar 30 07:00:00 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:00:00 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:00:00 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:00:00 splunk3 spamd[27585]: spamd: processing message <200903301400.n2UE00ER010613@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:00:02 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 07:00:02 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34745,mid=<200903301400.n2UE00ER010613@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:00:02 splunk3 sendmail[28246]: n2UE00tB028245: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:00:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:00:04 splunk3 sendmail[28335]: n2UE0472028335: from=root, size=291, class=0, nrcpts=1, msgid=<200903301400.n2UE0472028335@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 07:00:04 splunk3 sendmail[28339]: n2UE044o028339: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301400.n2UE0472028335@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 07:00:04 splunk3 sendmail[28335]: n2UE0472028335: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UE044o028339 Message accepted for delivery)
|
|
Mar 30 07:00:05 splunk3 sendmail[28340]: n2UE044o028339: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:00:20 splunk3 sendmail[28405]: n2UE0KgA028405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:00:29 splunk3 sendmail[28455]: n2UE0T6i028455: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903301400.n2UE0T6i028455@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 07:00:29 splunk3 sendmail[28457]: n2UE0T6i028455: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 07:00:29 splunk3 sendmail[28457]: n2UE0T6i028455: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 07:00:29 splunk3 sendmail[28457]: n2UE0T6i028455: n2UE0T6i028457: postmaster notify: User unknown
|
|
Mar 30 07:00:31 splunk3 sendmail[28457]: n2UE0T6i028457: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:01:03 splunk3 sendmail[28598]: n2UE116N028598: from=root, size=443, class=0, nrcpts=1, msgid=<200903301401.n2UE116N028598@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 07:01:03 splunk3 sendmail[28618]: n2UE13in028618: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301401.n2UE116N028598@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 07:01:03 splunk3 sendmail[28598]: n2UE116N028598: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UE13in028618 Message accepted for delivery)
|
|
Mar 30 07:01:04 splunk3 sendmail[28619]: n2UE13in028618: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:01:20 splunk3 sendmail[28685]: n2UE1KsV028685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:01:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:02:20 splunk3 sendmail[28927]: n2UE2Kio028927: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:03:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:03:20 splunk3 sendmail[29168]: n2UE3KDY029168: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:04:21 splunk3 sendmail[29402]: n2UE4Lwf029402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:05:01 splunk3 sendmail[29571]: n2UE51NN029571: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301405.n2UE51Ft011319@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:05:01 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34818
|
|
Mar 30 07:05:01 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:05:01 splunk3 spamd[27585]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 07:05:01 splunk3 spamd[27585]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 07:05:01 splunk3 sendmail[29572]: n2UE51NN029571: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:05:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:05:21 splunk3 sendmail[29653]: n2UE5LkJ029653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:06:21 splunk3 sendmail[29889]: n2UE6LJv029889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:06:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:07:21 splunk3 sendmail[30134]: n2UE7LrE030134: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:08:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:08:21 splunk3 sendmail[30376]: n2UE8LJo030376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:09:21 splunk3 sendmail[30618]: n2UE9La5030618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:10:02 splunk3 sendmail[30879]: n2UEA2iY030879: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301410.n2UEA158011939@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:10:02 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34874
|
|
Mar 30 07:10:02 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:10:02 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:10:02 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:10:02 splunk3 spamd[27585]: spamd: processing message <200903301410.n2UEA158011939@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:10:02 splunk3 sendmail[30888]: n2UEA2WA030888: from=root, size=292, class=0, nrcpts=1, msgid=<200903301410.n2UEA2WA030888@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 07:10:02 splunk3 sendmail[30893]: n2UEA22l030893: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301410.n2UEA2WA030888@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 07:10:02 splunk3 sendmail[30888]: n2UEA2WA030888: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UEA22l030893 Message accepted for delivery)
|
|
Mar 30 07:10:03 splunk3 sendmail[30900]: n2UEA22l030893: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:10:04 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 30 07:10:04 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34874,mid=<200903301410.n2UEA158011939@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:10:04 splunk3 sendmail[30880]: n2UEA2iY030879: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:10:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:10:21 splunk3 sendmail[30976]: n2UEALeH030976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:11:21 splunk3 sendmail[31212]: n2UEBLQE031212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:11:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 07:12:21 splunk3 sendmail[31452]: n2UECLLW031452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:13:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:13:21 splunk3 sendmail[31694]: n2UEDLiR031694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:14:21 splunk3 sendmail[31930]: n2UEELN3031930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:15:03 splunk3 sendmail[32116]: n2UEF3SD032116: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301415.n2UEF2ew012781@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:15:03 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34931
|
|
Mar 30 07:15:03 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:15:03 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:15:03 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:15:03 splunk3 spamd[27585]: spamd: processing message <200903301415.n2UEF2ew012781@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:15:05 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 07:15:05 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34931,mid=<200903301415.n2UEF2ew012781@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:15:06 splunk3 sendmail[32117]: n2UEF3SD032116: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:15:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:15:21 splunk3 sendmail[32183]: n2UEFL7T032183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:16:21 splunk3 sendmail[32420]: n2UEGLK4032420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:16:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:17:21 splunk3 sendmail[32665]: n2UEHLHs032665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:18:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:18:21 splunk3 sendmail[435]: n2UEILeX000435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:19:21 splunk3 sendmail[672]: n2UEJLNV000672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:20:04 splunk3 sendmail[861]: n2UEK4uk000861: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301420.n2UEK3l2013411@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:20:04 splunk3 spamd[27585]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34987
|
|
Mar 30 07:20:04 splunk3 spamd[27585]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:20:04 splunk3 spamd[27585]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:20:04 splunk3 spamd[27585]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:20:04 splunk3 spamd[27585]: spamd: processing message <200903301420.n2UEK3l2013411@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:20:06 splunk3 spamd[27585]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 07:20:06 splunk3 spamd[27585]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34987,mid=<200903301420.n2UEK3l2013411@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:20:06 splunk3 sendmail[863]: n2UEK4uk000861: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:20:06 splunk3 spamd[3033]: prefork: child states: BI
|
|
Mar 30 07:20:06 splunk3 spamd[3033]: spamd: handled cleanup of child pid 27585 due to SIGCHLD
|
|
Mar 30 07:20:06 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 870
|
|
Mar 30 07:20:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:20:21 splunk3 sendmail[929]: n2UEKL0s000929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:21:21 splunk3 sendmail[1167]: n2UELL2w001167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:21:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:22:21 splunk3 sendmail[1411]: n2UEMLpw001411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:23:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:23:21 splunk3 sendmail[1658]: n2UENL5j001658: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:24:21 splunk3 sendmail[1894]: n2UEOLV0001894: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:25:04 splunk3 sendmail[2083]: n2UEP4iY002083: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301425.n2UEP4O9014024@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:25:04 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35042
|
|
Mar 30 07:25:04 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:25:04 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:25:04 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:25:04 splunk3 spamd[870]: spamd: processing message <200903301425.n2UEP4O9014024@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:25:06 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1311 bytes.
|
|
Mar 30 07:25:06 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35042,mid=<200903301425.n2UEP4O9014024@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:25:06 splunk3 sendmail[2084]: n2UEP4iY002083: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:25:21 splunk3 sendmail[2149]: n2UEPLaQ002149: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:26:21 splunk3 sendmail[2380]: n2UEQLPV002380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:26:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 07:27:21 splunk3 sendmail[2630]: n2UERLFG002630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:28:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:28:21 splunk3 sendmail[2883]: n2UESLZr002883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:29:21 splunk3 sendmail[3129]: n2UETLA4003129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:30:05 splunk3 sendmail[3320]: n2UEU5cd003320: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301430.n2UEU5fa014642@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:30:05 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35099
|
|
Mar 30 07:30:05 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:30:05 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:30:05 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:30:05 splunk3 spamd[870]: spamd: processing message <200903301430.n2UEU5fa014642@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:30:08 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 07:30:08 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35099,mid=<200903301430.n2UEU5fa014642@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:30:08 splunk3 sendmail[3321]: n2UEU5cd003320: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:30:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:30:21 splunk3 sendmail[3389]: n2UEUL84003389: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:31:21 splunk3 sendmail[3650]: n2UEVLU2003650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:31:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:32:21 splunk3 sendmail[3899]: n2UEWLVr003899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:33:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:33:21 splunk3 sendmail[4154]: n2UEXL67004154: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:34:21 splunk3 sendmail[4405]: n2UEYL2K004405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:35:05 splunk3 sendmail[4592]: n2UEZ5Uf004592: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301435.n2UEZ5Vg015388@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:35:05 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35155
|
|
Mar 30 07:35:05 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:35:05 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:35:05 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:35:05 splunk3 spamd[870]: spamd: processing message <200903301435.n2UEZ5Vg015388@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:35:08 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 07:35:08 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35155,mid=<200903301435.n2UEZ5Vg015388@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:35:08 splunk3 sendmail[4593]: n2UEZ5Uf004592: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:35:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:35:21 splunk3 sendmail[4661]: n2UEZLWG004661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:36:21 splunk3 sendmail[4903]: n2UEaLSY004903: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:36:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:37:21 splunk3 sendmail[5189]: n2UEbLqE005189: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:38:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:38:21 splunk3 sendmail[5434]: n2UEcL2Z005434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:39:21 splunk3 sendmail[5669]: n2UEdLpb005669: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:40:06 splunk3 sendmail[5860]: n2UEe66J005860: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301440.n2UEe6eJ016020@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:40:06 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35210
|
|
Mar 30 07:40:06 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:40:06 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:40:06 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:40:06 splunk3 spamd[870]: spamd: processing message <200903301440.n2UEe6eJ016020@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:40:08 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 07:40:08 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35210,mid=<200903301440.n2UEe6eJ016020@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:40:08 splunk3 sendmail[5861]: n2UEe66J005860: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:40:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:40:21 splunk3 sendmail[5924]: n2UEeLtu005924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:41:01 splunk3 sendmail[6080]: n2UEf0vY006080: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=118-160-248-188.dynamic.hinet.net [118.160.248.188], reject=550 5.7.1 <bibiorm@gmail.com>... Relaying denied
|
|
Mar 30 07:41:21 splunk3 sendmail[6162]: n2UEfLA5006162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:41:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 07:42:21 splunk3 sendmail[6404]: n2UEgLaU006404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:43:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:43:21 splunk3 sendmail[6645]: n2UEhLL5006645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:44:21 splunk3 sendmail[6880]: n2UEiLqh006880: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:45:07 splunk3 sendmail[7082]: n2UEj7NG007082: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301445.n2UEj6sr016630@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:45:07 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35266
|
|
Mar 30 07:45:07 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:45:07 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:45:07 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:45:07 splunk3 spamd[870]: spamd: processing message <200903301445.n2UEj6sr016630@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:45:10 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1311 bytes.
|
|
Mar 30 07:45:10 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35266,mid=<200903301445.n2UEj6sr016630@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:45:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:45:10 splunk3 sendmail[7083]: n2UEj7NG007082: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:45:21 splunk3 sendmail[7130]: n2UEjL9t007130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:46:21 splunk3 sendmail[7364]: n2UEkLif007364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:46:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:47:21 splunk3 sendmail[7619]: n2UElLT1007619: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:48:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:48:21 splunk3 sendmail[7857]: n2UEmLet007857: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:49:21 splunk3 sendmail[8096]: n2UEnLF8008096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:50:07 splunk3 sendmail[8303]: n2UEo7pK008303: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301450.n2UEo7Sf017251@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:50:07 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35321
|
|
Mar 30 07:50:07 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:50:07 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:50:07 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:50:07 splunk3 spamd[870]: spamd: processing message <200903301450.n2UEo7Sf017251@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:50:09 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 07:50:09 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35321,mid=<200903301450.n2UEo7Sf017251@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:50:09 splunk3 sendmail[8304]: n2UEo7pK008303: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:50:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:50:21 splunk3 sendmail[8353]: n2UEoLqI008353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:51:21 splunk3 sendmail[8593]: n2UEpLUO008593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:51:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:52:21 splunk3 sendmail[8832]: n2UEqLRD008832: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:53:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:53:21 splunk3 sendmail[9077]: n2UErL2M009077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:54:21 splunk3 sendmail[9311]: n2UEsL94009311: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:55:08 splunk3 sendmail[9522]: n2UEt8ZH009522: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301455.n2UEt7EE017867@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 07:55:08 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35377
|
|
Mar 30 07:55:08 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 07:55:08 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 07:55:08 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 07:55:08 splunk3 spamd[870]: spamd: processing message <200903301455.n2UEt7EE017867@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 07:55:10 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 07:55:10 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35377,mid=<200903301455.n2UEt7EE017867@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 07:55:10 splunk3 sendmail[9523]: n2UEt8ZH009522: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 07:55:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 07:55:21 splunk3 sendmail[9577]: n2UEtLWO009577: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:55:31 splunk3 sendmail[3900]: n2UEWMRs003900: adsl-d12.84-47-100.t-com.sk [84.47.100.12] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:56:21 splunk3 sendmail[9811]: n2UEuLQn009811: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:56:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 07:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 07:57:21 splunk3 sendmail[10055]: n2UEvLn4010055: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:58:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 07:58:21 splunk3 sendmail[10294]: n2UEwLON010294: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 07:59:21 splunk3 sendmail[10531]: n2UExLT9010531: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:00:04 splunk3 sendmail[10769]: n2UF04pC010769: from=root, size=291, class=0, nrcpts=1, msgid=<200903301500.n2UF04pC010769@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 08:00:04 splunk3 sendmail[10773]: n2UF045b010773: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301500.n2UF04pC010769@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 08:00:04 splunk3 sendmail[10769]: n2UF04pC010769: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UF045b010773 Message accepted for delivery)
|
|
Mar 30 08:00:05 splunk3 sendmail[10792]: n2UF05gW010792: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903301500.n2UF05gW010792@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 08:00:05 splunk3 sendmail[10794]: n2UF05gW010792: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 08:00:05 splunk3 sendmail[10794]: n2UF05gW010792: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 08:00:05 splunk3 sendmail[10794]: n2UF05gW010792: n2UF05gW010794: postmaster notify: User unknown
|
|
Mar 30 08:00:05 splunk3 sendmail[10774]: n2UF045b010773: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:00:09 splunk3 sendmail[10823]: n2UF09hZ010823: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301500.n2UF08Mx018504@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:00:09 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35441
|
|
Mar 30 08:00:09 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:00:09 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 08:00:09 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 08:00:09 splunk3 sendmail[10824]: n2UF09hZ010823: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:00:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:00:14 splunk3 sendmail[10794]: n2UF05gW010794: to=root, delay=00:00:09, xdelay=00:00:09, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:00:21 splunk3 sendmail[10870]: n2UF0Lhh010870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:01:02 splunk3 sendmail[11031]: n2UF11GC011031: from=root, size=443, class=0, nrcpts=1, msgid=<200903301501.n2UF11GC011031@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 08:01:02 splunk3 sendmail[11051]: n2UF12j7011051: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301501.n2UF11GC011031@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 08:01:02 splunk3 sendmail[11031]: n2UF11GC011031: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UF12j7011051 Message accepted for delivery)
|
|
Mar 30 08:01:03 splunk3 sendmail[11052]: n2UF12j7011051: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:01:21 splunk3 sendmail[11121]: n2UF1LL5011121: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:01:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:02:21 splunk3 sendmail[11361]: n2UF2Lo2011361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:03:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:03:21 splunk3 sendmail[11603]: n2UF3LQu011603: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:04:21 splunk3 sendmail[11840]: n2UF4LId011840: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:05:09 splunk3 sendmail[12042]: n2UF59jx012042: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301505.n2UF59hS019196@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:05:09 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35498
|
|
Mar 30 08:05:09 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:05:09 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 08:05:09 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 08:05:09 splunk3 sendmail[12044]: n2UF59jx012042: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:05:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:05:21 splunk3 sendmail[12094]: n2UF5L3Q012094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:06:21 splunk3 sendmail[12326]: n2UF6LPa012326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:06:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:07:21 splunk3 sendmail[12570]: n2UF7Lch012570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:08:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:08:21 splunk3 sendmail[12813]: n2UF8LQg012813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:09:21 splunk3 sendmail[13054]: n2UF9LZV013054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:10:02 splunk3 sendmail[13356]: n2UFA2oB013356: from=root, size=292, class=0, nrcpts=1, msgid=<200903301510.n2UFA2oB013356@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 08:10:02 splunk3 sendmail[13366]: n2UFA29G013366: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301510.n2UFA2oB013356@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 08:10:02 splunk3 sendmail[13356]: n2UFA2oB013356: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UFA29G013366 Message accepted for delivery)
|
|
Mar 30 08:10:03 splunk3 sendmail[13367]: n2UFA29G013366: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:10:10 splunk3 sendmail[13405]: n2UFAAfa013405: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301510.n2UFA9sr019812@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:10:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35554
|
|
Mar 30 08:10:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:10:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:10:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:10:10 splunk3 spamd[870]: spamd: processing message <200903301510.n2UFA9sr019812@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:10:12 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 08:10:12 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35554,mid=<200903301510.n2UFA9sr019812@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 08:10:12 splunk3 sendmail[13406]: n2UFAAfa013405: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:10:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:10:21 splunk3 sendmail[13452]: n2UFALGQ013452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:11:21 splunk3 sendmail[13692]: n2UFBLOO013692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:11:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 08:12:21 splunk3 sendmail[13935]: n2UFCLIm013935: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:13:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:13:21 splunk3 sendmail[14175]: n2UFDLsa014175: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:14:21 splunk3 sendmail[14407]: n2UFELef014407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:15:10 splunk3 sendmail[14616]: n2UFFAk1014616: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301515.n2UFFAnM020609@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:15:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35611
|
|
Mar 30 08:15:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:15:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:15:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:15:10 splunk3 spamd[870]: spamd: processing message <200903301515.n2UFFAnM020609@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:15:12 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 08:15:12 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35611,mid=<200903301515.n2UFFAnM020609@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 08:15:12 splunk3 sendmail[14617]: n2UFFAk1014616: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:15:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:15:21 splunk3 sendmail[14661]: n2UFFLuw014661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:16:21 splunk3 sendmail[14894]: n2UFGLnj014894: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:16:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:17:21 splunk3 sendmail[15138]: n2UFHL7A015138: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:18:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:18:21 splunk3 sendmail[15377]: n2UFILFF015377: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:19:21 splunk3 sendmail[15618]: n2UFJL2Q015618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:20:10 splunk3 sendmail[15822]: n2UFKAuE015822: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301520.n2UFKAGj021238@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:20:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35666
|
|
Mar 30 08:20:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:20:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:20:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:20:10 splunk3 spamd[870]: spamd: processing message <200903301520.n2UFKAGj021238@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:20:12 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 08:20:12 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35666,mid=<200903301520.n2UFKAGj021238@virt2.int.splunk.com>,bayes=0.112522818062051,autolearn=no
|
|
Mar 30 08:20:12 splunk3 sendmail[15823]: n2UFKAuE015822: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:20:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:20:21 splunk3 sendmail[15871]: n2UFKLPU015871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:21:21 splunk3 sendmail[16124]: n2UFLLVa016124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:21:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:21:37 splunk3 sendmail[16154]: n2UFLYli016154: from=<ydr@botest.com>, size=1074, class=0, nrcpts=1, msgid=<01c9b132$11b00800$a26afdc9@ydr>, proto=ESMTP, daemon=MTA, relay=host162.201-253-106.telecom.net.ar [201.253.106.162] (may be forged)
|
|
Mar 30 08:21:37 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35681
|
|
Mar 30 08:21:37 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:21:37 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:21:37 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:21:37 splunk3 spamd[870]: spamd: processing message <01c9b132$11b00800$a26afdc9@ydr> for spamme:501
|
|
Mar 30 08:21:41 splunk3 spamd[870]: spamd: identified spam (23.7/5.0) for spamme:501 in 4.3 seconds, 1401 bytes.
|
|
Mar 30 08:21:41 splunk3 spamd[870]: spamd: result: Y 23 - BAYES_60,HELO_DYNAMIC_IPADDR,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_WS_SURBL scantime=4.3,size=1401,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35681,mid=<01c9b132$11b00800$a26afdc9@ydr>,bayes=0.769432347977002,autolearn=spam
|
|
Mar 30 08:21:41 splunk3 sendmail[16189]: n2UFLYli016154: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:04, mailer=local, pri=31329, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:21:41 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:22:21 splunk3 sendmail[16373]: n2UFML82016373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:23:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:23:21 splunk3 sendmail[16619]: n2UFNLFB016619: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:24:21 splunk3 sendmail[16853]: n2UFOLVR016853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:25:11 splunk3 sendmail[17044]: n2UFPBd2017044: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301525.n2UFPBap021851@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:25:11 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35723
|
|
Mar 30 08:25:11 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:25:11 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:25:11 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:25:11 splunk3 spamd[870]: spamd: processing message <200903301525.n2UFPBap021851@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:25:13 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 08:25:13 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35723,mid=<200903301525.n2UFPBap021851@virt2.int.splunk.com>,bayes=0.112515343902866,autolearn=no
|
|
Mar 30 08:25:13 splunk3 sendmail[17045]: n2UFPBd2017044: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:25:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:25:21 splunk3 sendmail[17109]: n2UFPLM8017109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:26:21 splunk3 sendmail[17345]: n2UFQL7M017345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:26:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 08:27:21 splunk3 sendmail[17588]: n2UFRL5w017588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:28:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:28:21 splunk3 sendmail[17825]: n2UFSLel017825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:29:21 splunk3 sendmail[18065]: n2UFTLrL018065: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:30:11 splunk3 sendmail[18275]: n2UFUBtG018275: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301530.n2UFUBJo022469@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:30:11 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35780
|
|
Mar 30 08:30:11 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:30:11 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:30:11 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:30:11 splunk3 spamd[870]: spamd: processing message <200903301530.n2UFUBJo022469@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:30:13 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 30 08:30:13 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35780,mid=<200903301530.n2UFUBJo022469@virt2.int.splunk.com>,bayes=0.112515343902866,autolearn=no
|
|
Mar 30 08:30:13 splunk3 sendmail[18276]: n2UFUBtG018275: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:30:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:30:21 splunk3 sendmail[18319]: n2UFUL6N018319: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:31:21 splunk3 sendmail[18556]: n2UFVLHu018556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:31:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:32:21 splunk3 sendmail[18797]: n2UFWL7o018797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:33:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:33:21 splunk3 sendmail[19039]: n2UFXLfs019039: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:34:21 splunk3 sendmail[19273]: n2UFYLD5019273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:35:12 splunk3 sendmail[19479]: n2UFZCZI019479: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301535.n2UFZCJD023211@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:35:12 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35835
|
|
Mar 30 08:35:12 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:35:12 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:35:12 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:35:12 splunk3 spamd[870]: spamd: processing message <200903301535.n2UFZCJD023211@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:35:14 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 08:35:14 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35835,mid=<200903301535.n2UFZCJD023211@virt2.int.splunk.com>,bayes=0.112515343902866,autolearn=no
|
|
Mar 30 08:35:14 splunk3 sendmail[19480]: n2UFZCZI019479: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:35:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:35:21 splunk3 sendmail[19525]: n2UFZLiC019525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:36:21 splunk3 sendmail[19760]: n2UFaLbT019760: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:36:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:37:21 splunk3 sendmail[20008]: n2UFbLs6020008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:38:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:38:21 splunk3 sendmail[20249]: n2UFcLcm020249: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:39:21 splunk3 sendmail[20489]: n2UFdLIA020489: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:39:33 splunk3 sendmail[20527]: n2UFdWPx020527: from=<3tOfQSRQKBrYckkchaWhanpo-jknalhuckkcha.YkiolWiiaolhqjgep.Yki@alerts.bounces.google.com>, size=2726, class=0, nrcpts=1, msgid=<0016e644c7668db2ef046657e333@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.186]
|
|
Mar 30 08:39:33 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35878
|
|
Mar 30 08:39:33 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:39:33 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:39:33 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:39:33 splunk3 spamd[870]: spamd: processing message <0016e644c7668db2ef046657e333@google.com> for spamme:501
|
|
Mar 30 08:39:35 splunk3 spamd[870]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.6 seconds, 3157 bytes.
|
|
Mar 30 08:39:35 splunk3 spamd[870]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.6,size=3157,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35878,mid=<0016e644c7668db2ef046657e333@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Mar 30 08:39:35 splunk3 sendmail[20528]: n2UFdWPx020527: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32938, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:39:36 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:40:15 splunk3 sendmail[20704]: n2UFeFZl020704: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301540.n2UFeC6A023877@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:40:15 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35892
|
|
Mar 30 08:40:15 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:40:15 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:40:15 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:40:15 splunk3 spamd[870]: spamd: processing message <200903301540.n2UFeC6A023877@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:40:17 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 08:40:17 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35892,mid=<200903301540.n2UFeC6A023877@virt2.int.splunk.com>,bayes=0.112547705300009,autolearn=no
|
|
Mar 30 08:40:17 splunk3 sendmail[20705]: n2UFeFZl020704: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:40:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:40:21 splunk3 sendmail[20752]: n2UFeLrl020752: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:41:01 splunk3 sendmail[6080]: n2UEf0vY006080: timeout waiting for input from 118-160-248-188.dynamic.hinet.net during server cmd read
|
|
Mar 30 08:41:01 splunk3 sendmail[6080]: n2UEf0vY006080: lost input channel from 118-160-248-188.dynamic.hinet.net [118.160.248.188] to MTA after rcpt
|
|
Mar 30 08:41:01 splunk3 sendmail[6080]: n2UEf0vY006080: from=<hitomi1218@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-160-248-188.dynamic.hinet.net [118.160.248.188]
|
|
Mar 30 08:41:21 splunk3 sendmail[20989]: n2UFfLXA020989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:41:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 08:42:21 splunk3 sendmail[21229]: n2UFgLas021229: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:43:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:43:21 splunk3 sendmail[21472]: n2UFhLuE021472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:44:21 splunk3 sendmail[21707]: n2UFiLFG021707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:45:15 splunk3 sendmail[21915]: n2UFjF2O021915: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301545.n2UFjFXa024496@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:45:15 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35948
|
|
Mar 30 08:45:15 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:45:15 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:45:15 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:45:15 splunk3 spamd[870]: spamd: processing message <200903301545.n2UFjFXa024496@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:45:17 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 08:45:17 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35948,mid=<200903301545.n2UFjFXa024496@virt2.int.splunk.com>,bayes=0.112547705300009,autolearn=no
|
|
Mar 30 08:45:17 splunk3 sendmail[21916]: n2UFjF2O021915: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:45:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:45:21 splunk3 sendmail[21958]: n2UFjLDg021958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:46:21 splunk3 sendmail[22194]: n2UFkL30022194: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:46:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:47:21 splunk3 sendmail[22438]: n2UFlLAR022438: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:48:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:48:21 splunk3 sendmail[22674]: n2UFmLEj022674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:49:21 splunk3 sendmail[22912]: n2UFnLKK022912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:50:16 splunk3 sendmail[23123]: n2UFoGnT023123: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301550.n2UFoFu8025107@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:50:16 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36004
|
|
Mar 30 08:50:16 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:50:16 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:50:16 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:50:16 splunk3 spamd[870]: spamd: processing message <200903301550.n2UFoFu8025107@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:50:18 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 08:50:18 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36004,mid=<200903301550.n2UFoFu8025107@virt2.int.splunk.com>,bayes=0.112547705300009,autolearn=no
|
|
Mar 30 08:50:18 splunk3 sendmail[23137]: n2UFoGnT023123: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:50:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:50:21 splunk3 sendmail[23167]: n2UFoLas023167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:51:21 splunk3 sendmail[23407]: n2UFpLRg023407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:51:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:52:21 splunk3 sendmail[23650]: n2UFqLfJ023650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:53:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:53:21 splunk3 sendmail[23897]: n2UFrLHf023897: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:54:21 splunk3 sendmail[24132]: n2UFsLL3024132: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:55:16 splunk3 sendmail[24360]: n2UFtGaZ024360: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301555.n2UFtGrC025715@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 08:55:16 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36060
|
|
Mar 30 08:55:16 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 08:55:16 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 08:55:16 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 08:55:16 splunk3 spamd[870]: spamd: processing message <200903301555.n2UFtGrC025715@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 08:55:18 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 08:55:18 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36060,mid=<200903301555.n2UFtGrC025715@virt2.int.splunk.com>,bayes=0.112547705300009,autolearn=no
|
|
Mar 30 08:55:18 splunk3 sendmail[24361]: n2UFtGaZ024360: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 08:55:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 08:55:21 splunk3 sendmail[24385]: n2UFtL9v024385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:56:21 splunk3 sendmail[24618]: n2UFuLOq024618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:56:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 08:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 08:57:21 splunk3 sendmail[24863]: n2UFvLUH024863: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:58:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 08:58:21 splunk3 sendmail[25104]: n2UFwLpp025104: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 08:59:21 splunk3 sendmail[25342]: n2UFxLbv025342: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:00:04 splunk3 sendmail[25563]: n2UG04gZ025563: from=root, size=291, class=0, nrcpts=1, msgid=<200903301600.n2UG04gZ025563@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 09:00:04 splunk3 sendmail[25567]: n2UG045a025567: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301600.n2UG04gZ025563@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 09:00:04 splunk3 sendmail[25563]: n2UG04gZ025563: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UG045a025567 Message accepted for delivery)
|
|
Mar 30 09:00:05 splunk3 sendmail[25568]: n2UG045a025567: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:00:10 splunk3 sendmail[25604]: n2UG0ALu025604: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903301600.n2UG0ALu025604@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 09:00:11 splunk3 sendmail[25606]: n2UG0ALu025604: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 09:00:11 splunk3 sendmail[25606]: n2UG0ALu025604: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 09:00:11 splunk3 sendmail[25606]: n2UG0ALu025604: n2UG0BLu025606: postmaster notify: User unknown
|
|
Mar 30 09:00:12 splunk3 sendmail[25606]: n2UG0BLu025606: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:00:17 splunk3 sendmail[25660]: n2UG0H1I025660: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301600.n2UG0G3D026348@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:00:17 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36124
|
|
Mar 30 09:00:17 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:00:17 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 09:00:17 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 09:00:17 splunk3 sendmail[25662]: n2UG0H1I025660: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:00:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:00:21 splunk3 sendmail[25683]: n2UG0Lxg025683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:01:15 splunk3 sendmail[25847]: n2UG115T025847: from=root, size=443, class=0, nrcpts=1, msgid=<200903301601.n2UG115T025847@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 09:01:15 splunk3 sendmail[25889]: n2UG1F0i025889: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301601.n2UG115T025847@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 09:01:15 splunk3 sendmail[25847]: n2UG115T025847: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UG1F0i025889 Message accepted for delivery)
|
|
Mar 30 09:01:16 splunk3 sendmail[25890]: n2UG1F0i025889: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:01:21 splunk3 sendmail[25936]: n2UG1LJT025936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:01:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:02:21 splunk3 sendmail[26175]: n2UG2LPg026175: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:03:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:03:21 splunk3 sendmail[26415]: n2UG3LMN026415: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:04:21 splunk3 sendmail[26647]: n2UG4Lx8026647: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:05:17 splunk3 sendmail[26879]: n2UG5Hii026879: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301605.n2UG5Hw5027035@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:05:17 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36181
|
|
Mar 30 09:05:17 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:05:17 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 09:05:17 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 09:05:17 splunk3 sendmail[26880]: n2UG5Hii026879: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:05:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:05:21 splunk3 sendmail[26901]: n2UG5LxH026901: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:06:21 splunk3 sendmail[27134]: n2UG6LtM027134: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:06:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:07:21 splunk3 sendmail[27381]: n2UG7Ljq027381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:08:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:08:21 splunk3 sendmail[27622]: n2UG8L1g027622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:09:21 splunk3 sendmail[27863]: n2UG9Lsu027863: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:10:02 splunk3 sendmail[28116]: n2UGA2DW028116: from=root, size=292, class=0, nrcpts=1, msgid=<200903301610.n2UGA2DW028116@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 09:10:02 splunk3 sendmail[28121]: n2UGA2Yj028121: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301610.n2UGA2DW028116@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 09:10:02 splunk3 sendmail[28116]: n2UGA2DW028116: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UGA2Yj028121 Message accepted for delivery)
|
|
Mar 30 09:10:03 splunk3 sendmail[28122]: n2UGA2Yj028121: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:10:18 splunk3 sendmail[28196]: n2UGAHw1028196: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301610.n2UGAHYF027644@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:10:18 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36237
|
|
Mar 30 09:10:18 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:10:18 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:10:18 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:10:18 splunk3 spamd[870]: spamd: processing message <200903301610.n2UGAHYF027644@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:10:20 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 09:10:20 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36237,mid=<200903301610.n2UGAHYF027644@virt2.int.splunk.com>,bayes=0.112547705300009,autolearn=no
|
|
Mar 30 09:10:20 splunk3 sendmail[28197]: n2UGAHw1028196: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:10:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:10:21 splunk3 sendmail[28221]: n2UGAL9g028221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:11:21 splunk3 sendmail[28458]: n2UGBLt5028458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:11:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 09:12:21 splunk3 sendmail[28702]: n2UGCLXM028702: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:13:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:13:22 splunk3 sendmail[28950]: n2UGDMka028950: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:14:22 splunk3 sendmail[29186]: n2UGEMMl029186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:15:20 splunk3 sendmail[29415]: n2UGFKEf029415: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301615.n2UGFIk8028442@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:15:20 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36294
|
|
Mar 30 09:15:20 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:15:20 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:15:20 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:15:20 splunk3 spamd[870]: spamd: processing message <200903301615.n2UGFIk8028442@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:15:22 splunk3 sendmail[29440]: n2UGFMo9029440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:15:22 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 09:15:22 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36294,mid=<200903301615.n2UGFIk8028442@virt2.int.splunk.com>,bayes=0.112547705300009,autolearn=no
|
|
Mar 30 09:15:22 splunk3 sendmail[29416]: n2UGFKEf029415: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:15:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:16:22 splunk3 sendmail[29674]: n2UGGMTg029674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:16:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:17:22 splunk3 sendmail[29917]: n2UGHMb8029917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:18:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:18:22 splunk3 sendmail[30152]: n2UGIM06030152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:19:22 splunk3 sendmail[30390]: n2UGJMsY030390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:20:21 splunk3 sendmail[30640]: n2UGKL7P030640: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301620.n2UGKLrB029082@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:20:21 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36350
|
|
Mar 30 09:20:21 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:20:21 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:20:21 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:20:21 splunk3 spamd[870]: spamd: processing message <200903301620.n2UGKLrB029082@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:20:22 splunk3 sendmail[30646]: n2UGKMbo030646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:20:23 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 09:20:23 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36350,mid=<200903301620.n2UGKLrB029082@virt2.int.splunk.com>,bayes=0.112547705300009,autolearn=no
|
|
Mar 30 09:20:23 splunk3 sendmail[30641]: n2UGKL7P030640: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:20:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:21:22 splunk3 sendmail[30885]: n2UGLMIN030885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:21:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:22:22 splunk3 sendmail[31124]: n2UGMMD1031124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:23:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:23:22 splunk3 sendmail[31367]: n2UGNMxk031367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:24:22 splunk3 sendmail[31599]: n2UGOMJg031599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:25:21 splunk3 sendmail[31846]: n2UGPLkM031846: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301625.n2UGPLAl029683@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:25:21 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36405
|
|
Mar 30 09:25:21 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:25:21 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:25:21 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:25:21 splunk3 spamd[870]: spamd: processing message <200903301625.n2UGPLAl029683@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:25:22 splunk3 sendmail[31852]: n2UGPMP3031852: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:25:23 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 09:25:23 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36405,mid=<200903301625.n2UGPLAl029683@virt2.int.splunk.com>,bayes=0.112547705300009,autolearn=no
|
|
Mar 30 09:25:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:25:23 splunk3 sendmail[31847]: n2UGPLkM031846: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:25:52 splunk3 sendmail[31796]: n2UGPDwa031796: from=<tonyx@tdnam.com>, size=5982, class=0, nrcpts=1, msgid=<b5d6019dbcef$0b26df82$8ee81662@tdnam.com>, proto=ESMTP, daemon=MTA, relay=189-74-125-45.mganm703.e.brasiltelecom.net.br [189.74.125.45] (may be forged)
|
|
Mar 30 09:25:52 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36410
|
|
Mar 30 09:25:52 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:25:52 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:25:52 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:25:52 splunk3 spamd[870]: spamd: processing message <b5d6019dbcef$0b26df82$8ee81662@tdnam.com> for spamme:501
|
|
Mar 30 09:25:55 splunk3 spamd[870]: spamd: identified spam (26.4/5.0) for spamme:501 in 3.5 seconds, 6341 bytes.
|
|
Mar 30 09:25:55 splunk3 spamd[870]: spamd: result: Y 26 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_BOGUSMX,DNS_FROM_RFC_POST,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64 scantime=3.5,size=6341,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36410,mid=<b5d6019dbcef$0b26df82$8ee81662@tdnam.com>,bayes=1,autolearn=spam
|
|
Mar 30 09:25:55 splunk3 sendmail[31971]: n2UGPDwa031796: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:03, mailer=local, pri=36258, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:25:55 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:26:22 splunk3 sendmail[32092]: n2UGQMOI032092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:26:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 09:27:22 splunk3 sendmail[32340]: n2UGRMsc032340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:28:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:28:22 splunk3 sendmail[32581]: n2UGSMOB032581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:29:22 splunk3 sendmail[352]: n2UGTMss000352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:30:22 splunk3 sendmail[602]: n2UGUMdl000602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:30:22 splunk3 sendmail[603]: n2UGUM5Q000603: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301630.n2UGULd7030307@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:30:22 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36463
|
|
Mar 30 09:30:22 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:30:22 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:30:22 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:30:22 splunk3 spamd[870]: spamd: processing message <200903301630.n2UGULd7030307@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:30:24 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 09:30:24 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36463,mid=<200903301630.n2UGULd7030307@virt2.int.splunk.com>,bayes=0.11254322254264,autolearn=no
|
|
Mar 30 09:30:24 splunk3 sendmail[604]: n2UGUM5Q000603: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:30:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:31:22 splunk3 sendmail[845]: n2UGVMek000845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:31:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:32:22 splunk3 sendmail[1085]: n2UGWMRL001085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:33:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:33:22 splunk3 sendmail[1330]: n2UGXM0M001330: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:34:22 splunk3 sendmail[1566]: n2UGYMFV001566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:35:22 splunk3 sendmail[1814]: n2UGZMPM001814: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:35:22 splunk3 sendmail[1815]: n2UGZMA4001815: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301635.n2UGZM7c031052@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:35:22 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36518
|
|
Mar 30 09:35:22 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:35:22 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:35:22 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:35:22 splunk3 spamd[870]: spamd: processing message <200903301635.n2UGZM7c031052@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:35:24 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 30 09:35:24 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36518,mid=<200903301635.n2UGZM7c031052@virt2.int.splunk.com>,bayes=0.11254322254264,autolearn=no
|
|
Mar 30 09:35:24 splunk3 sendmail[1816]: n2UGZMA4001815: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:35:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:36:22 splunk3 sendmail[2055]: n2UGaMAa002055: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:36:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:37:22 splunk3 sendmail[2299]: n2UGbMia002299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:38:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:38:22 splunk3 sendmail[2539]: n2UGcMgW002539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:39:22 splunk3 sendmail[2790]: n2UGdMJF002790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:40:22 splunk3 sendmail[3053]: n2UGeMWg003053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:40:23 splunk3 sendmail[3054]: n2UGeNmw003054: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301640.n2UGeMQh031687@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:40:23 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36574
|
|
Mar 30 09:40:23 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:40:23 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:40:23 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:40:23 splunk3 spamd[870]: spamd: processing message <200903301640.n2UGeMQh031687@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:40:25 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 30 09:40:25 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36574,mid=<200903301640.n2UGeMQh031687@virt2.int.splunk.com>,bayes=0.11254322254264,autolearn=no
|
|
Mar 30 09:40:25 splunk3 sendmail[3055]: n2UGeNmw003054: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:40:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:40:33 splunk3 sendmail[3034]: n2UGeLj9003034: from=<spamnetalerte@netalerte.com>, size=10616, class=0, nrcpts=1, msgid=<20090330114030.3072.qmail@basalay>, proto=SMTP, daemon=MTA, relay=nat-70-60.kirovnet.ru [92.39.70.60]
|
|
Mar 30 09:40:33 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36576
|
|
Mar 30 09:40:33 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:40:33 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:40:33 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:40:33 splunk3 spamd[870]: spamd: processing message <20090330114030.3072.qmail@basalay> for spamme:501
|
|
Mar 30 09:40:37 splunk3 spamd[870]: spamd: identified spam (19.4/5.0) for spamme:501 in 4.9 seconds, 10914 bytes.
|
|
Mar 30 09:40:37 splunk3 spamd[870]: spamd: result: Y 19 - AWL,BAYES_80,HTML_90_100,HTML_MESSAGE,MIME_HTML_ONLY,RCVD_IN_XBL,URIBL_JP_SURBL scantime=4.9,size=10914,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36576,mid=<20090330114030.3072.qmail@basalay>,bayes=0.812016775270219,autolearn=no
|
|
Mar 30 09:40:37 splunk3 sendmail[3098]: n2UGeLj9003034: to=<spamme@splunkit.com>, delay=00:00:08, xdelay=00:00:04, mailer=local, pri=40850, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:40:37 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:41:22 splunk3 sendmail[3305]: n2UGfMMH003305: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:41:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 09:42:22 splunk3 sendmail[3556]: n2UGgMIe003556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:43:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:43:22 splunk3 sendmail[3820]: n2UGhMTO003820: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:44:22 splunk3 sendmail[4066]: n2UGiMFZ004066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:45:22 splunk3 sendmail[4333]: n2UGjMgM004333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:45:23 splunk3 sendmail[4336]: n2UGjNlm004336: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301645.n2UGjNiF032298@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:45:23 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36631
|
|
Mar 30 09:45:23 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:45:23 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:45:23 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:45:23 splunk3 spamd[870]: spamd: processing message <200903301645.n2UGjNiF032298@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:45:25 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 30 09:45:25 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36631,mid=<200903301645.n2UGjNiF032298@virt2.int.splunk.com>,bayes=0.11254322254264,autolearn=no
|
|
Mar 30 09:45:25 splunk3 sendmail[4337]: n2UGjNlm004336: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:45:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:46:22 splunk3 sendmail[4572]: n2UGkMES004572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:46:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:47:22 splunk3 sendmail[4819]: n2UGlMg8004819: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:48:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:48:22 splunk3 sendmail[5069]: n2UGmMrM005069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:49:22 splunk3 sendmail[5346]: n2UGnMD4005346: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:50:22 splunk3 sendmail[5599]: n2UGoMEN005599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:50:24 splunk3 sendmail[5602]: n2UGoOIP005602: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903301650.n2UGoOmb000445@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:50:24 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36687
|
|
Mar 30 09:50:24 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:50:24 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:50:24 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:50:24 splunk3 spamd[870]: spamd: processing message <200903301650.n2UGoOmb000445@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:50:26 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Mar 30 09:50:26 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36687,mid=<200903301650.n2UGoOmb000445@virt2.int.splunk.com>,bayes=0.0665389852586315,autolearn=no
|
|
Mar 30 09:50:26 splunk3 sendmail[5603]: n2UGoOIP005602: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:50:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:51:22 splunk3 sendmail[5844]: n2UGpMNE005844: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:51:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:52:22 splunk3 sendmail[6082]: n2UGqM91006082: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:53:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:53:22 splunk3 sendmail[6325]: n2UGrMSS006325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:54:22 splunk3 sendmail[6561]: n2UGsMI8006561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:55:22 splunk3 sendmail[6807]: n2UGtMYe006807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:55:24 splunk3 sendmail[6808]: n2UGtOXs006808: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301655.n2UGtODj001051@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 09:55:24 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36742
|
|
Mar 30 09:55:24 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 09:55:24 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 09:55:24 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 09:55:24 splunk3 spamd[870]: spamd: processing message <200903301655.n2UGtODj001051@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 09:55:26 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 30 09:55:26 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36742,mid=<200903301655.n2UGtODj001051@virt2.int.splunk.com>,bayes=0.169503928279343,autolearn=no
|
|
Mar 30 09:55:26 splunk3 sendmail[6809]: n2UGtOXs006808: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 09:55:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 09:56:22 splunk3 sendmail[7049]: n2UGuMil007049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:56:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 09:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 09:57:22 splunk3 sendmail[7295]: n2UGvM22007295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:58:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 09:58:22 splunk3 sendmail[7536]: n2UGwMK9007536: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 09:59:22 splunk3 sendmail[7778]: n2UGxMkA007778: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:00:04 splunk3 sendmail[8000]: n2UH04oN008000: from=root, size=291, class=0, nrcpts=1, msgid=<200903301700.n2UH04oN008000@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 10:00:04 splunk3 sendmail[8004]: n2UH04RO008004: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301700.n2UH04oN008000@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 10:00:04 splunk3 sendmail[8000]: n2UH04oN008000: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UH04RO008004 Message accepted for delivery)
|
|
Mar 30 10:00:05 splunk3 sendmail[8005]: n2UH04RO008004: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:00:17 splunk3 sendmail[8079]: n2UH0HG5008079: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903301700.n2UH0HG5008079@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 10:00:17 splunk3 sendmail[8081]: n2UH0HG5008079: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 10:00:17 splunk3 sendmail[8081]: n2UH0HG5008079: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 30 10:00:17 splunk3 sendmail[8081]: n2UH0HG5008079: n2UH0HG5008081: postmaster notify: User unknown
|
|
Mar 30 10:00:18 splunk3 sendmail[8081]: n2UH0HG5008081: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:00:22 splunk3 sendmail[8112]: n2UH0Mul008112: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:00:25 splunk3 sendmail[8132]: n2UH0PC1008132: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301700.n2UH0PsG001726@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:00:25 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36807
|
|
Mar 30 10:00:25 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:00:25 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 10:00:25 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 10:00:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:00:25 splunk3 sendmail[8133]: n2UH0PC1008132: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:01:15 splunk3 sendmail[8280]: n2UH11Jn008280: from=root, size=443, class=0, nrcpts=1, msgid=<200903301701.n2UH11Jn008280@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 10:01:15 splunk3 sendmail[8325]: n2UH1Fwc008325: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301701.n2UH11Jn008280@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 10:01:15 splunk3 sendmail[8280]: n2UH11Jn008280: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UH1Fwc008325 Message accepted for delivery)
|
|
Mar 30 10:01:16 splunk3 sendmail[8326]: n2UH1Fwc008325: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:01:22 splunk3 sendmail[8370]: n2UH1M1s008370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:01:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:02:22 splunk3 sendmail[8611]: n2UH2MvA008611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:03:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:03:22 splunk3 sendmail[8857]: n2UH3MHC008857: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:04:22 splunk3 sendmail[9091]: n2UH4Moq009091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:05:22 splunk3 sendmail[9338]: n2UH5M5K009338: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:05:26 splunk3 sendmail[9357]: n2UH5PLi009357: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301705.n2UH5PG5002419@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:05:26 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36864
|
|
Mar 30 10:05:26 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:05:26 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 10:05:26 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 10:05:26 splunk3 sendmail[9358]: n2UH5PLi009357: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:05:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:06:22 splunk3 sendmail[9588]: n2UH6M69009588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:06:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:06:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:07:22 splunk3 sendmail[9834]: n2UH7M6l009834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:08:22 splunk3 sendmail[10075]: n2UH8M47010075: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:09:22 splunk3 sendmail[10317]: n2UH9Mrv010317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:10:02 splunk3 sendmail[10570]: n2UHA2Pf010570: from=root, size=292, class=0, nrcpts=1, msgid=<200903301710.n2UHA2Pf010570@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 10:10:02 splunk3 sendmail[10575]: n2UHA2LF010575: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301710.n2UHA2Pf010570@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 10:10:02 splunk3 sendmail[10570]: n2UHA2Pf010570: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UHA2LF010575 Message accepted for delivery)
|
|
Mar 30 10:10:03 splunk3 sendmail[10576]: n2UHA2LF010575: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:10:22 splunk3 sendmail[10672]: n2UHAMW7010672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:10:26 splunk3 sendmail[10689]: n2UHAQlJ010689: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301710.n2UHAQjS003039@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:10:26 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36928
|
|
Mar 30 10:10:26 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:10:26 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:10:26 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:10:26 splunk3 spamd[870]: spamd: processing message <200903301710.n2UHAQjS003039@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:10:28 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 30 10:10:28 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36928,mid=<200903301710.n2UHAQjS003039@virt2.int.splunk.com>,bayes=0.169503928279343,autolearn=no
|
|
Mar 30 10:10:28 splunk3 sendmail[10690]: n2UHAQlJ010689: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:10:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:11:22 splunk3 sendmail[10920]: n2UHBMKC010920: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:11:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:11:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 10:12:22 splunk3 sendmail[11161]: n2UHCMkU011161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:13:22 splunk3 sendmail[11396]: n2UHDMpa011396: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:14:22 splunk3 sendmail[11629]: n2UHEMTI011629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:15:22 splunk3 sendmail[11876]: n2UHFMfN011876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:15:26 splunk3 sendmail[11894]: n2UHFQK4011894: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301715.n2UHFQKR003829@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:15:26 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36985
|
|
Mar 30 10:15:26 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:15:26 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:15:26 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:15:26 splunk3 spamd[870]: spamd: processing message <200903301715.n2UHFQKR003829@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:15:28 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 30 10:15:28 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36985,mid=<200903301715.n2UHFQKR003829@virt2.int.splunk.com>,bayes=0.169503928279343,autolearn=no
|
|
Mar 30 10:15:28 splunk3 sendmail[11895]: n2UHFQK4011894: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:16:22 splunk3 sendmail[12121]: n2UHGMlR012121: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:16:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:16:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:17:22 splunk3 sendmail[12366]: n2UHHMG4012366: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:18:22 splunk3 sendmail[12602]: n2UHIMrx012602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:19:22 splunk3 sendmail[12840]: n2UHJMI6012840: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:20:22 splunk3 sendmail[13088]: n2UHKM3w013088: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:20:27 splunk3 sendmail[13108]: n2UHKRE8013108: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301720.n2UHKRAw004466@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:20:27 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37040
|
|
Mar 30 10:20:27 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:20:27 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:20:27 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:20:27 splunk3 spamd[870]: spamd: processing message <200903301720.n2UHKRAw004466@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:20:29 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 30 10:20:29 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37040,mid=<200903301720.n2UHKRAw004466@virt2.int.splunk.com>,bayes=0.169503928279343,autolearn=no
|
|
Mar 30 10:20:29 splunk3 sendmail[13111]: n2UHKRE8013108: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:20:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:21:22 splunk3 sendmail[13377]: n2UHLM4G013377: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:21:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:21:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:22:22 splunk3 sendmail[13617]: n2UHMMVM013617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:23:22 splunk3 sendmail[13860]: n2UHNMUD013860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:24:22 splunk3 sendmail[14097]: n2UHOMkt014097: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:25:22 splunk3 sendmail[14345]: n2UHPMTF014345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:25:27 splunk3 sendmail[14364]: n2UHPREh014364: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301725.n2UHPRE9005098@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:25:27 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37096
|
|
Mar 30 10:25:27 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:25:27 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:25:27 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:25:27 splunk3 spamd[870]: spamd: processing message <200903301725.n2UHPRE9005098@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:25:29 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Mar 30 10:25:29 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37096,mid=<200903301725.n2UHPRE9005098@virt2.int.splunk.com>,bayes=0.169503928279343,autolearn=no
|
|
Mar 30 10:25:29 splunk3 sendmail[14365]: n2UHPREh014364: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:26:22 splunk3 sendmail[14588]: n2UHQMmo014588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:26:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:26:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 10:27:22 splunk3 sendmail[14831]: n2UHRMCI014831: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:28:22 splunk3 sendmail[15063]: n2UHSMHl015063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:29:22 splunk3 sendmail[15300]: n2UHTMPY015300: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:30:22 splunk3 sendmail[15550]: n2UHUM3U015550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:30:28 splunk3 sendmail[15568]: n2UHUSdW015568: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301730.n2UHUSKY005703@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:30:28 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37151
|
|
Mar 30 10:30:28 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:30:28 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:30:28 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:30:28 splunk3 spamd[870]: spamd: processing message <200903301730.n2UHUSKY005703@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:30:30 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 30 10:30:30 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37151,mid=<200903301730.n2UHUSKY005703@virt2.int.splunk.com>,bayes=0.169503928279343,autolearn=no
|
|
Mar 30 10:30:30 splunk3 sendmail[15569]: n2UHUSdW015568: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:31:08 splunk3 sendmail[15730]: n2UHV6Vh015730: from=<Johny-4954446@UNIVERSITYMAZDAURBANA.dealerspace.com>, size=1923, class=0, nrcpts=1, msgid=<200903301731.n2UHV6Vh015730@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=[207.19.1.22]
|
|
Mar 30 10:31:08 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37157
|
|
Mar 30 10:31:08 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:31:08 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:31:08 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:31:08 splunk3 spamd[870]: spamd: processing message <200903301731.n2UHV6Vh015730@splunk3.splunkit.com> for spamme:501
|
|
Mar 30 10:31:15 splunk3 spamd[870]: spamd: identified spam (23.4/5.0) for spamme:501 in 6.4 seconds, 2350 bytes.
|
|
Mar 30 10:31:15 splunk3 spamd[870]: spamd: result: Y 23 - BAYES_95,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_WS_SURBL scantime=6.4,size=2350,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37157,mid=<200903301731.n2UHV6Vh015730@splunk3.splunkit.com>,bayes=0.950888751328689,autolearn=spam
|
|
Mar 30 10:31:15 splunk3 sendmail[15733]: n2UHV6Vh015730: to=<spamme@splunkit.com>, delay=00:00:08, xdelay=00:00:07, mailer=local, pri=32209, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:31:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:31:22 splunk3 sendmail[15807]: n2UHVMAH015807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:31:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:31:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:32:22 splunk3 sendmail[16046]: n2UHWMhd016046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:33:22 splunk3 sendmail[16285]: n2UHXMBW016285: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:34:22 splunk3 sendmail[16518]: n2UHYMHO016518: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:35:22 splunk3 sendmail[16764]: n2UHZMFk016764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:35:28 splunk3 sendmail[16787]: n2UHZSwp016787: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301735.n2UHZSJn006475@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:35:28 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37208
|
|
Mar 30 10:35:28 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:35:28 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:35:28 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:35:28 splunk3 spamd[870]: spamd: processing message <200903301735.n2UHZSJn006475@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:35:30 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 10:35:30 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37208,mid=<200903301735.n2UHZSJn006475@virt2.int.splunk.com>,bayes=0.169495069045856,autolearn=no
|
|
Mar 30 10:35:30 splunk3 sendmail[16788]: n2UHZSwp016787: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:36:22 splunk3 sendmail[17012]: n2UHaMNS017012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:36:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:36:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:37:22 splunk3 sendmail[17255]: n2UHbMm9017255: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:38:22 splunk3 sendmail[17495]: n2UHcMoR017495: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:39:22 splunk3 sendmail[17736]: n2UHdMql017736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:40:22 splunk3 sendmail[17985]: n2UHeMTW017985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:40:29 splunk3 sendmail[18006]: n2UHeTuO018006: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301740.n2UHeThT007082@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:40:29 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37263
|
|
Mar 30 10:40:29 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:40:29 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:40:29 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:40:29 splunk3 spamd[870]: spamd: processing message <200903301740.n2UHeThT007082@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:40:31 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 30 10:40:31 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37263,mid=<200903301740.n2UHeThT007082@virt2.int.splunk.com>,bayes=0.169495069045856,autolearn=no
|
|
Mar 30 10:40:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:40:32 splunk3 sendmail[18007]: n2UHeTuO018006: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:41:22 splunk3 sendmail[18231]: n2UHfMQ6018231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:41:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:41:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 10:42:22 splunk3 sendmail[18472]: n2UHgMVS018472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:43:22 splunk3 sendmail[18712]: n2UHhMoN018712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:44:22 splunk3 sendmail[18945]: n2UHiMiC018945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:45:22 splunk3 sendmail[19193]: n2UHjMZQ019193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:45:29 splunk3 sendmail[19211]: n2UHjToN019211: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301745.n2UHjTFR007715@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:45:29 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37320
|
|
Mar 30 10:45:29 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:45:30 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:45:30 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:45:30 splunk3 spamd[870]: spamd: processing message <200903301745.n2UHjTFR007715@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:45:32 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 30 10:45:32 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37320,mid=<200903301745.n2UHjTFR007715@virt2.int.splunk.com>,bayes=0.169495069045856,autolearn=no
|
|
Mar 30 10:45:32 splunk3 sendmail[19212]: n2UHjToN019211: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:45:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:46:22 splunk3 sendmail[19437]: n2UHkMYK019437: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:46:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:46:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:47:22 splunk3 sendmail[19677]: n2UHlMqf019677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:48:22 splunk3 sendmail[19915]: n2UHmM6S019915: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:49:22 splunk3 sendmail[20152]: n2UHnMLG020152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:50:00 splunk3 sendmail[20306]: n2UHo07m020306: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301750.n2UHo0t3008230@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:50:00 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37364
|
|
Mar 30 10:50:00 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:50:00 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:50:00 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:50:00 splunk3 spamd[870]: spamd: processing message <200903301750.n2UHo0t3008230@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:50:02 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 30 10:50:02 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37364,mid=<200903301750.n2UHo0t3008230@virt2.int.splunk.com>,bayes=0.169495069045856,autolearn=no
|
|
Mar 30 10:50:02 splunk3 sendmail[20307]: n2UHo07m020306: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:50:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:50:22 splunk3 sendmail[20409]: n2UHoM74020409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:51:22 splunk3 sendmail[20652]: n2UHpMtw020652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:51:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:51:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:52:22 splunk3 sendmail[20893]: n2UHqMK6020893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:53:22 splunk3 sendmail[21135]: n2UHrMOp021135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:54:22 splunk3 sendmail[21368]: n2UHsMLW021368: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:55:01 splunk3 sendmail[21524]: n2UHt09S021524: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301755.n2UHt00E008838@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 10:55:01 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37419
|
|
Mar 30 10:55:01 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 10:55:01 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 10:55:01 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 10:55:01 splunk3 spamd[870]: spamd: processing message <200903301755.n2UHt00E008838@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 10:55:03 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 30 10:55:03 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37419,mid=<200903301755.n2UHt00E008838@virt2.int.splunk.com>,bayes=0.169495069045856,autolearn=no
|
|
Mar 30 10:55:03 splunk3 sendmail[21525]: n2UHt09S021524: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 10:55:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 10:55:04 splunk3 sendmail[21532]: n2UHt44N021532: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=219-85-42-125-adsl-TPE.dynamic.so-net.net.tw [219.85.42.125] (may be forged), reject=550 5.7.1 <bibiorm@gmail.com>... Relaying denied. IP name possibly forged [219.85.42.125]
|
|
Mar 30 10:55:22 splunk3 sendmail[21622]: n2UHtMd8021622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:56:22 splunk3 sendmail[21862]: n2UHuM5b021862: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:56:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 10:56:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 10:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 10:57:22 splunk3 sendmail[22109]: n2UHvMXs022109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:58:22 splunk3 sendmail[22345]: n2UHwMoe022345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 10:59:22 splunk3 sendmail[22583]: n2UHxM8s022583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:00:02 splunk3 sendmail[22789]: n2UI02nf022789: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903301800.n2UI01cA009456@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:00:02 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37476
|
|
Mar 30 11:00:02 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:00:02 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 11:00:02 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 11:00:02 splunk3 sendmail[22790]: n2UI02nf022789: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:00:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:00:04 splunk3 sendmail[22808]: n2UI042k022808: from=root, size=291, class=0, nrcpts=1, msgid=<200903301800.n2UI042k022808@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 11:00:04 splunk3 sendmail[22812]: n2UI04ZO022812: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301800.n2UI042k022808@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 11:00:04 splunk3 sendmail[22808]: n2UI042k022808: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UI04ZO022812 Message accepted for delivery)
|
|
Mar 30 11:00:05 splunk3 sendmail[22817]: n2UI04ZO022812: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:00:22 splunk3 sendmail[22897]: n2UI0MWM022897: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:00:23 splunk3 sendmail[22908]: n2UI0Nbo022908: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903301800.n2UI0Nbo022908@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 11:00:23 splunk3 sendmail[22910]: n2UI0Nbo022908: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 11:00:23 splunk3 sendmail[22910]: n2UI0Nbo022908: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 11:00:23 splunk3 sendmail[22910]: n2UI0Nbo022908: n2UI0Nbo022910: postmaster notify: User unknown
|
|
Mar 30 11:00:24 splunk3 sendmail[22910]: n2UI0Nbo022910: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:01:04 splunk3 sendmail[23081]: n2UI11d5023081: from=root, size=443, class=0, nrcpts=1, msgid=<200903301801.n2UI11d5023081@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 11:01:04 splunk3 sendmail[23101]: n2UI14Bh023101: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301801.n2UI11d5023081@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 11:01:04 splunk3 sendmail[23081]: n2UI11d5023081: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UI14Bh023101 Message accepted for delivery)
|
|
Mar 30 11:01:06 splunk3 sendmail[23102]: n2UI14Bh023101: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:01:22 splunk3 sendmail[23170]: n2UI1MP9023170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:01:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:01:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:02:22 splunk3 sendmail[23408]: n2UI2MrE023408: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:03:22 splunk3 sendmail[23648]: n2UI3M87023648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:04:22 splunk3 sendmail[23882]: n2UI4Mb7023882: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:05:02 splunk3 sendmail[24041]: n2UI52AZ024041: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301805.n2UI52Er010202@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:05:02 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37540
|
|
Mar 30 11:05:02 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:05:02 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 11:05:02 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 11:05:02 splunk3 sendmail[24042]: n2UI52AZ024041: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:05:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:05:22 splunk3 sendmail[24124]: n2UI5MwU024124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:06:22 splunk3 sendmail[24374]: n2UI6MLJ024374: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:06:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:06:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:07:22 splunk3 sendmail[24617]: n2UI7MVr024617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:08:22 splunk3 sendmail[24854]: n2UI8MYj024854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:09:22 splunk3 sendmail[25094]: n2UI9MfW025094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:10:02 splunk3 sendmail[25349]: n2UIA21L025349: from=root, size=292, class=0, nrcpts=1, msgid=<200903301810.n2UIA21L025349@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 11:10:02 splunk3 sendmail[25354]: n2UIA2OY025354: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301810.n2UIA21L025349@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 11:10:02 splunk3 sendmail[25349]: n2UIA21L025349: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UIA2OY025354 Message accepted for delivery)
|
|
Mar 30 11:10:03 splunk3 sendmail[25360]: n2UIA3R6025360: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301810.n2UIA2JR010818@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:10:03 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37597
|
|
Mar 30 11:10:03 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:10:03 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:10:03 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:10:03 splunk3 spamd[870]: spamd: processing message <200903301810.n2UIA2JR010818@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:10:03 splunk3 sendmail[25355]: n2UIA2OY025354: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:10:06 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1311 bytes.
|
|
Mar 30 11:10:06 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37597,mid=<200903301810.n2UIA2JR010818@virt2.int.splunk.com>,bayes=0.112535748545943,autolearn=no
|
|
Mar 30 11:10:06 splunk3 sendmail[25361]: n2UIA3R6025360: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:10:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:10:22 splunk3 sendmail[25444]: n2UIAM2m025444: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:11:22 splunk3 sendmail[25698]: n2UIBMIF025698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:11:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:11:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 11:12:22 splunk3 sendmail[25938]: n2UICMYA025938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:13:22 splunk3 sendmail[26178]: n2UIDMic026178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:14:22 splunk3 sendmail[26412]: n2UIEMOD026412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:15:03 splunk3 sendmail[26574]: n2UIF3ir026574: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301815.n2UIF3UC011615@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:15:03 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37654
|
|
Mar 30 11:15:03 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:15:03 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:15:03 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:15:03 splunk3 spamd[870]: spamd: processing message <200903301815.n2UIF3UC011615@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:15:05 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1311 bytes.
|
|
Mar 30 11:15:05 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37654,mid=<200903301815.n2UIF3UC011615@virt2.int.splunk.com>,bayes=0.112535748545943,autolearn=no
|
|
Mar 30 11:15:05 splunk3 sendmail[26575]: n2UIF3ir026574: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:15:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:15:22 splunk3 sendmail[26655]: n2UIFMq2026655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:16:22 splunk3 sendmail[26904]: n2UIGMXg026904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:16:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:16:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:17:22 splunk3 sendmail[27144]: n2UIHMZ9027144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:18:23 splunk3 sendmail[27381]: n2UIINVA027381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:19:23 splunk3 sendmail[27621]: n2UIJNdJ027621: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:20:04 splunk3 sendmail[27785]: n2UIK393027785: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301820.n2UIK3mT012244@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:20:04 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37709
|
|
Mar 30 11:20:04 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:20:04 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:20:04 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:20:04 splunk3 spamd[870]: spamd: processing message <200903301820.n2UIK3mT012244@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:20:06 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 11:20:06 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37709,mid=<200903301820.n2UIK3mT012244@virt2.int.splunk.com>,bayes=0.112535748545943,autolearn=no
|
|
Mar 30 11:20:06 splunk3 sendmail[27786]: n2UIK393027785: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:20:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:20:23 splunk3 sendmail[27869]: n2UIKN7h027869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:21:23 splunk3 sendmail[28122]: n2UILNY5028122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:21:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:21:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:22:23 splunk3 sendmail[28358]: n2UIMNwi028358: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:23:23 splunk3 sendmail[28600]: n2UINNh7028600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:24:23 splunk3 sendmail[28836]: n2UION6S028836: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:25:04 splunk3 sendmail[29013]: n2UIP4MQ029013: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301825.n2UIP41R012849@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:25:04 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37765
|
|
Mar 30 11:25:04 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:25:04 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:25:04 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:25:04 splunk3 spamd[870]: spamd: processing message <200903301825.n2UIP41R012849@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:25:06 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 11:25:06 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37765,mid=<200903301825.n2UIP41R012849@virt2.int.splunk.com>,bayes=0.112535748545943,autolearn=no
|
|
Mar 30 11:25:06 splunk3 sendmail[29014]: n2UIP4MQ029013: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:25:23 splunk3 sendmail[29082]: n2UIPNso029082: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:26:23 splunk3 sendmail[29331]: n2UIQNHT029331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:26:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:26:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 11:27:23 splunk3 sendmail[29578]: n2UIRN1X029578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:28:23 splunk3 sendmail[29812]: n2UISN2w029812: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:29:23 splunk3 sendmail[30048]: n2UITNsb030048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:30:05 splunk3 sendmail[30228]: n2UIU5w0030228: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301830.n2UIU59G013469@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:30:05 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37821
|
|
Mar 30 11:30:05 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:30:05 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:30:05 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:30:05 splunk3 spamd[870]: spamd: processing message <200903301830.n2UIU59G013469@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:30:07 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 11:30:07 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37821,mid=<200903301830.n2UIU59G013469@virt2.int.splunk.com>,bayes=0.112535748545943,autolearn=no
|
|
Mar 30 11:30:07 splunk3 sendmail[30229]: n2UIU5w0030228: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:30:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:30:23 splunk3 sendmail[30295]: n2UIUNlK030295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:31:23 splunk3 sendmail[30548]: n2UIVN1m030548: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:31:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:31:29 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:32:23 splunk3 sendmail[30787]: n2UIWNTr030787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:32:53 splunk3 sendmail[30809]: n2UIWSM6030809: from=<stacyj@justdropped.com>, size=5748, class=0, nrcpts=1, msgid=<7038019dc2ad$68b17d8a$6e6a9002@justdropped.com>, proto=ESMTP, daemon=MTA, relay=public26183.xdsl.centertel.pl [79.163.102.71]
|
|
Mar 30 11:32:53 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37856
|
|
Mar 30 11:32:53 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:32:53 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:32:53 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:32:53 splunk3 spamd[870]: spamd: processing message <7038019dc2ad$68b17d8a$6e6a9002@justdropped.com> for spamme:501
|
|
Mar 30 11:32:55 splunk3 spamd[870]: spamd: identified spam (32.4/5.0) for spamme:501 in 1.9 seconds, 6073 bytes.
|
|
Mar 30 11:32:55 splunk3 spamd[870]: spamd: result: Y 32 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.9,size=6073,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37856,mid=<7038019dc2ad$68b17d8a$6e6a9002@justdropped.com>,bayes=1,autolearn=spam
|
|
Mar 30 11:32:55 splunk3 sendmail[30912]: n2UIWSM6030809: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:02, mailer=local, pri=35976, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:32:55 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:33:23 splunk3 sendmail[31034]: n2UIXNhK031034: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:34:23 splunk3 sendmail[31269]: n2UIYNeK031269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:35:05 splunk3 sendmail[31447]: n2UIZ5Z4031447: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301835.n2UIZ5bZ014214@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:35:06 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37878
|
|
Mar 30 11:35:06 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:35:06 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:35:06 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:35:06 splunk3 spamd[870]: spamd: processing message <200903301835.n2UIZ5bZ014214@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:35:08 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 11:35:08 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37878,mid=<200903301835.n2UIZ5bZ014214@virt2.int.splunk.com>,bayes=0.112531266871144,autolearn=no
|
|
Mar 30 11:35:08 splunk3 sendmail[31448]: n2UIZ5Z4031447: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:35:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:35:23 splunk3 sendmail[31513]: n2UIZNW0031513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:36:23 splunk3 sendmail[31760]: n2UIaNwZ031760: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:36:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:36:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:37:23 splunk3 sendmail[32002]: n2UIbNt6032002: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:38:23 splunk3 sendmail[32239]: n2UIcNGc032239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:39:23 splunk3 sendmail[32479]: n2UIdNMm032479: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:40:06 splunk3 sendmail[32659]: n2UIe6dx032659: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301840.n2UIe6jP014849@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:40:06 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37933
|
|
Mar 30 11:40:06 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:40:06 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:40:06 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:40:06 splunk3 spamd[870]: spamd: processing message <200903301840.n2UIe6jP014849@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:40:08 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 11:40:08 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37933,mid=<200903301840.n2UIe6jP014849@virt2.int.splunk.com>,bayes=0.112531266871144,autolearn=no
|
|
Mar 30 11:40:08 splunk3 sendmail[32660]: n2UIe6dx032659: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:40:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:40:23 splunk3 sendmail[32727]: n2UIeN8f032727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:41:23 splunk3 sendmail[513]: n2UIfNuU000513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:41:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:41:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 11:42:23 splunk3 sendmail[752]: n2UIgNF8000752: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:43:23 splunk3 sendmail[990]: n2UIhNPh000990: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:44:23 splunk3 sendmail[1226]: n2UIiNLg001226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:45:07 splunk3 sendmail[1405]: n2UIj7A4001405: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301845.n2UIj6hW015463@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:45:07 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37990
|
|
Mar 30 11:45:07 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:45:07 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:45:07 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:45:07 splunk3 spamd[870]: spamd: processing message <200903301845.n2UIj6hW015463@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:45:09 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 30 11:45:09 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37990,mid=<200903301845.n2UIj6hW015463@virt2.int.splunk.com>,bayes=0.112531266871144,autolearn=no
|
|
Mar 30 11:45:09 splunk3 sendmail[1406]: n2UIj7A4001405: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:45:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:45:23 splunk3 sendmail[1471]: n2UIjNXQ001471: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:46:23 splunk3 sendmail[1721]: n2UIkNtl001721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:46:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:46:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:47:23 splunk3 sendmail[1964]: n2UIlN8m001964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:48:23 splunk3 sendmail[2202]: n2UImNGX002202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:49:23 splunk3 sendmail[2440]: n2UInNm7002440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:50:07 splunk3 sendmail[2623]: n2UIo7H7002623: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301850.n2UIo79Z016080@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:50:07 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38045
|
|
Mar 30 11:50:07 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:50:07 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:50:07 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:50:07 splunk3 spamd[870]: spamd: processing message <200903301850.n2UIo79Z016080@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:50:09 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 11:50:09 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38045,mid=<200903301850.n2UIo79Z016080@virt2.int.splunk.com>,bayes=0.112531266871144,autolearn=no
|
|
Mar 30 11:50:09 splunk3 sendmail[2624]: n2UIo7H7002623: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:50:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:50:23 splunk3 sendmail[2688]: n2UIoNBO002688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:51:22 splunk3 sendmail[2947]: n2UIpLpT002947: from=<3qRTRSRQKBtgAIIAF84F8LNM-HIL8JFSAIIAF8.6IGMJ4GG8MJFOHECN.6IG@alerts.bounces.google.com>, size=8622, class=0, nrcpts=1, msgid=<0016e6509e8e89e65404665a91ad@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.185]
|
|
Mar 30 11:51:22 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38065
|
|
Mar 30 11:51:22 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:51:22 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:51:22 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:51:22 splunk3 spamd[870]: spamd: processing message <0016e6509e8e89e65404665a91ad@google.com> for spamme:501
|
|
Mar 30 11:51:23 splunk3 sendmail[2958]: n2UIpN4W002958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:51:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:51:27 splunk3 spamd[870]: spamd: clean message (-2.3/5.0) for spamme:501 in 4.7 seconds, 9053 bytes.
|
|
Mar 30 11:51:27 splunk3 spamd[870]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=4.7,size=9053,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38065,mid=<0016e6509e8e89e65404665a91ad@google.com>,bayes=0,autolearn=ham
|
|
Mar 30 11:51:27 splunk3 sendmail[2950]: n2UIpLpT002947: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:05, mailer=local, pri=38834, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:51:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:51:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:52:23 splunk3 sendmail[3203]: n2UIqN0E003203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:53:23 splunk3 sendmail[3447]: n2UIrNVw003447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:54:23 splunk3 sendmail[3713]: n2UIsN2W003713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:55:04 splunk3 sendmail[21532]: n2UHt44N021532: timeout waiting for input from 219-85-42-125-adsl-TPE.dynamic.so-net.net.tw during server cmd read
|
|
Mar 30 11:55:04 splunk3 sendmail[21532]: n2UHt44N021532: lost input channel from 219-85-42-125-adsl-TPE.dynamic.so-net.net.tw [219.85.42.125] (may be forged) to MTA after rcpt
|
|
Mar 30 11:55:04 splunk3 sendmail[21532]: n2UHt44N021532: from=<gigi.wu@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=219-85-42-125-adsl-TPE.dynamic.so-net.net.tw [219.85.42.125] (may be forged)
|
|
Mar 30 11:55:08 splunk3 sendmail[3894]: n2UIt8lY003894: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301855.n2UIt7ca016691@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 11:55:08 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38102
|
|
Mar 30 11:55:08 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 11:55:08 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 11:55:08 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 11:55:08 splunk3 spamd[870]: spamd: processing message <200903301855.n2UIt7ca016691@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 11:55:10 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 11:55:10 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38102,mid=<200903301855.n2UIt7ca016691@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 11:55:10 splunk3 sendmail[3895]: n2UIt8lY003894: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 11:55:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 11:55:23 splunk3 sendmail[3961]: n2UItNJc003961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:56:23 splunk3 sendmail[4227]: n2UIuNWP004227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:56:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 11:56:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 11:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 11:57:23 splunk3 sendmail[4480]: n2UIvNtW004480: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:58:23 splunk3 sendmail[4715]: n2UIwN2x004715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 11:59:23 splunk3 sendmail[4966]: n2UIxNCj004966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:00:04 splunk3 sendmail[5240]: n2UJ04pu005240: from=root, size=291, class=0, nrcpts=1, msgid=<200903301900.n2UJ04pu005240@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 12:00:04 splunk3 sendmail[5244]: n2UJ04Ua005244: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903301900.n2UJ04pu005240@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 12:00:04 splunk3 sendmail[5240]: n2UJ04pu005240: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UJ04Ua005244 Message accepted for delivery)
|
|
Mar 30 12:00:05 splunk3 sendmail[5245]: n2UJ04Ua005244: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:00:08 splunk3 sendmail[5250]: n2UJ08Kp005250: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301900.n2UJ08sJ017330@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:00:08 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38160
|
|
Mar 30 12:00:08 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:00:08 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 12:00:08 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 12:00:08 splunk3 sendmail[5251]: n2UJ08Kp005250: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:00:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:00:23 splunk3 sendmail[5316]: n2UJ0NvC005316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:00:29 splunk3 sendmail[5367]: n2UJ0TBY005367: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903301900.n2UJ0TBY005367@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 12:00:29 splunk3 sendmail[5369]: n2UJ0TBY005367: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 12:00:29 splunk3 sendmail[5369]: n2UJ0TBY005367: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 30 12:00:29 splunk3 sendmail[5369]: n2UJ0TBY005367: n2UJ0TBY005369: postmaster notify: User unknown
|
|
Mar 30 12:00:30 splunk3 sendmail[5369]: n2UJ0TBY005369: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:01:12 splunk3 sendmail[5510]: n2UJ11C3005510: from=root, size=443, class=0, nrcpts=1, msgid=<200903301901.n2UJ11C3005510@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 12:01:12 splunk3 sendmail[5549]: n2UJ1CNM005549: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903301901.n2UJ11C3005510@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 12:01:12 splunk3 sendmail[5510]: n2UJ11C3005510: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UJ1CNM005549 Message accepted for delivery)
|
|
Mar 30 12:01:13 splunk3 sendmail[5550]: n2UJ1CNM005549: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:01:23 splunk3 sendmail[5602]: n2UJ1NK1005602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:01:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:01:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:02:23 splunk3 sendmail[5840]: n2UJ2NpY005840: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:03:23 splunk3 sendmail[6080]: n2UJ3NHt006080: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:04:23 splunk3 sendmail[6312]: n2UJ4N2N006312: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:05:09 splunk3 sendmail[6511]: n2UJ58qY006511: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301905.n2UJ58mg018018@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:05:09 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38223
|
|
Mar 30 12:05:09 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:05:09 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 12:05:09 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 12:05:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:05:09 splunk3 sendmail[6512]: n2UJ58qY006511: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:05:23 splunk3 sendmail[6555]: n2UJ5Nhc006555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:06:23 splunk3 sendmail[6805]: n2UJ6N9v006805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:06:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:06:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:07:23 splunk3 sendmail[7049]: n2UJ7N2c007049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:08:23 splunk3 sendmail[7289]: n2UJ8NH5007289: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:09:23 splunk3 sendmail[7540]: n2UJ9Npb007540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:10:02 splunk3 sendmail[7809]: n2UJA2BY007809: from=root, size=292, class=0, nrcpts=1, msgid=<200903301910.n2UJA2BY007809@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 12:10:02 splunk3 sendmail[7814]: n2UJA2vJ007814: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903301910.n2UJA2BY007809@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 12:10:02 splunk3 sendmail[7809]: n2UJA2BY007809: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UJA2vJ007814 Message accepted for delivery)
|
|
Mar 30 12:10:04 splunk3 sendmail[7815]: n2UJA2vJ007814: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:10:09 splunk3 sendmail[7853]: n2UJA9JU007853: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301910.n2UJA9W7018628@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:10:09 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38288
|
|
Mar 30 12:10:09 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:10:09 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:10:09 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:10:09 splunk3 spamd[870]: spamd: processing message <200903301910.n2UJA9W7018628@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:10:11 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 12:10:11 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38288,mid=<200903301910.n2UJA9W7018628@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:10:11 splunk3 sendmail[7854]: n2UJA9JU007853: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:10:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:10:23 splunk3 sendmail[7903]: n2UJANdi007903: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:11:23 splunk3 sendmail[8144]: n2UJBN0I008144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:11:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:11:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 12:12:23 splunk3 sendmail[8383]: n2UJCNGk008383: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:13:23 splunk3 sendmail[8624]: n2UJDNH5008624: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:14:23 splunk3 sendmail[8859]: n2UJEN4o008859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:15:10 splunk3 sendmail[9062]: n2UJFAH0009062: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301915.n2UJF96s019440@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:15:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38344
|
|
Mar 30 12:15:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:15:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:15:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:15:10 splunk3 spamd[870]: spamd: processing message <200903301915.n2UJF96s019440@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:15:12 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 12:15:12 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38344,mid=<200903301915.n2UJF96s019440@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:15:12 splunk3 sendmail[9063]: n2UJFAH0009062: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:15:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:15:23 splunk3 sendmail[9114]: n2UJFNn3009114: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:16:23 splunk3 sendmail[9355]: n2UJGN7M009355: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:16:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:16:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:17:23 splunk3 sendmail[9607]: n2UJHN4Z009607: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:18:23 splunk3 sendmail[9841]: n2UJIN8g009841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:19:23 splunk3 sendmail[10079]: n2UJJNPd010079: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:20:10 splunk3 sendmail[10288]: n2UJKAjx010288: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301920.n2UJKAIn020071@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:20:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38400
|
|
Mar 30 12:20:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:20:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:20:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:20:10 splunk3 spamd[870]: spamd: processing message <200903301920.n2UJKAIn020071@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:20:12 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 12:20:12 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38400,mid=<200903301920.n2UJKAIn020071@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:20:12 splunk3 sendmail[10289]: n2UJKAjx010288: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:20:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:20:23 splunk3 sendmail[10336]: n2UJKNvX010336: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:21:23 splunk3 sendmail[10581]: n2UJLNcP010581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:21:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:21:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:22:23 splunk3 sendmail[10819]: n2UJMN2S010819: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:23:23 splunk3 sendmail[11064]: n2UJNNIO011064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:24:23 splunk3 sendmail[11299]: n2UJONLT011299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:25:10 splunk3 sendmail[11504]: n2UJPAE2011504: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301925.n2UJPA6a020680@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:25:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38455
|
|
Mar 30 12:25:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:25:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:25:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:25:11 splunk3 spamd[870]: spamd: processing message <200903301925.n2UJPA6a020680@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:25:13 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 12:25:13 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38455,mid=<200903301925.n2UJPA6a020680@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:25:13 splunk3 sendmail[11505]: n2UJPAE2011504: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:25:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:25:23 splunk3 sendmail[11550]: n2UJPNRc011550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:26:23 splunk3 sendmail[11788]: n2UJQNfU011788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:26:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:26:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 12:27:23 splunk3 sendmail[12033]: n2UJRNpS012033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:28:23 splunk3 sendmail[12268]: n2UJSNjX012268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:29:23 splunk3 sendmail[12508]: n2UJTNhs012508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:30:11 splunk3 sendmail[12713]: n2UJUBi3012713: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301930.n2UJUB6W021299@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:30:11 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38512
|
|
Mar 30 12:30:11 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:30:11 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:30:11 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:30:11 splunk3 spamd[870]: spamd: processing message <200903301930.n2UJUB6W021299@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:30:13 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 12:30:13 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38512,mid=<200903301930.n2UJUB6W021299@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:30:13 splunk3 sendmail[12714]: n2UJUBi3012713: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:30:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:30:23 splunk3 sendmail[12766]: n2UJUNTC012766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:31:23 splunk3 sendmail[13009]: n2UJVNrp013009: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:31:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:31:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:32:23 splunk3 sendmail[13245]: n2UJWNWX013245: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:33:23 splunk3 sendmail[13523]: n2UJXNW9013523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:34:23 splunk3 sendmail[13759]: n2UJYNjS013759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:35:12 splunk3 sendmail[13963]: n2UJZCFi013963: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301935.n2UJZBww022045@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:35:12 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38567
|
|
Mar 30 12:35:12 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:35:12 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:35:12 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:35:12 splunk3 spamd[870]: spamd: processing message <200903301935.n2UJZBww022045@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:35:14 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 12:35:14 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38567,mid=<200903301935.n2UJZBww022045@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:35:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:35:14 splunk3 sendmail[13964]: n2UJZCFi013963: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:35:23 splunk3 sendmail[14012]: n2UJZNpd014012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:36:23 splunk3 sendmail[14254]: n2UJaNB5014254: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:36:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:36:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:37:23 splunk3 sendmail[14496]: n2UJbN1s014496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:38:23 splunk3 sendmail[14735]: n2UJcN8Q014735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:39:23 splunk3 sendmail[14986]: n2UJdNE2014986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:40:12 splunk3 sendmail[15179]: n2UJeCqa015179: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301940.n2UJeCMf022680@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:40:12 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38623
|
|
Mar 30 12:40:12 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:40:12 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:40:12 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:40:12 splunk3 spamd[870]: spamd: processing message <200903301940.n2UJeCMf022680@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:40:14 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 30 12:40:14 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38623,mid=<200903301940.n2UJeCMf022680@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:40:14 splunk3 sendmail[15180]: n2UJeCqa015179: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:40:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:40:23 splunk3 sendmail[15240]: n2UJeNBI015240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:41:23 splunk3 sendmail[15483]: n2UJfN36015483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:41:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:41:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 12:42:23 splunk3 sendmail[15722]: n2UJgNxw015722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:43:23 splunk3 sendmail[15963]: n2UJhN1j015963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:44:23 splunk3 sendmail[16198]: n2UJiNve016198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:45:13 splunk3 sendmail[16389]: n2UJjDBU016389: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301945.n2UJjCq0023295@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:45:13 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38679
|
|
Mar 30 12:45:13 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:45:13 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:45:13 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:45:13 splunk3 spamd[870]: spamd: processing message <200903301945.n2UJjCq0023295@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:45:15 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 12:45:15 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38679,mid=<200903301945.n2UJjCq0023295@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:45:15 splunk3 sendmail[16406]: n2UJjDBU016389: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:45:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:45:23 splunk3 sendmail[16454]: n2UJjNlj016454: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:46:23 splunk3 sendmail[16690]: n2UJkNtD016690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:46:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:46:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:47:23 splunk3 sendmail[16932]: n2UJlNZl016932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:48:23 splunk3 sendmail[17169]: n2UJmNoD017169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:49:23 splunk3 sendmail[17407]: n2UJnNxT017407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:50:14 splunk3 sendmail[17619]: n2UJoEvG017619: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301950.n2UJoDJP023940@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:50:14 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38735
|
|
Mar 30 12:50:14 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:50:14 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:50:14 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:50:14 splunk3 spamd[870]: spamd: processing message <200903301950.n2UJoDJP023940@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:50:16 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 30 12:50:16 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38735,mid=<200903301950.n2UJoDJP023940@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:50:16 splunk3 sendmail[17620]: n2UJoEvG017619: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:50:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:50:23 splunk3 sendmail[17664]: n2UJoN4F017664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:51:23 splunk3 sendmail[17910]: n2UJpND0017910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:51:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:51:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:52:23 splunk3 sendmail[18148]: n2UJqNcl018148: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:53:23 splunk3 sendmail[18387]: n2UJrNfa018387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:54:23 splunk3 sendmail[18623]: n2UJsNwX018623: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:55:14 splunk3 sendmail[18837]: n2UJtE8X018837: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903301955.n2UJtEXd024546@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 12:55:14 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38791
|
|
Mar 30 12:55:14 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 12:55:14 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 12:55:14 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 12:55:14 splunk3 spamd[870]: spamd: processing message <200903301955.n2UJtEXd024546@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 12:55:16 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 30 12:55:16 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38791,mid=<200903301955.n2UJtEXd024546@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 12:55:16 splunk3 sendmail[18838]: n2UJtE8X018837: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 12:55:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 12:55:23 splunk3 sendmail[18876]: n2UJtNBV018876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:56:23 splunk3 sendmail[19116]: n2UJuNRj019116: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:56:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 12:56:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 12:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 12:57:23 splunk3 sendmail[19361]: n2UJvNmG019361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:58:23 splunk3 sendmail[19597]: n2UJwNi4019597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 12:59:23 splunk3 sendmail[19837]: n2UJxNxs019837: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:00:04 splunk3 sendmail[20068]: n2UK042Q020068: from=root, size=291, class=0, nrcpts=1, msgid=<200903302000.n2UK042Q020068@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 13:00:04 splunk3 sendmail[20073]: n2UK04jf020073: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903302000.n2UK04jf020073@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 13:00:06 splunk3 sendmail[20075]: n2UK04jf020073: to=<mark@splunk.com>, delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 13:00:06 splunk3 sendmail[20075]: n2UK04jf020073: to=<splunk@localhost>, delay=00:00:02, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 13:00:06 splunk3 sendmail[20075]: n2UK04jf020073: n2UK06jf020075: postmaster notify: User unknown
|
|
Mar 30 13:00:06 splunk3 sendmail[20072]: n2UK04Jb020072: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903302000.n2UK042Q020068@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 13:00:06 splunk3 sendmail[20068]: n2UK042Q020068: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:02, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UK04Jb020072 Message accepted for delivery)
|
|
Mar 30 13:00:08 splunk3 sendmail[20075]: n2UK06jf020075: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:00:15 splunk3 sendmail[20131]: n2UK0FbQ020131: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302000.n2UK0Fq1025184@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:00:15 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38855
|
|
Mar 30 13:00:15 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:00:15 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 13:00:15 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 13:00:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:00:15 splunk3 sendmail[20132]: n2UK0FbQ020131: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:00:16 splunk3 sendmail[20088]: n2UK04Jb020072: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:10, xdelay=00:00:10, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:00:23 splunk3 sendmail[20173]: n2UK0NUg020173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:01:06 splunk3 sendmail[20318]: n2UK11V0020318: from=root, size=443, class=0, nrcpts=1, msgid=<200903302001.n2UK11V0020318@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 13:01:06 splunk3 sendmail[20341]: n2UK16lZ020341: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903302001.n2UK11V0020318@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 13:01:06 splunk3 sendmail[20318]: n2UK11V0020318: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UK16lZ020341 Message accepted for delivery)
|
|
Mar 30 13:01:08 splunk3 sendmail[20342]: n2UK16lZ020341: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:01:23 splunk3 sendmail[20430]: n2UK1NVi020430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:01:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:01:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:02:23 splunk3 sendmail[20667]: n2UK2NUa020667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:03:23 splunk3 sendmail[20908]: n2UK3NeC020908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:04:23 splunk3 sendmail[21144]: n2UK4Nh2021144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:05:18 splunk3 sendmail[21358]: n2UK5IXg021358: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302005.n2UK5FPp025865@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:05:18 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38912
|
|
Mar 30 13:05:18 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:05:18 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 13:05:18 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 13:05:18 splunk3 sendmail[21370]: n2UK5IXg021358: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:05:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:05:23 splunk3 sendmail[21397]: n2UK5NQ2021397: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:06:23 splunk3 sendmail[21637]: n2UK6NUe021637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:06:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:06:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:07:23 splunk3 sendmail[21875]: n2UK7NHE021875: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:08:23 splunk3 sendmail[22117]: n2UK8NNO022117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:09:23 splunk3 sendmail[22359]: n2UK9NIP022359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:10:03 splunk3 sendmail[22595]: n2UKA3kN022595: from=root, size=292, class=0, nrcpts=1, msgid=<200903302010.n2UKA3kN022595@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 13:10:03 splunk3 sendmail[22614]: n2UKA3CR022614: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903302010.n2UKA3kN022595@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 13:10:03 splunk3 sendmail[22595]: n2UKA3kN022595: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UKA3CR022614 Message accepted for delivery)
|
|
Mar 30 13:10:04 splunk3 sendmail[22615]: n2UKA3CR022614: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:10:18 splunk3 sendmail[22695]: n2UKAIxB022695: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302010.n2UKAIdL026483@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:10:18 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38969
|
|
Mar 30 13:10:18 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:10:18 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:10:18 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:10:18 splunk3 spamd[870]: spamd: processing message <200903302010.n2UKAIdL026483@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:10:20 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 13:10:20 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38969,mid=<200903302010.n2UKAIdL026483@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 13:10:20 splunk3 sendmail[22696]: n2UKAIxB022695: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:10:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:10:23 splunk3 sendmail[22717]: n2UKANsU022717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:11:23 splunk3 sendmail[22961]: n2UKBNvn022961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:11:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:11:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 13:12:23 splunk3 sendmail[23200]: n2UKCNuS023200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:13:23 splunk3 sendmail[23440]: n2UKDNib023440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:14:23 splunk3 sendmail[23669]: n2UKENAn023669: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:15:19 splunk3 sendmail[23900]: n2UKFJL7023900: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302015.n2UKFILM027281@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:15:19 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39025
|
|
Mar 30 13:15:19 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:15:19 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:15:19 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:15:19 splunk3 spamd[870]: spamd: processing message <200903302015.n2UKFILM027281@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:15:21 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 13:15:21 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39025,mid=<200903302015.n2UKFILM027281@virt2.int.splunk.com>,bayes=0.112563624782698,autolearn=no
|
|
Mar 30 13:15:21 splunk3 sendmail[23901]: n2UKFJL7023900: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:15:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:15:23 splunk3 sendmail[23925]: n2UKFNQD023925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:16:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:16:23 splunk3 sendmail[24165]: n2UKGNtE024165: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:16:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:17:23 splunk3 sendmail[24407]: n2UKHNbi024407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:17:25 splunk3 sendmail[24390]: n2UKHMTe024390: from=<ynmwfwooikqh@bluestarindia.com>, size=1098, class=0, nrcpts=1, msgid=<01c9b1af$35fdfa00$e2a8093a@ynmwfwooikqh>, proto=ESMTP, daemon=MTA, relay=ppp-58-9-168-226.revip2.asianet.co.th [58.9.168.226]
|
|
Mar 30 13:17:25 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39047
|
|
Mar 30 13:17:25 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:17:25 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:17:25 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:17:25 splunk3 spamd[870]: spamd: processing message <01c9b1af$35fdfa00$e2a8093a@ynmwfwooikqh> for spamme:501
|
|
Mar 30 13:17:27 splunk3 spamd[870]: spamd: identified spam (22.7/5.0) for spamme:501 in 1.4 seconds, 1444 bytes.
|
|
Mar 30 13:17:27 splunk3 spamd[870]: spamd: result: Y 22 - BAYES_60,HELO_DYNAMIC_IPADDR,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_WS_SURBL scantime=1.4,size=1444,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39047,mid=<01c9b1af$35fdfa00$e2a8093a@ynmwfwooikqh>,bayes=0.646445507149177,autolearn=spam
|
|
Mar 30 13:17:27 splunk3 sendmail[24409]: n2UKHMTe024390: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31340, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:17:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:18:23 splunk3 sendmail[24650]: n2UKINN0024650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:19:23 splunk3 sendmail[24890]: n2UKJNHu024890: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:20:19 splunk3 sendmail[25118]: n2UKKJ7f025118: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302020.n2UKKJfI027911@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:20:19 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39082
|
|
Mar 30 13:20:19 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:20:19 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:20:19 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:20:19 splunk3 spamd[870]: spamd: processing message <200903302020.n2UKKJfI027911@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:20:22 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 13:20:22 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39082,mid=<200903302020.n2UKKJfI027911@virt2.int.splunk.com>,bayes=0.112556150948679,autolearn=no
|
|
Mar 30 13:20:22 splunk3 sendmail[25119]: n2UKKJ7f025118: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:20:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:20:23 splunk3 sendmail[25146]: n2UKKN8k025146: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:20:57 splunk3 sendmail[25259]: n2UKKubX025259: from=<info@atm.org>, size=1203, class=0, nrcpts=1, msgid=<1736.41.205.168.142.1238443982.squirrel@webmail.abtbanmai.go.th>, proto=ESMTP, daemon=MTA, relay=cat50.thaihostserver.com [61.19.246.222]
|
|
Mar 30 13:21:00 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39088
|
|
Mar 30 13:21:00 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:21:00 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:21:00 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:21:00 splunk3 spamd[870]: spamd: processing message <1736.41.205.168.142.1238443982.squirrel@webmail.abtbanmai.go.th> for spamme:501
|
|
Mar 30 13:21:02 splunk3 spamd[870]: spamd: clean message (2.1/5.0) for spamme:501 in 2.2 seconds, 1486 bytes.
|
|
Mar 30 13:21:02 splunk3 spamd[870]: spamd: result: . 2 - BAYES_80,TO_CC_NONE scantime=2.2,size=1486,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39088,mid=<1736.41.205.168.142.1238443982.squirrel@webmail.abtbanmai.go.th>,bayes=0.862099463911458,autolearn=no
|
|
Mar 30 13:21:02 splunk3 sendmail[25266]: n2UKKubX025259: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:05, mailer=local, pri=31416, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:21:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:21:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:21:23 splunk3 sendmail[25391]: n2UKLNrM025391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:21:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:21:59 splunk3 sendmail[25473]: n2UKLiW4025473: from=<herschel@royjames.com>, size=96025, class=0, nrcpts=1, msgid=<000d01c9b175$220f7c60$6400a8c0@herschel>, proto=ESMTP, daemon=MTA, relay=ipa190.47.107.79.tellas.gr [79.107.47.190] (may be forged)
|
|
Mar 30 13:21:59 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39099
|
|
Mar 30 13:21:59 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:21:59 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:21:59 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:21:59 splunk3 spamd[870]: spamd: processing message <000d01c9b175$220f7c60$6400a8c0@herschel> for spamme:501
|
|
Mar 30 13:22:01 splunk3 spamd[870]: spamd: clean message (3.5/5.0) for spamme:501 in 2.1 seconds, 96349 bytes.
|
|
Mar 30 13:22:01 splunk3 spamd[870]: spamd: result: . 3 - BAYES_99,UNPARSEABLE_RELAY scantime=2.1,size=96349,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39099,mid=<000d01c9b175$220f7c60$6400a8c0@herschel>,bayes=0.999774092858208,autolearn=no
|
|
Mar 30 13:22:01 splunk3 sendmail[25531]: n2UKLiW4025473: to=<spamme@splunkit.com>, delay=00:00:12, xdelay=00:00:02, mailer=local, pri=126262, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:22:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:22:23 splunk3 sendmail[25636]: n2UKMNs7025636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:23:23 splunk3 sendmail[25880]: n2UKNNQn025880: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:24:23 splunk3 sendmail[26115]: n2UKON3m026115: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:25:20 splunk3 sendmail[26348]: n2UKPKOi026348: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302025.n2UKPJYO028516@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:25:20 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39139
|
|
Mar 30 13:25:20 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:25:20 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:25:20 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:25:20 splunk3 spamd[870]: spamd: processing message <200903302025.n2UKPJYO028516@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:25:22 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 13:25:22 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39139,mid=<200903302025.n2UKPJYO028516@virt2.int.splunk.com>,bayes=0.112556150948679,autolearn=no
|
|
Mar 30 13:25:22 splunk3 sendmail[26349]: n2UKPKOi026348: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:25:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:25:23 splunk3 sendmail[26370]: n2UKPNqr026370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:26:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:26:23 splunk3 sendmail[26611]: n2UKQNWh026611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:26:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 13:27:23 splunk3 sendmail[26854]: n2UKRNiI026854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:28:24 splunk3 sendmail[27085]: n2UKSO4m027085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:29:24 splunk3 sendmail[27324]: n2UKTO3N027324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:30:20 splunk3 sendmail[27556]: n2UKUK1X027556: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302030.n2UKUKLa029137@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:30:20 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39196
|
|
Mar 30 13:30:20 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:30:20 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:30:20 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:30:20 splunk3 spamd[870]: spamd: processing message <200903302030.n2UKUKLa029137@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:30:22 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 13:30:22 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39196,mid=<200903302030.n2UKUKLa029137@virt2.int.splunk.com>,bayes=0.112556150948679,autolearn=no
|
|
Mar 30 13:30:22 splunk3 sendmail[27557]: n2UKUK1X027556: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:30:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:30:24 splunk3 sendmail[27581]: n2UKUOSC027581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:31:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:31:24 splunk3 sendmail[27824]: n2UKVO7e027824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:31:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:32:24 splunk3 sendmail[28063]: n2UKWOxq028063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:33:24 splunk3 sendmail[28303]: n2UKXORO028303: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:34:24 splunk3 sendmail[28538]: n2UKYO2A028538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:35:21 splunk3 sendmail[28765]: n2UKZLhX028765: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302035.n2UKZK5K029879@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:35:21 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39251
|
|
Mar 30 13:35:21 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:35:21 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:35:21 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:35:21 splunk3 spamd[870]: spamd: processing message <200903302035.n2UKZK5K029879@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:35:23 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 13:35:23 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39251,mid=<200903302035.n2UKZK5K029879@virt2.int.splunk.com>,bayes=0.112556150948679,autolearn=no
|
|
Mar 30 13:35:23 splunk3 sendmail[28766]: n2UKZLhX028765: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:35:24 splunk3 sendmail[28788]: n2UKZO9i028788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:36:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:36:24 splunk3 sendmail[29029]: n2UKaOkl029029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:36:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:37:24 splunk3 sendmail[29272]: n2UKbOeE029272: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:38:24 splunk3 sendmail[29511]: n2UKcOUp029511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:39:24 splunk3 sendmail[29751]: n2UKdOD1029751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:40:21 splunk3 sendmail[29986]: n2UKeLZT029986: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302040.n2UKeLnI030513@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:40:21 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39307
|
|
Mar 30 13:40:21 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:40:21 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:40:21 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:40:21 splunk3 spamd[870]: spamd: processing message <200903302040.n2UKeLnI030513@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:40:23 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 30 13:40:23 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39307,mid=<200903302040.n2UKeLnI030513@virt2.int.splunk.com>,bayes=0.112556150948679,autolearn=no
|
|
Mar 30 13:40:23 splunk3 sendmail[29987]: n2UKeLZT029986: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:40:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:40:24 splunk3 sendmail[30008]: n2UKeOkN030008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:41:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:41:24 splunk3 sendmail[30252]: n2UKfOab030252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:41:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 13:42:24 splunk3 sendmail[30487]: n2UKgOwT030487: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:43:24 splunk3 sendmail[30727]: n2UKhO4J030727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:44:24 splunk3 sendmail[30961]: n2UKiOiI030961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:45:22 splunk3 sendmail[31208]: n2UKjMr7031208: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302045.n2UKjMQt031129@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:45:22 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39363
|
|
Mar 30 13:45:22 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:45:22 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:45:22 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:45:22 splunk3 spamd[870]: spamd: processing message <200903302045.n2UKjMQt031129@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:45:24 splunk3 sendmail[31215]: n2UKjORj031215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:45:24 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 13:45:24 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39363,mid=<200903302045.n2UKjMQt031129@virt2.int.splunk.com>,bayes=0.112556150948679,autolearn=no
|
|
Mar 30 13:45:24 splunk3 sendmail[31209]: n2UKjMr7031208: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:45:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:46:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:46:24 splunk3 sendmail[31455]: n2UKkObe031455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:46:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:47:24 splunk3 sendmail[31698]: n2UKlOPC031698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:48:24 splunk3 sendmail[31935]: n2UKmO7i031935: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:49:24 splunk3 sendmail[32169]: n2UKnOoM032169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:50:23 splunk3 sendmail[32418]: n2UKoNEq032418: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302050.n2UKoMZX031741@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:50:23 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39419
|
|
Mar 30 13:50:23 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:50:23 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:50:23 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:50:23 splunk3 spamd[870]: spamd: processing message <200903302050.n2UKoMZX031741@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:50:24 splunk3 sendmail[32425]: n2UKoOIK032425: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:50:25 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 13:50:25 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39419,mid=<200903302050.n2UKoMZX031741@virt2.int.splunk.com>,bayes=0.112556150948679,autolearn=no
|
|
Mar 30 13:50:25 splunk3 sendmail[32419]: n2UKoNEq032418: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:51:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:51:24 splunk3 sendmail[32671]: n2UKpOT7032671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:51:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:52:24 splunk3 sendmail[441]: n2UKqOXR000441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:53:24 splunk3 sendmail[686]: n2UKrO2d000686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:54:24 splunk3 sendmail[924]: n2UKsOXt000924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:55:23 splunk3 sendmail[1172]: n2UKtNao001172: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302055.n2UKtNNd032346@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 13:55:23 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39475
|
|
Mar 30 13:55:23 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 13:55:23 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 13:55:23 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 13:55:23 splunk3 spamd[870]: spamd: processing message <200903302055.n2UKtNNd032346@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 13:55:24 splunk3 sendmail[1178]: n2UKtOo4001178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:55:25 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 13:55:25 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39475,mid=<200903302055.n2UKtNNd032346@virt2.int.splunk.com>,bayes=0.112556150948679,autolearn=no
|
|
Mar 30 13:55:25 splunk3 sendmail[1173]: n2UKtNao001172: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 13:55:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 13:56:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 13:56:24 splunk3 sendmail[1414]: n2UKuOm0001414: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:56:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 13:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 13:57:24 splunk3 sendmail[1658]: n2UKvOiU001658: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:58:24 splunk3 sendmail[1896]: n2UKwOnu001896: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 13:59:24 splunk3 sendmail[2134]: n2UKxO1G002134: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:00:04 splunk3 sendmail[2355]: n2UL04SS002355: from=root, size=291, class=0, nrcpts=1, msgid=<200903302100.n2UL04SS002355@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 14:00:04 splunk3 sendmail[2359]: n2UL04WW002359: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903302100.n2UL04SS002355@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 14:00:04 splunk3 sendmail[2355]: n2UL04SS002355: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UL04WW002359 Message accepted for delivery)
|
|
Mar 30 14:00:06 splunk3 sendmail[2360]: n2UL04WW002359: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:00:10 splunk3 sendmail[2394]: n2UL0AXU002394: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903302100.n2UL0AXU002394@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 14:00:10 splunk3 sendmail[2396]: n2UL0AXU002394: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 14:00:10 splunk3 sendmail[2396]: n2UL0AXU002394: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 30 14:00:10 splunk3 sendmail[2396]: n2UL0AXU002394: n2UL0AXU002396: postmaster notify: User unknown
|
|
Mar 30 14:00:11 splunk3 sendmail[2396]: n2UL0AXU002396: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:00:24 splunk3 sendmail[2470]: n2UL0OB0002470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:00:24 splunk3 sendmail[2471]: n2UL0OJK002471: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903302100.n2UL0OSN000525@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:00:24 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39539
|
|
Mar 30 14:00:24 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:00:24 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 14:00:24 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 14:00:24 splunk3 sendmail[2472]: n2UL0OJK002471: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:01:15 splunk3 sendmail[2625]: n2UL127Z002625: from=root, size=443, class=0, nrcpts=1, msgid=<200903302101.n2UL127Z002625@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 14:01:15 splunk3 sendmail[2690]: n2UL1FDi002690: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903302101.n2UL127Z002625@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 14:01:15 splunk3 sendmail[2625]: n2UL127Z002625: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UL1FDi002690 Message accepted for delivery)
|
|
Mar 30 14:01:16 splunk3 sendmail[2691]: n2UL1FDi002690: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:01:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:01:24 splunk3 sendmail[2740]: n2UL1ORh002740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:01:28 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:02:24 splunk3 sendmail[2989]: n2UL2OID002989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:03:24 splunk3 sendmail[3233]: n2UL3OZ5003233: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:04:24 splunk3 sendmail[3470]: n2UL4OE6003470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:05:24 splunk3 sendmail[3747]: n2UL5Oso003747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:05:25 splunk3 sendmail[3748]: n2UL5PXY003748: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302105.n2UL5Oin001206@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:05:25 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39596
|
|
Mar 30 14:05:25 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:05:25 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 14:05:25 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 14:05:25 splunk3 sendmail[3749]: n2UL5PXY003748: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:06:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:06:24 splunk3 sendmail[4001]: n2UL6OIP004001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:06:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:07:24 splunk3 sendmail[4255]: n2UL7OP1004255: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:08:24 splunk3 sendmail[4508]: n2UL8OCY004508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:09:24 splunk3 sendmail[4752]: n2UL9OW2004752: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:10:02 splunk3 sendmail[4993]: n2ULA28O004993: from=root, size=292, class=0, nrcpts=1, msgid=<200903302110.n2ULA28O004993@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 14:10:02 splunk3 sendmail[4998]: n2ULA2mX004998: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903302110.n2ULA28O004993@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 14:10:02 splunk3 sendmail[4993]: n2ULA28O004993: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2ULA2mX004998 Message accepted for delivery)
|
|
Mar 30 14:10:03 splunk3 sendmail[5003]: n2ULA2mX004998: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:10:24 splunk3 sendmail[5110]: n2ULAONc005110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:10:25 splunk3 sendmail[5113]: n2ULAPPd005113: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302110.n2ULAPl6001861@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:10:25 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39652
|
|
Mar 30 14:10:25 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:10:25 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:10:25 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:10:25 splunk3 spamd[870]: spamd: processing message <200903302110.n2ULAPl6001861@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:10:27 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 30 14:10:27 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39652,mid=<200903302110.n2ULAPl6001861@virt2.int.splunk.com>,bayes=0.169518976182746,autolearn=no
|
|
Mar 30 14:10:27 splunk3 sendmail[5114]: n2ULAPPd005113: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:11:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:11:24 splunk3 sendmail[5401]: n2ULBOct005401: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:11:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 14:12:24 splunk3 sendmail[5640]: n2ULCOcU005640: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:13:24 splunk3 sendmail[5878]: n2ULDOhx005878: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:14:24 splunk3 sendmail[6114]: n2ULEO83006114: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:15:24 splunk3 sendmail[6364]: n2ULFOBw006364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:15:26 splunk3 sendmail[6365]: n2ULFPWU006365: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302115.n2ULFPDm002671@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:15:26 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39709
|
|
Mar 30 14:15:26 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:15:26 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:15:26 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:15:26 splunk3 spamd[870]: spamd: processing message <200903302115.n2ULFPDm002671@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:15:28 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 30 14:15:28 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39709,mid=<200903302115.n2ULFPDm002671@virt2.int.splunk.com>,bayes=0.169518976182746,autolearn=no
|
|
Mar 30 14:15:28 splunk3 sendmail[6366]: n2ULFPWU006365: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:16:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:16:24 splunk3 sendmail[6611]: n2ULGORo006611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:16:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:17:24 splunk3 sendmail[6847]: n2ULHOYe006847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:18:24 splunk3 sendmail[7084]: n2ULIOMY007084: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:19:24 splunk3 sendmail[7323]: n2ULJOFo007323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:20:24 splunk3 sendmail[7582]: n2ULKO53007582: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:20:26 splunk3 sendmail[7584]: n2ULKQCV007584: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302120.n2ULKQED003305@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:20:26 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39764
|
|
Mar 30 14:20:26 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:20:26 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:20:26 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:20:26 splunk3 spamd[870]: spamd: processing message <200903302120.n2ULKQED003305@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:20:28 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 30 14:20:28 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39764,mid=<200903302120.n2ULKQED003305@virt2.int.splunk.com>,bayes=0.169518976182746,autolearn=no
|
|
Mar 30 14:20:28 splunk3 sendmail[7585]: n2ULKQCV007584: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:21:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:21:24 splunk3 sendmail[7833]: n2ULLO2w007833: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:21:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:21:44 splunk3 sendmail[7915]: n2ULLhbZ007915: from=<35zfRSRQKBjockkchaWhanpo-jknalhuckkcha.YkiolWiiaolhqjgep.Yki@alerts.bounces.google.com>, size=5085, class=0, nrcpts=1, msgid=<00163692061148d72704665cabf7@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.191]
|
|
Mar 30 14:21:44 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39778
|
|
Mar 30 14:21:44 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:21:44 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:21:44 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:21:44 splunk3 spamd[870]: spamd: processing message <00163692061148d72704665cabf7@google.com> for spamme:501
|
|
Mar 30 14:21:46 splunk3 spamd[870]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.2 seconds, 5516 bytes.
|
|
Mar 30 14:21:46 splunk3 spamd[870]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.2,size=5516,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39778,mid=<00163692061148d72704665cabf7@google.com>,bayes=0,autolearn=ham
|
|
Mar 30 14:21:46 splunk3 sendmail[7916]: n2ULLhbZ007915: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=35297, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:21:46 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:22:24 splunk3 sendmail[8092]: n2ULMOVr008092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:23:24 splunk3 sendmail[8333]: n2ULNODw008333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:24:24 splunk3 sendmail[8567]: n2ULOOgl008567: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:25:24 splunk3 sendmail[8815]: n2ULPOVT008815: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:25:27 splunk3 sendmail[8817]: n2ULPRff008817: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302125.n2ULPQuf003912@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:25:27 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39821
|
|
Mar 30 14:25:27 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:25:27 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:25:27 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:25:27 splunk3 spamd[870]: spamd: processing message <200903302125.n2ULPQuf003912@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:25:29 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 30 14:25:29 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39821,mid=<200903302125.n2ULPQuf003912@virt2.int.splunk.com>,bayes=0.169557110400285,autolearn=no
|
|
Mar 30 14:25:29 splunk3 sendmail[8818]: n2ULPRff008817: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:26:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:26:24 splunk3 sendmail[9061]: n2ULQOkq009061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:26:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 14:27:24 splunk3 sendmail[9306]: n2ULRO6Z009306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:28:24 splunk3 sendmail[9546]: n2ULSOfd009546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:29:24 splunk3 sendmail[9794]: n2ULTORZ009794: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:30:24 splunk3 sendmail[10042]: n2ULUOQ1010042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:30:27 splunk3 sendmail[10063]: n2ULURjv010063: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302130.n2ULURcG004539@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:30:27 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39877
|
|
Mar 30 14:30:27 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:30:27 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:30:27 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:30:27 splunk3 spamd[870]: spamd: processing message <200903302130.n2ULURcG004539@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:30:29 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 30 14:30:29 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39877,mid=<200903302130.n2ULURcG004539@virt2.int.splunk.com>,bayes=0.169557110400285,autolearn=no
|
|
Mar 30 14:30:29 splunk3 sendmail[10064]: n2ULURjv010063: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:30:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:31:11 splunk3 sendmail[10226]: n2ULV8qa010226: from=<spamme@splunkit.com>, size=2761, class=0, nrcpts=1, msgid=<200903302131.n2ULV8qa010226@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=pd95b44e3.dip0.t-ipconnect.de [217.91.68.227]
|
|
Mar 30 14:31:11 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39884
|
|
Mar 30 14:31:11 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:31:11 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:31:11 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:31:11 splunk3 spamd[870]: spamd: processing message <200903302131.n2ULV8qa010226@splunk3.splunkit.com> for spamme:501
|
|
Mar 30 14:31:13 splunk3 spamd[870]: spamd: identified spam (34.3/5.0) for spamme:501 in 1.8 seconds, 3173 bytes.
|
|
Mar 30 14:31:13 splunk3 spamd[870]: spamd: result: Y 34 - AWL,BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.8,size=3173,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39884,mid=<200903302131.n2ULV8qa010226@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 30 14:31:13 splunk3 sendmail[10227]: n2ULV8qa010226: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33095, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:31:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:31:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:31:24 splunk3 sendmail[10296]: n2ULVOOR010296: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:31:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:32:24 splunk3 sendmail[10534]: n2ULWOHx010534: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:32:39 splunk3 sendmail[10593]: n2ULWdf9010593: from=<3dzrRSRQKBswy66y3ws3w9BA-569w73Gy66y3w.u64A7s44wA73C520B.u64@alerts.bounces.google.com>, size=2806, class=0, nrcpts=1, msgid=<0016369fa2515d0fd204665cd2ec@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.185]
|
|
Mar 30 14:32:39 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39901
|
|
Mar 30 14:32:39 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:32:39 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:32:39 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:32:39 splunk3 spamd[870]: spamd: processing message <0016369fa2515d0fd204665cd2ec@google.com> for spamme:501
|
|
Mar 30 14:32:41 splunk3 spamd[870]: spamd: clean message (-2.4/5.0) for spamme:501 in 1.4 seconds, 3237 bytes.
|
|
Mar 30 14:32:41 splunk3 spamd[870]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.4,size=3237,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39901,mid=<0016369fa2515d0fd204665cd2ec@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Mar 30 14:32:41 splunk3 sendmail[10594]: n2ULWdf9010593: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33018, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:32:41 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:33:24 splunk3 sendmail[10781]: n2ULXOm5010781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:34:24 splunk3 sendmail[11016]: n2ULYOhc011016: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:35:24 splunk3 sendmail[11263]: n2ULZO5v011263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:35:28 splunk3 sendmail[11281]: n2ULZSQa011281: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302135.n2ULZSsP005278@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:35:28 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39935
|
|
Mar 30 14:35:28 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:35:28 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:35:28 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:35:28 splunk3 spamd[870]: spamd: processing message <200903302135.n2ULZSsP005278@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:35:30 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Mar 30 14:35:30 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39935,mid=<200903302135.n2ULZSsP005278@virt2.int.splunk.com>,bayes=0.169586381722466,autolearn=no
|
|
Mar 30 14:35:30 splunk3 sendmail[11282]: n2ULZSQa011281: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:36:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:36:24 splunk3 sendmail[11510]: n2ULaODU011510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:36:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:37:24 splunk3 sendmail[11749]: n2ULbOxq011749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:38:24 splunk3 sendmail[11987]: n2ULcOOQ011987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:39:24 splunk3 sendmail[12227]: n2ULdOk0012227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:40:24 splunk3 sendmail[12477]: n2ULeORg012477: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:40:29 splunk3 sendmail[12496]: n2ULeTiw012496: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302140.n2ULeSVF005915@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:40:29 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39991
|
|
Mar 30 14:40:29 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:40:29 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:40:29 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:40:29 splunk3 spamd[870]: spamd: processing message <200903302140.n2ULeSVF005915@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:40:31 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 30 14:40:31 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39991,mid=<200903302140.n2ULeSVF005915@virt2.int.splunk.com>,bayes=0.169586381722466,autolearn=no
|
|
Mar 30 14:40:31 splunk3 sendmail[12497]: n2ULeTiw012496: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:40:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:41:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:41:24 splunk3 sendmail[12727]: n2ULfO8Z012727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:41:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 14:42:24 splunk3 sendmail[12968]: n2ULgOTP012968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:43:24 splunk3 sendmail[13209]: n2ULhOo1013209: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:44:24 splunk3 sendmail[13484]: n2ULiO6w013484: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:45:24 splunk3 sendmail[13728]: n2ULjOIF013728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:45:29 splunk3 sendmail[13752]: n2ULjTDT013752: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302145.n2ULjTuF006552@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:45:29 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40046
|
|
Mar 30 14:45:29 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:45:29 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:45:29 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:45:29 splunk3 spamd[870]: spamd: processing message <200903302145.n2ULjTuF006552@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:45:31 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Mar 30 14:45:31 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40046,mid=<200903302145.n2ULjTuF006552@virt2.int.splunk.com>,bayes=0.169586381722466,autolearn=no
|
|
Mar 30 14:45:31 splunk3 sendmail[13753]: n2ULjTDT013752: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:45:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:46:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:46:24 splunk3 sendmail[13975]: n2ULkOOh013975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:46:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:47:24 splunk3 sendmail[14217]: n2ULlOWE014217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:48:24 splunk3 sendmail[14452]: n2ULmOg8014452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:49:24 splunk3 sendmail[14691]: n2ULnOuC014691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:50:24 splunk3 sendmail[14941]: n2ULoOxl014941: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:50:30 splunk3 sendmail[14959]: n2ULoUT1014959: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302150.n2ULoTlB007150@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:50:30 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40102
|
|
Mar 30 14:50:30 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:50:30 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:50:30 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:50:30 splunk3 spamd[870]: spamd: processing message <200903302150.n2ULoTlB007150@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:50:32 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 30 14:50:32 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40102,mid=<200903302150.n2ULoTlB007150@virt2.int.splunk.com>,bayes=0.169586381722466,autolearn=no
|
|
Mar 30 14:50:32 splunk3 sendmail[14960]: n2ULoUT1014959: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:50:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:51:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:51:24 splunk3 sendmail[15190]: n2ULpOmd015190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:51:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:52:24 splunk3 sendmail[15423]: n2ULqOfR015423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:53:24 splunk3 sendmail[15666]: n2ULrOgS015666: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:54:24 splunk3 sendmail[15902]: n2ULsO0X015902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:55:00 splunk3 sendmail[16043]: n2ULt0DG016043: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302155.n2ULt0Zv007684@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 14:55:00 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40145
|
|
Mar 30 14:55:00 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 14:55:00 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 14:55:00 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 14:55:00 splunk3 spamd[870]: spamd: processing message <200903302155.n2ULt0Zv007684@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 14:55:02 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 30 14:55:02 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40145,mid=<200903302155.n2ULt0Zv007684@virt2.int.splunk.com>,bayes=0.169586381722466,autolearn=no
|
|
Mar 30 14:55:02 splunk3 sendmail[16044]: n2ULt0DG016043: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 14:55:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 14:55:24 splunk3 sendmail[16156]: n2ULtOZ4016156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:56:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 14:56:24 splunk3 sendmail[16397]: n2ULuOP0016397: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:56:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 14:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 14:57:24 splunk3 sendmail[16642]: n2ULvOVF016642: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:58:24 splunk3 sendmail[16877]: n2ULwO25016877: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 14:59:24 splunk3 sendmail[17112]: n2ULxOD6017112: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:00:00 splunk3 sendmail[17249]: n2UM000k017249: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302200.n2UM002p008303@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:00:00 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40202
|
|
Mar 30 15:00:00 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:00:00 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:00:00 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:00:00 splunk3 spamd[870]: spamd: processing message <200903302200.n2UM002p008303@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:00:02 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Mar 30 15:00:02 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40202,mid=<200903302200.n2UM002p008303@virt2.int.splunk.com>,bayes=0.169586381722466,autolearn=no
|
|
Mar 30 15:00:02 splunk3 sendmail[17250]: n2UM000k017249: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:00:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:00:04 splunk3 sendmail[17339]: n2UM04cE017339: from=root, size=291, class=0, nrcpts=1, msgid=<200903302200.n2UM04cE017339@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 15:00:04 splunk3 sendmail[17343]: n2UM0482017343: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903302200.n2UM04cE017339@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 15:00:04 splunk3 sendmail[17339]: n2UM04cE017339: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UM0482017343 Message accepted for delivery)
|
|
Mar 30 15:00:05 splunk3 sendmail[17344]: n2UM0482017343: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:00:15 splunk3 sendmail[17403]: n2UM0FPY017403: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903302200.n2UM0FPY017403@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 15:00:15 splunk3 sendmail[17405]: n2UM0FPY017403: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 15:00:15 splunk3 sendmail[17405]: n2UM0FPY017403: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 15:00:15 splunk3 sendmail[17405]: n2UM0FPY017403: n2UM0FPY017405: postmaster notify: User unknown
|
|
Mar 30 15:00:17 splunk3 sendmail[17405]: n2UM0FPY017405: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:00:24 splunk3 sendmail[17453]: n2UM0OEG017453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:01:16 splunk3 sendmail[17600]: n2UM11xi017600: from=root, size=443, class=0, nrcpts=1, msgid=<200903302201.n2UM11xi017600@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 15:01:16 splunk3 sendmail[17667]: n2UM1G7s017667: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903302201.n2UM11xi017600@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 15:01:16 splunk3 sendmail[17600]: n2UM11xi017600: to=root, ctladdr=root (0/0), delay=00:00:15, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UM1G7s017667 Message accepted for delivery)
|
|
Mar 30 15:01:20 splunk3 sendmail[17668]: n2UM1G7s017667: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:04, xdelay=00:00:04, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:01:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:01:24 splunk3 sendmail[17710]: n2UM1OZq017710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:01:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:02:24 splunk3 sendmail[17949]: n2UM2O0G017949: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:03:24 splunk3 sendmail[18191]: n2UM3OLT018191: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:04:24 splunk3 sendmail[18428]: n2UM4OKo018428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:05:01 splunk3 sendmail[18564]: n2UM51sh018564: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302205.n2UM51rh009009@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:05:01 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40267
|
|
Mar 30 15:05:01 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:05:01 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 15:05:01 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 15:05:01 splunk3 sendmail[18565]: n2UM51sh018564: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:05:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:05:24 splunk3 sendmail[18680]: n2UM5Oak018680: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:06:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:06:24 splunk3 sendmail[18917]: n2UM6Oui018917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:06:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:07:24 splunk3 sendmail[19158]: n2UM7O1f019158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:08:24 splunk3 sendmail[19398]: n2UM8Ot1019398: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:09:24 splunk3 sendmail[19640]: n2UM9OAD019640: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:10:01 splunk3 sendmail[19852]: n2UMA1QO019852: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903302210.n2UMA1Yt009625@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:10:01 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40322
|
|
Mar 30 15:10:01 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:10:01 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:10:01 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:10:01 splunk3 spamd[870]: spamd: processing message <200903302210.n2UMA1Yt009625@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:10:02 splunk3 sendmail[19899]: n2UMA2l0019899: from=root, size=292, class=0, nrcpts=1, msgid=<200903302210.n2UMA2l0019899@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 15:10:02 splunk3 sendmail[19904]: n2UMA2D7019904: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903302210.n2UMA2l0019899@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 15:10:02 splunk3 sendmail[19899]: n2UMA2l0019899: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UMA2D7019904 Message accepted for delivery)
|
|
Mar 30 15:10:03 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Mar 30 15:10:03 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40322,mid=<200903302210.n2UMA1Yt009625@virt2.int.splunk.com>,bayes=0.169586381722466,autolearn=no
|
|
Mar 30 15:10:03 splunk3 sendmail[19882]: n2UMA1QO019852: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:10:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:10:04 splunk3 sendmail[19905]: n2UMA2D7019904: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:10:24 splunk3 sendmail[20001]: n2UMAOqL020001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:11:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:11:24 splunk3 sendmail[20245]: n2UMBO8T020245: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:11:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 15:12:24 splunk3 sendmail[20485]: n2UMCOCt020485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:13:24 splunk3 sendmail[20725]: n2UMDO7E020725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:14:24 splunk3 sendmail[20960]: n2UMEOh0020960: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:15:02 splunk3 sendmail[21117]: n2UMF2eE021117: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302215.n2UMF1PW010466@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:15:02 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40380
|
|
Mar 30 15:15:02 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:15:02 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:15:02 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:15:02 splunk3 spamd[870]: spamd: processing message <200903302215.n2UMF1PW010466@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:15:04 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 15:15:04 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40380,mid=<200903302215.n2UMF1PW010466@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 15:15:04 splunk3 sendmail[21118]: n2UMF2eE021117: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:15:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:15:24 splunk3 sendmail[21215]: n2UMFOng021215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:16:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:16:24 splunk3 sendmail[21455]: n2UMGOhX021455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:16:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:17:24 splunk3 sendmail[21697]: n2UMHOrU021697: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:18:24 splunk3 sendmail[21936]: n2UMIOAc021936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:19:24 splunk3 sendmail[22172]: n2UMJO8Y022172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:20:04 splunk3 sendmail[22330]: n2UMK4Ab022330: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302220.n2UMK2VZ011103@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:20:04 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40435
|
|
Mar 30 15:20:04 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:20:04 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:20:04 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:20:04 splunk3 spamd[870]: spamd: processing message <200903302220.n2UMK2VZ011103@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:20:06 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 15:20:06 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40435,mid=<200903302220.n2UMK2VZ011103@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 15:20:06 splunk3 sendmail[22331]: n2UMK4Ab022330: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:20:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:20:24 splunk3 sendmail[22426]: n2UMKOCi022426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:20:58 splunk3 sendmail[22566]: n2UMKv7W022566: from=<3yUXRSRQKBioMUUMRKGRKXZY-TUXKVReMUUMRK.IUSYVGSSKYVRaTQOZ.IUS@alerts.bounces.google.com>, size=3412, class=0, nrcpts=1, msgid=<0016361e88c61d8a2604665d7f26@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 30 15:20:58 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40451
|
|
Mar 30 15:20:58 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:20:58 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:20:58 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:20:58 splunk3 spamd[870]: spamd: processing message <0016361e88c61d8a2604665d7f26@google.com> for spamme:501
|
|
Mar 30 15:21:00 splunk3 spamd[870]: spamd: clean message (-1.4/5.0) for spamme:501 in 1.8 seconds, 3847 bytes.
|
|
Mar 30 15:21:00 splunk3 spamd[870]: spamd: result: . -1 - AWL,BAYES_00,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY scantime=1.8,size=3847,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40451,mid=<0016361e88c61d8a2604665d7f26@google.com>,bayes=5.55111512312578e-17,autolearn=no
|
|
Mar 30 15:21:00 splunk3 sendmail[22567]: n2UMKv7W022566: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33628, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:21:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:21:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:21:24 splunk3 sendmail[22677]: n2UMLOvF022677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:21:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:22:24 splunk3 sendmail[22916]: n2UMMOKk022916: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:23:24 splunk3 sendmail[23158]: n2UMNOIw023158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:24:24 splunk3 sendmail[23393]: n2UMOOvN023393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:25:04 splunk3 sendmail[23551]: n2UMP4Sf023551: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302225.n2UMP4eC011711@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:25:04 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40492
|
|
Mar 30 15:25:04 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:25:04 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:25:04 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:25:04 splunk3 spamd[870]: spamd: processing message <200903302225.n2UMP4eC011711@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:25:06 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 30 15:25:06 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40492,mid=<200903302225.n2UMP4eC011711@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 15:25:06 splunk3 sendmail[23552]: n2UMP4Sf023551: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:25:24 splunk3 sendmail[23649]: n2UMPOso023649: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:26:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:26:24 splunk3 sendmail[23885]: n2UMQOve023885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:26:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 15:27:24 splunk3 sendmail[24126]: n2UMROa2024126: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:28:24 splunk3 sendmail[24361]: n2UMSOFe024361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:29:24 splunk3 sendmail[24599]: n2UMTOqN024599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:30:05 splunk3 sendmail[24759]: n2UMU5Cm024759: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302230.n2UMU4j4012327@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:30:05 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40548
|
|
Mar 30 15:30:05 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:30:05 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:30:05 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:30:05 splunk3 spamd[870]: spamd: processing message <200903302230.n2UMU4j4012327@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:30:07 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 15:30:07 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40548,mid=<200903302230.n2UMU4j4012327@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 15:30:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:30:07 splunk3 sendmail[24760]: n2UMU5Cm024759: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:30:24 splunk3 sendmail[24856]: n2UMUOwG024856: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:31:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:31:24 splunk3 sendmail[25100]: n2UMVOdv025100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:31:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:32:24 splunk3 sendmail[25340]: n2UMWO7n025340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:33:24 splunk3 sendmail[25578]: n2UMXO8T025578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:34:25 splunk3 sendmail[25811]: n2UMYP6L025811: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:35:07 splunk3 sendmail[25986]: n2UMZ7Kv025986: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302235.n2UMZ5Na013075@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:35:07 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40604
|
|
Mar 30 15:35:07 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:35:07 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:35:07 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:35:07 splunk3 spamd[870]: spamd: processing message <200903302235.n2UMZ5Na013075@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:35:09 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 15:35:09 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40604,mid=<200903302235.n2UMZ5Na013075@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 15:35:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:35:09 splunk3 sendmail[25987]: n2UMZ7Kv025986: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:35:25 splunk3 sendmail[26065]: n2UMZPkh026065: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:36:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:36:25 splunk3 sendmail[26306]: n2UMaPEo026306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:36:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:37:25 splunk3 sendmail[26548]: n2UMbPJi026548: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:38:25 splunk3 sendmail[26788]: n2UMcPdn026788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:39:25 splunk3 sendmail[27029]: n2UMdPvp027029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:40:08 splunk3 sendmail[27207]: n2UMe8jo027207: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302240.n2UMe864013709@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:40:08 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40660
|
|
Mar 30 15:40:08 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:40:08 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:40:08 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:40:08 splunk3 spamd[870]: spamd: processing message <200903302240.n2UMe864013709@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:40:11 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 15:40:11 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40660,mid=<200903302240.n2UMe864013709@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 15:40:11 splunk3 sendmail[27208]: n2UMe8jo027207: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:40:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:40:25 splunk3 sendmail[27283]: n2UMePTW027283: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:41:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:41:25 splunk3 sendmail[27523]: n2UMfPRG027523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:41:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 15:42:25 splunk3 sendmail[27763]: n2UMgPPC027763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:43:25 splunk3 sendmail[28001]: n2UMhPeA028001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:44:25 splunk3 sendmail[28236]: n2UMiPLg028236: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:45:09 splunk3 sendmail[28411]: n2UMj9Lf028411: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302245.n2UMj8AH014321@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:45:09 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40715
|
|
Mar 30 15:45:09 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:45:09 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:45:09 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:45:09 splunk3 spamd[870]: spamd: processing message <200903302245.n2UMj8AH014321@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:45:11 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 30 15:45:11 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40715,mid=<200903302245.n2UMj8AH014321@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 15:45:11 splunk3 sendmail[28412]: n2UMj9Lf028411: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:45:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:45:25 splunk3 sendmail[28491]: n2UMjPqs028491: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:46:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:46:25 splunk3 sendmail[28732]: n2UMkPTE028732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:46:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:47:25 splunk3 sendmail[28972]: n2UMlPIv028972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:48:25 splunk3 sendmail[29207]: n2UMmPxX029207: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:49:25 splunk3 sendmail[29446]: n2UMnPmC029446: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:50:09 splunk3 sendmail[29623]: n2UMo92C029623: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302250.n2UMo9iw014935@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:50:09 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40771
|
|
Mar 30 15:50:09 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:50:09 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:50:09 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:50:09 splunk3 spamd[870]: spamd: processing message <200903302250.n2UMo9iw014935@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:50:11 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 15:50:11 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40771,mid=<200903302250.n2UMo9iw014935@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 15:50:11 splunk3 sendmail[29624]: n2UMo92C029623: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:50:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:50:25 splunk3 sendmail[29701]: n2UMoPE6029701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:51:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:51:25 splunk3 sendmail[29946]: n2UMpPh2029946: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:51:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:52:25 splunk3 sendmail[30184]: n2UMqPxq030184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:53:25 splunk3 sendmail[30428]: n2UMrPo8030428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:54:25 splunk3 sendmail[30662]: n2UMsPiZ030662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:55:10 splunk3 sendmail[30840]: n2UMt9c8030840: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302255.n2UMt9lM015542@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 15:55:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40826
|
|
Mar 30 15:55:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 15:55:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 15:55:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 15:55:10 splunk3 spamd[870]: spamd: processing message <200903302255.n2UMt9lM015542@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 15:55:12 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 15:55:12 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40826,mid=<200903302255.n2UMt9lM015542@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 15:55:12 splunk3 sendmail[30841]: n2UMt9c8030840: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 15:55:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 15:55:25 splunk3 sendmail[30914]: n2UMtPmm030914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:56:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 15:56:25 splunk3 sendmail[31153]: n2UMuPgp031153: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:56:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 15:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 15:57:25 splunk3 sendmail[31397]: n2UMvPI5031397: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:58:25 splunk3 sendmail[31633]: n2UMwPub031633: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 15:59:25 splunk3 sendmail[31871]: n2UMxPbD031871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:00:04 splunk3 sendmail[32091]: n2UN04Bj032091: from=root, size=291, class=0, nrcpts=1, msgid=<200903302300.n2UN04Bj032091@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 16:00:04 splunk3 sendmail[32095]: n2UN04OQ032095: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903302300.n2UN04Bj032091@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 16:00:04 splunk3 sendmail[32091]: n2UN04Bj032091: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UN04OQ032095 Message accepted for delivery)
|
|
Mar 30 16:00:06 splunk3 sendmail[32096]: n2UN04OQ032095: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:00:10 splunk3 sendmail[32117]: n2UN0A3Q032117: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302300.n2UN0Aif016181@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:00:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40884
|
|
Mar 30 16:00:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:00:10 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 16:00:10 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 16:00:10 splunk3 sendmail[32118]: n2UN0A3Q032117: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:00:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:00:22 splunk3 sendmail[32191]: n2UN0M9m032191: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903302300.n2UN0M9m032191@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 16:00:22 splunk3 sendmail[32194]: n2UN0M9m032191: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 16:00:22 splunk3 sendmail[32194]: n2UN0M9m032191: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 16:00:22 splunk3 sendmail[32194]: n2UN0M9m032191: n2UN0M9m032194: postmaster notify: User unknown
|
|
Mar 30 16:00:23 splunk3 sendmail[32194]: n2UN0M9m032194: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:00:25 splunk3 sendmail[32211]: n2UN0PP9032211: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:01:04 splunk3 sendmail[32367]: n2UN11xa032367: from=root, size=443, class=0, nrcpts=1, msgid=<200903302301.n2UN11xa032367@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 16:01:05 splunk3 sendmail[32372]: n2UN1492032372: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903302301.n2UN11xa032367@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 16:01:05 splunk3 sendmail[32367]: n2UN11xa032367: to=root, ctladdr=root (0/0), delay=00:00:04, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UN1492032372 Message accepted for delivery)
|
|
Mar 30 16:01:06 splunk3 sendmail[32374]: n2UN1492032372: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:01:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:01:25 splunk3 sendmail[32465]: n2UN1PZT032465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:01:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:02:25 splunk3 sendmail[32701]: n2UN2P8q032701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:03:25 splunk3 sendmail[476]: n2UN3Pei000476: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:04:25 splunk3 sendmail[711]: n2UN4Por000711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:05:10 splunk3 sendmail[889]: n2UN5Aa8000889: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302305.n2UN5AqQ016869@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:05:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40948
|
|
Mar 30 16:05:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:05:10 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 16:05:10 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 16:05:10 splunk3 sendmail[890]: n2UN5Aa8000889: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:05:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:05:25 splunk3 sendmail[965]: n2UN5Ppm000965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:06:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:06:25 splunk3 sendmail[1206]: n2UN6PV4001206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:06:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:07:25 splunk3 sendmail[1450]: n2UN7Pvp001450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:08:25 splunk3 sendmail[1687]: n2UN8PDU001687: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:09:25 splunk3 sendmail[1930]: n2UN9P9o001930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:10:02 splunk3 sendmail[2182]: n2UNA2XU002182: from=root, size=292, class=0, nrcpts=1, msgid=<200903302310.n2UNA2XU002182@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 16:10:02 splunk3 sendmail[2187]: n2UNA2Cv002187: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903302310.n2UNA2XU002182@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 16:10:02 splunk3 sendmail[2182]: n2UNA2XU002182: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2UNA2Cv002187 Message accepted for delivery)
|
|
Mar 30 16:10:03 splunk3 sendmail[2188]: n2UNA2Cv002187: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:10:11 splunk3 sendmail[2217]: n2UNABIJ002217: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302310.n2UNAAcZ017480@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:10:11 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41004
|
|
Mar 30 16:10:11 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:10:11 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:10:11 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:10:11 splunk3 spamd[870]: spamd: processing message <200903302310.n2UNAAcZ017480@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:10:13 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 16:10:13 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41004,mid=<200903302310.n2UNAAcZ017480@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 16:10:13 splunk3 sendmail[2234]: n2UNABIJ002217: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:10:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:10:25 splunk3 sendmail[2290]: n2UNAPtF002290: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:11:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:11:25 splunk3 sendmail[2534]: n2UNBP1A002534: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:11:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 16:12:25 splunk3 sendmail[2785]: n2UNCPKV002785: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:13:25 splunk3 sendmail[3032]: n2UNDP9L003032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:14:25 splunk3 sendmail[3270]: n2UNEPU4003270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:15:11 splunk3 sendmail[3464]: n2UNFB6G003464: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302315.n2UNFBJp018282@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:15:11 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41061
|
|
Mar 30 16:15:11 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:15:11 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:15:11 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:15:11 splunk3 spamd[870]: spamd: processing message <200903302315.n2UNFBJp018282@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:15:13 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 16:15:13 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41061,mid=<200903302315.n2UNFBJp018282@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 16:15:13 splunk3 sendmail[3465]: n2UNFB6G003464: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:15:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:15:25 splunk3 sendmail[3521]: n2UNFPjL003521: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:16:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:16:25 splunk3 sendmail[3790]: n2UNGP0V003790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:16:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:17:25 splunk3 sendmail[4042]: n2UNHPUG004042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:18:25 splunk3 sendmail[4291]: n2UNIPY9004291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:19:25 splunk3 sendmail[4539]: n2UNJPTF004539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:20:12 splunk3 sendmail[4738]: n2UNKCmL004738: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302320.n2UNKBJM018922@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:20:12 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41116
|
|
Mar 30 16:20:12 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:20:12 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:20:12 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:20:12 splunk3 spamd[870]: spamd: processing message <200903302320.n2UNKBJM018922@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:20:14 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 16:20:14 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41116,mid=<200903302320.n2UNKBJM018922@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 16:20:14 splunk3 sendmail[4739]: n2UNKCmL004738: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:20:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:20:25 splunk3 sendmail[4796]: n2UNKPGd004796: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:21:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:21:25 splunk3 sendmail[5053]: n2UNLPqK005053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:21:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:22:25 splunk3 sendmail[5323]: n2UNMPwd005323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:23:25 splunk3 sendmail[5571]: n2UNNPK5005571: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:24:25 splunk3 sendmail[5807]: n2UNOPm0005807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:25:12 splunk3 sendmail[6004]: n2UNPC9e006004: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302325.n2UNPC00019525@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:25:12 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41172
|
|
Mar 30 16:25:12 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:25:12 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:25:12 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:25:12 splunk3 spamd[870]: spamd: processing message <200903302325.n2UNPC00019525@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:25:14 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 16:25:14 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41172,mid=<200903302325.n2UNPC00019525@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 16:25:14 splunk3 sendmail[6005]: n2UNPC9e006004: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:25:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:25:25 splunk3 sendmail[6061]: n2UNPPF0006061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:26:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:26:25 splunk3 sendmail[6301]: n2UNQPNT006301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:26:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 16:27:25 splunk3 sendmail[6544]: n2UNRPIW006544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:28:25 splunk3 sendmail[6780]: n2UNSPfa006780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:29:25 splunk3 sendmail[7013]: n2UNTPEN007013: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:30:13 splunk3 sendmail[7213]: n2UNUCeX007213: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302330.n2UNUCTN020143@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:30:13 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41228
|
|
Mar 30 16:30:13 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:30:13 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:30:13 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:30:13 splunk3 spamd[870]: spamd: processing message <200903302330.n2UNUCTN020143@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:30:15 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 16:30:15 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41228,mid=<200903302330.n2UNUCTN020143@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 16:30:15 splunk3 sendmail[7214]: n2UNUCeX007213: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:30:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:30:25 splunk3 sendmail[7269]: n2UNUPXP007269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:31:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:31:25 splunk3 sendmail[7512]: n2UNVPVJ007512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:31:27 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:32:25 splunk3 sendmail[7759]: n2UNWPOG007759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:33:25 splunk3 sendmail[8000]: n2UNXPWl008000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:34:25 splunk3 sendmail[8236]: n2UNYPR1008236: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:35:13 splunk3 sendmail[8433]: n2UNZDbD008433: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302335.n2UNZDXb020889@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:35:13 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41284
|
|
Mar 30 16:35:13 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:35:13 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:35:13 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:35:13 splunk3 spamd[870]: spamd: processing message <200903302335.n2UNZDXb020889@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:35:16 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 16:35:16 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41284,mid=<200903302335.n2UNZDXb020889@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 16:35:16 splunk3 sendmail[8434]: n2UNZDbD008433: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:35:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:35:25 splunk3 sendmail[8485]: n2UNZPaw008485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:36:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:36:25 splunk3 sendmail[8726]: n2UNaPMH008726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:36:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:37:25 splunk3 sendmail[8967]: n2UNbPOF008967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:38:25 splunk3 sendmail[9208]: n2UNcPhL009208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:39:25 splunk3 sendmail[9447]: n2UNdPVc009447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:40:14 splunk3 sendmail[9660]: n2UNeEeC009660: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302340.n2UNeDUf021525@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:40:14 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41339
|
|
Mar 30 16:40:14 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:40:14 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:40:14 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:40:14 splunk3 spamd[870]: spamd: processing message <200903302340.n2UNeDUf021525@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:40:16 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 16:40:16 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41339,mid=<200903302340.n2UNeDUf021525@virt2.int.splunk.com>,bayes=0.112613387522418,autolearn=no
|
|
Mar 30 16:40:16 splunk3 sendmail[9662]: n2UNeEeC009660: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:40:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:40:25 splunk3 sendmail[9705]: n2UNePnb009705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:41:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:41:25 splunk3 sendmail[9958]: n2UNfPH0009958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:41:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 16:42:25 splunk3 sendmail[10199]: n2UNgPeh010199: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:42:50 splunk3 sendmail[10298]: n2UNgnJr010298: from=<3-VjRSRQKBm0RZZRWPLWPced-YZcPaWjRZZRWP.NZXdaLXXPdaWfYVTe.NZX@alerts.bounces.google.com>, size=5848, class=0, nrcpts=1, msgid=<001636164ad1e6861404665ea3b8@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 30 16:42:50 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41374
|
|
Mar 30 16:42:50 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:42:50 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:42:50 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:42:50 splunk3 spamd[870]: spamd: processing message <001636164ad1e6861404665ea3b8@google.com> for spamme:501
|
|
Mar 30 16:42:52 splunk3 spamd[870]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.1 seconds, 6283 bytes.
|
|
Mar 30 16:42:52 splunk3 spamd[870]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.1,size=6283,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41374,mid=<001636164ad1e6861404665ea3b8@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Mar 30 16:42:52 splunk3 sendmail[10299]: n2UNgnJr010298: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=36064, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:42:52 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:43:25 splunk3 sendmail[10443]: n2UNhPb1010443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:44:25 splunk3 sendmail[10676]: n2UNiPto010676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:45:14 splunk3 sendmail[10880]: n2UNjEs6010880: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302345.n2UNjEGT022135@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:45:14 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41397
|
|
Mar 30 16:45:14 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:45:14 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:45:14 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:45:14 splunk3 spamd[870]: spamd: processing message <200903302345.n2UNjEGT022135@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:45:17 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 16:45:17 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41397,mid=<200903302345.n2UNjEGT022135@virt2.int.splunk.com>,bayes=0.112645741946368,autolearn=no
|
|
Mar 30 16:45:17 splunk3 sendmail[10881]: n2UNjEs6010880: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:45:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:45:25 splunk3 sendmail[10922]: n2UNjPre010922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:46:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:46:25 splunk3 sendmail[11173]: n2UNkPmA011173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:46:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:47:25 splunk3 sendmail[11420]: n2UNlPcc011420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:48:25 splunk3 sendmail[11653]: n2UNmPxc011653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:49:25 splunk3 sendmail[11893]: n2UNnPaA011893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:50:15 splunk3 sendmail[12090]: n2UNoFmI012090: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302350.n2UNoFXH022748@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:50:15 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41452
|
|
Mar 30 16:50:15 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:50:15 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:50:15 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:50:15 splunk3 spamd[870]: spamd: processing message <200903302350.n2UNoFXH022748@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:50:17 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 16:50:17 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41452,mid=<200903302350.n2UNoFXH022748@virt2.int.splunk.com>,bayes=0.112645741946368,autolearn=no
|
|
Mar 30 16:50:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:50:17 splunk3 sendmail[12091]: n2UNoFmI012090: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:50:25 splunk3 sendmail[12149]: n2UNoPEc012149: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:51:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:51:25 splunk3 sendmail[12391]: n2UNpPjW012391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:51:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:52:25 splunk3 sendmail[12641]: n2UNqPqh012641: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:53:25 splunk3 sendmail[12882]: n2UNrPg6012882: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:54:25 splunk3 sendmail[13113]: n2UNsPxt013113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:55:15 splunk3 sendmail[13355]: n2UNtFJ8013355: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903302355.n2UNtFit023355@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 16:55:15 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41508
|
|
Mar 30 16:55:15 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:55:15 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:55:15 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:55:15 splunk3 spamd[870]: spamd: processing message <200903302355.n2UNtFit023355@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 16:55:17 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 16:55:17 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41508,mid=<200903302355.n2UNtFit023355@virt2.int.splunk.com>,bayes=0.112645741946368,autolearn=no
|
|
Mar 30 16:55:17 splunk3 sendmail[13356]: n2UNtFJ8013355: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:55:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:55:25 splunk3 sendmail[13404]: n2UNtPFV013404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:56:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 16:56:25 splunk3 sendmail[13654]: n2UNuPVE013654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:56:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 16:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 16:57:25 splunk3 sendmail[13894]: n2UNvPhO013894: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:58:25 splunk3 sendmail[14130]: n2UNwPYA014130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 16:58:46 splunk3 sendmail[14172]: n2UNwZwF014172: from=<spamme@splunkit.com>, size=2742, class=0, nrcpts=1, msgid=<200903302358.n2UNwZwF014172@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=[89.131.117.251]
|
|
Mar 30 16:58:46 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41551
|
|
Mar 30 16:58:46 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 16:58:46 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 16:58:46 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 16:58:46 splunk3 spamd[870]: spamd: processing message <200903302358.n2UNwZwF014172@splunk3.splunkit.com> for spamme:501
|
|
Mar 30 16:58:50 splunk3 spamd[870]: spamd: identified spam (29.0/5.0) for spamme:501 in 4.3 seconds, 3108 bytes.
|
|
Mar 30 16:58:50 splunk3 spamd[870]: spamd: result: Y 29 - BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=4.3,size=3108,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41551,mid=<200903302358.n2UNwZwF014172@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 30 16:58:50 splunk3 sendmail[14213]: n2UNwZwF014172: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:08, xdelay=00:00:04, mailer=local, pri=33030, dsn=2.0.0, stat=Sent
|
|
Mar 30 16:58:50 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 16:59:25 splunk3 sendmail[14375]: n2UNxP6T014375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:00:04 splunk3 sendmail[14580]: n2V004HI014580: from=root, size=291, class=0, nrcpts=1, msgid=<200903310000.n2V004HI014580@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 17:00:04 splunk3 sendmail[14584]: n2V004B8014584: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310000.n2V004HI014580@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 17:00:04 splunk3 sendmail[14580]: n2V004HI014580: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V004B8014584 Message accepted for delivery)
|
|
Mar 30 17:00:05 splunk3 sendmail[14585]: n2V004B8014584: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:00:16 splunk3 sendmail[14647]: n2V00G6O014647: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310000.n2V00FDB024027@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:00:16 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41567
|
|
Mar 30 17:00:16 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:00:16 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 17:00:16 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 17:00:16 splunk3 sendmail[14648]: n2V00G6O014647: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:00:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:00:25 splunk3 sendmail[14690]: n2V00PGb014690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:00:28 splunk3 sendmail[14704]: n2V00SsU014704: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903310000.n2V00SsU014704@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 17:00:28 splunk3 sendmail[14706]: n2V00SsU014704: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 17:00:28 splunk3 sendmail[14706]: n2V00SsU014704: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 17:00:28 splunk3 sendmail[14706]: n2V00SsU014704: n2V00SsU014706: postmaster notify: User unknown
|
|
Mar 30 17:00:30 splunk3 sendmail[14706]: n2V00SsU014706: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:01:11 splunk3 sendmail[14861]: n2V011Bv014861: from=root, size=443, class=0, nrcpts=1, msgid=<200903310001.n2V011Bv014861@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 17:01:11 splunk3 sendmail[14905]: n2V01Bc3014905: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310001.n2V011Bv014861@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 17:01:11 splunk3 sendmail[14861]: n2V011Bv014861: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V01Bc3014905 Message accepted for delivery)
|
|
Mar 30 17:01:13 splunk3 sendmail[14906]: n2V01Bc3014905: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:01:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:01:25 splunk3 sendmail[14970]: n2V01Pun014970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:01:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:02:25 splunk3 sendmail[15208]: n2V02PTx015208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:03:25 splunk3 sendmail[15450]: n2V03Pet015450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:04:25 splunk3 sendmail[15679]: n2V04PNO015679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:05:16 splunk3 sendmail[15880]: n2V05GZj015880: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310005.n2V05GBX024706@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:05:16 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41630
|
|
Mar 30 17:05:16 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:05:16 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 17:05:16 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 17:05:16 splunk3 sendmail[15881]: n2V05GZj015880: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:05:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:05:25 splunk3 sendmail[15921]: n2V05PHu015921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:06:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:06:25 splunk3 sendmail[16170]: n2V06P57016170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:06:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:07:25 splunk3 sendmail[16411]: n2V07PFh016411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:08:25 splunk3 sendmail[16650]: n2V08PvT016650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:09:25 splunk3 sendmail[16893]: n2V09PrH016893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:10:03 splunk3 sendmail[17130]: n2V0A3SQ017130: from=root, size=292, class=0, nrcpts=1, msgid=<200903310010.n2V0A3SQ017130@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 17:10:03 splunk3 sendmail[17135]: n2V0A3sL017135: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310010.n2V0A3SQ017130@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 17:10:03 splunk3 sendmail[17130]: n2V0A3SQ017130: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V0A3sL017135 Message accepted for delivery)
|
|
Mar 30 17:10:04 splunk3 sendmail[17136]: n2V0A3sL017135: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:10:17 splunk3 sendmail[17200]: n2V0AHv7017200: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310010.n2V0AGPC025318@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:10:17 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41687
|
|
Mar 30 17:10:17 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:10:17 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:10:17 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:10:17 splunk3 spamd[870]: spamd: processing message <200903310010.n2V0AGPC025318@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:10:19 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 17:10:19 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41687,mid=<200903310010.n2V0AGPC025318@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:10:19 splunk3 sendmail[17201]: n2V0AHv7017200: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:10:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:10:25 splunk3 sendmail[17241]: n2V0APFK017241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:11:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:11:25 splunk3 sendmail[17497]: n2V0BPSW017497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:11:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 17:12:25 splunk3 sendmail[17737]: n2V0CPvb017737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:13:25 splunk3 sendmail[17978]: n2V0DPki017978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:14:25 splunk3 sendmail[18212]: n2V0EPLF018212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:15:17 splunk3 sendmail[18423]: n2V0FHdh018423: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310015.n2V0FHiQ026127@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:15:18 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41751
|
|
Mar 30 17:15:18 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:15:18 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:15:18 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:15:18 splunk3 spamd[870]: spamd: processing message <200903310015.n2V0FHiQ026127@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:15:20 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 17:15:20 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41751,mid=<200903310015.n2V0FHiQ026127@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:15:20 splunk3 sendmail[18424]: n2V0FHdh018423: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:15:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:15:25 splunk3 sendmail[18467]: n2V0FPkd018467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:16:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:16:25 splunk3 sendmail[18707]: n2V0GPQF018707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:16:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:17:25 splunk3 sendmail[18946]: n2V0HPf7018946: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:18:25 splunk3 sendmail[19182]: n2V0IP3j019182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:19:25 splunk3 sendmail[19419]: n2V0JPtV019419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:20:18 splunk3 sendmail[19634]: n2V0KIFH019634: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310020.n2V0KIrf026758@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:20:18 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41807
|
|
Mar 30 17:20:18 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:20:18 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:20:18 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:20:18 splunk3 spamd[870]: spamd: processing message <200903310020.n2V0KIrf026758@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:20:20 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 17:20:20 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41807,mid=<200903310020.n2V0KIrf026758@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:20:20 splunk3 sendmail[19635]: n2V0KIFH019634: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:20:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:20:25 splunk3 sendmail[19676]: n2V0KPlq019676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:21:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:21:25 splunk3 sendmail[19919]: n2V0LPlq019919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:21:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:22:25 splunk3 sendmail[20157]: n2V0MPCI020157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:23:25 splunk3 sendmail[20401]: n2V0NPsH020401: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:24:25 splunk3 sendmail[20639]: n2V0OP4T020639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:25:19 splunk3 sendmail[20847]: n2V0PJqe020847: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310025.n2V0PICN027372@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:25:19 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41862
|
|
Mar 30 17:25:19 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:25:19 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:25:19 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:25:19 splunk3 spamd[870]: spamd: processing message <200903310025.n2V0PICN027372@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:25:21 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1311 bytes.
|
|
Mar 30 17:25:21 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41862,mid=<200903310025.n2V0PICN027372@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:25:21 splunk3 sendmail[20848]: n2V0PJqe020847: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:25:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:25:25 splunk3 sendmail[20889]: n2V0PPIC020889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:26:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:26:25 splunk3 sendmail[21130]: n2V0QPlA021130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:26:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 17:27:25 splunk3 sendmail[21373]: n2V0RPMd021373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:28:25 splunk3 sendmail[21609]: n2V0SPx7021609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:29:25 splunk3 sendmail[21848]: n2V0TPuR021848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:30:20 splunk3 sendmail[22063]: n2V0UJiG022063: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310030.n2V0UJKN027992@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:30:20 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41919
|
|
Mar 30 17:30:20 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:30:20 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:30:20 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:30:20 splunk3 spamd[870]: spamd: processing message <200903310030.n2V0UJKN027992@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:30:22 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1311 bytes.
|
|
Mar 30 17:30:22 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41919,mid=<200903310030.n2V0UJKN027992@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:30:22 splunk3 sendmail[22080]: n2V0UJiG022063: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:30:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:30:25 splunk3 sendmail[22107]: n2V0UP2t022107: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:31:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:31:25 splunk3 sendmail[22352]: n2V0VP1Y022352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:31:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:32:25 splunk3 sendmail[22586]: n2V0WP00022586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:33:25 splunk3 sendmail[22826]: n2V0XP0O022826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:34:25 splunk3 sendmail[23063]: n2V0YPeh023063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:35:20 splunk3 sendmail[23292]: n2V0ZKsL023292: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310035.n2V0ZKuW028736@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:35:20 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41974
|
|
Mar 30 17:35:20 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:35:20 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:35:20 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:35:20 splunk3 spamd[870]: spamd: processing message <200903310035.n2V0ZKuW028736@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:35:22 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 17:35:22 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41974,mid=<200903310035.n2V0ZKuW028736@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:35:22 splunk3 sendmail[23293]: n2V0ZKsL023292: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:35:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:35:25 splunk3 sendmail[23316]: n2V0ZPhN023316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:36:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:36:25 splunk3 sendmail[23556]: n2V0aPft023556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:36:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:37:25 splunk3 sendmail[23797]: n2V0bPMr023797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:38:25 splunk3 sendmail[24036]: n2V0cPf0024036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:39:25 splunk3 sendmail[24273]: n2V0dPSd024273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:40:21 splunk3 sendmail[24504]: n2V0eLU0024504: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310040.n2V0eK67029374@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:40:21 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42030
|
|
Mar 30 17:40:21 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:40:21 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:40:21 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:40:21 splunk3 spamd[870]: spamd: processing message <200903310040.n2V0eK67029374@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:40:23 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 17:40:23 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42030,mid=<200903310040.n2V0eK67029374@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:40:23 splunk3 sendmail[24505]: n2V0eLU0024504: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:40:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:40:25 splunk3 sendmail[24528]: n2V0ePKi024528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:41:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:41:25 splunk3 sendmail[24773]: n2V0fP1A024773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:41:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 17:42:26 splunk3 sendmail[25012]: n2V0gPg7025012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:43:26 splunk3 sendmail[25251]: n2V0hQlh025251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:44:26 splunk3 sendmail[25488]: n2V0iQ4t025488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:45:23 splunk3 sendmail[25717]: n2V0jNbc025717: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310045.n2V0jLfA029981@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:45:23 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42086
|
|
Mar 30 17:45:23 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:45:23 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:45:23 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:45:23 splunk3 spamd[870]: spamd: processing message <200903310045.n2V0jLfA029981@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:45:25 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 17:45:25 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42086,mid=<200903310045.n2V0jLfA029981@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:45:25 splunk3 sendmail[25718]: n2V0jNbc025717: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:45:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:45:26 splunk3 sendmail[25744]: n2V0jQmq025744: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:46:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:46:26 splunk3 sendmail[25980]: n2V0kQqm025980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:46:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:47:26 splunk3 sendmail[26221]: n2V0lQPV026221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:48:26 splunk3 sendmail[26459]: n2V0mQ1A026459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:49:26 splunk3 sendmail[26698]: n2V0nQl5026698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:50:23 splunk3 sendmail[26929]: n2V0oNFq026929: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310050.n2V0oN7v030610@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:50:23 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42141
|
|
Mar 30 17:50:23 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:50:23 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:50:23 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:50:23 splunk3 spamd[870]: spamd: processing message <200903310050.n2V0oN7v030610@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:50:26 splunk3 sendmail[26952]: n2V0oQro026952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:50:26 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 17:50:26 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42141,mid=<200903310050.n2V0oN7v030610@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:50:26 splunk3 sendmail[26930]: n2V0oNFq026929: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:50:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:51:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:51:26 splunk3 sendmail[27197]: n2V0pQp9027197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:51:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:52:26 splunk3 sendmail[27436]: n2V0qQmt027436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:53:26 splunk3 sendmail[27675]: n2V0rQ2M027675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:54:26 splunk3 sendmail[27911]: n2V0sQa8027911: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:55:24 splunk3 sendmail[28142]: n2V0tOVE028142: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310055.n2V0tObg031211@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 17:55:24 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42197
|
|
Mar 30 17:55:24 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 17:55:24 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 17:55:24 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 17:55:24 splunk3 spamd[870]: spamd: processing message <200903310055.n2V0tObg031211@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 17:55:26 splunk3 sendmail[28166]: n2V0tQkc028166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:55:26 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 17:55:26 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42197,mid=<200903310055.n2V0tObg031211@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 17:55:26 splunk3 sendmail[28143]: n2V0tOVE028142: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 17:55:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 17:56:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 17:56:26 splunk3 sendmail[28404]: n2V0uQd3028404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:56:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 17:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 17:57:26 splunk3 sendmail[28648]: n2V0vQIe028648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:58:26 splunk3 sendmail[28883]: n2V0wQWU028883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 17:59:26 splunk3 sendmail[29124]: n2V0xQPK029124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:00:05 splunk3 sendmail[29340]: n2V1053H029340: from=root, size=291, class=0, nrcpts=1, msgid=<200903310100.n2V1053H029340@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 18:00:05 splunk3 sendmail[29344]: n2V105xN029344: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310100.n2V1053H029340@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 18:00:05 splunk3 sendmail[29340]: n2V1053H029340: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V105xN029344 Message accepted for delivery)
|
|
Mar 30 18:00:06 splunk3 sendmail[29346]: n2V105xN029344: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:00:07 splunk3 sendmail[29365]: n2V107Qq029365: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903310100.n2V107Qq029365@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 18:00:07 splunk3 sendmail[29367]: n2V107Qq029365: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 18:00:07 splunk3 sendmail[29367]: n2V107Qq029365: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 18:00:07 splunk3 sendmail[29367]: n2V107Qq029365: n2V107Qq029367: postmaster notify: User unknown
|
|
Mar 30 18:00:08 splunk3 sendmail[29367]: n2V107Qq029367: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:00:24 splunk3 sendmail[29456]: n2V10OsZ029456: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310100.n2V10OLN031850@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:00:24 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42261
|
|
Mar 30 18:00:24 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:00:24 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 18:00:24 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 18:00:24 splunk3 sendmail[29457]: n2V10OsZ029456: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:00:26 splunk3 sendmail[29462]: n2V10QRB029462: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:01:13 splunk3 sendmail[29604]: n2V111dx029604: from=root, size=443, class=0, nrcpts=1, msgid=<200903310101.n2V111dx029604@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 18:01:14 splunk3 sendmail[29655]: n2V11DZb029655: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310101.n2V111dx029604@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 18:01:14 splunk3 sendmail[29604]: n2V111dx029604: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V11DZb029655 Message accepted for delivery)
|
|
Mar 30 18:01:15 splunk3 sendmail[29656]: n2V11DZb029655: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:01:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:01:26 splunk3 sendmail[29717]: n2V11QZa029717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:01:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:02:26 splunk3 sendmail[29959]: n2V12Qfg029959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:03:26 splunk3 sendmail[30198]: n2V13QpU030198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:04:26 splunk3 sendmail[30434]: n2V14QgC030434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:05:25 splunk3 sendmail[30682]: n2V15Pgr030682: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310105.n2V15Or1032528@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:05:25 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42318
|
|
Mar 30 18:05:25 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:05:25 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 18:05:25 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 18:05:25 splunk3 sendmail[30683]: n2V15Pgr030682: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:05:26 splunk3 sendmail[30687]: n2V15QXb030687: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:06:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:06:25 splunk3 sendmail[30928]: n2V16PTt030928: from=<3kWzRSRQKBhk5DD5A3zA3GIH-CDG3EAN5DD5A3.1DBHEzBB3HEAJC97I.1DB@alerts.bounces.google.com>, size=2725, class=0, nrcpts=1, msgid=<0016369fa251d8ad3a04665fce08@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.187]
|
|
Mar 30 18:06:25 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42329
|
|
Mar 30 18:06:25 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:06:25 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 18:06:25 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 18:06:25 splunk3 sendmail[30929]: n2V16PTt030928: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=32937, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:06:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:06:26 splunk3 sendmail[30933]: n2V16Qlm030933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:06:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:07:26 splunk3 sendmail[31172]: n2V17Qv8031172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:08:26 splunk3 sendmail[31409]: n2V18QIl031409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:09:26 splunk3 sendmail[31653]: n2V19QQS031653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:10:02 splunk3 sendmail[31886]: n2V1A2hu031886: from=root, size=292, class=0, nrcpts=1, msgid=<200903310110.n2V1A2hu031886@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 18:10:02 splunk3 sendmail[31891]: n2V1A28V031891: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310110.n2V1A2hu031886@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 18:10:02 splunk3 sendmail[31886]: n2V1A2hu031886: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V1A28V031891 Message accepted for delivery)
|
|
Mar 30 18:10:03 splunk3 sendmail[31892]: n2V1A28V031891: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:10:25 splunk3 sendmail[32004]: n2V1AP5o032004: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903310110.n2V1APlB000680@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:10:25 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42375
|
|
Mar 30 18:10:25 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:10:25 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:10:25 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:10:25 splunk3 spamd[870]: spamd: processing message <200903310110.n2V1APlB000680@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:10:26 splunk3 sendmail[32011]: n2V1AQxP032011: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:10:28 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Mar 30 18:10:28 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42375,mid=<200903310110.n2V1APlB000680@virt2.int.splunk.com>,bayes=0.0666029264280197,autolearn=no
|
|
Mar 30 18:10:28 splunk3 sendmail[32006]: n2V1AP5o032004: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:10:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:10:38 splunk3 sendmail[32047]: n2V1AZAF032047: from=<tequilaman909@portblakely.com>, size=1047, class=0, nrcpts=1, msgid=<01c9b1e8$efc58c80$8f4a9679@tequilaman909>, proto=ESMTP, daemon=MTA, relay=[121.150.74.143]
|
|
Mar 30 18:10:38 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42378
|
|
Mar 30 18:10:38 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:10:38 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:10:38 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:10:38 splunk3 spamd[870]: spamd: processing message <01c9b1e8$efc58c80$8f4a9679@tequilaman909> for spamme:501
|
|
Mar 30 18:10:40 splunk3 spamd[870]: spamd: identified spam (14.7/5.0) for spamme:501 in 2.2 seconds, 1330 bytes.
|
|
Mar 30 18:10:40 splunk3 spamd[870]: spamd: result: Y 14 - BAYES_60,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_PH_SURBL scantime=2.2,size=1330,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42378,mid=<01c9b1e8$efc58c80$8f4a9679@tequilaman909>,bayes=0.639434719616752,autolearn=no
|
|
Mar 30 18:10:40 splunk3 sendmail[32052]: n2V1AZAF032047: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:10:40 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:11:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:11:26 splunk3 sendmail[32261]: n2V1BQjW032261: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:11:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 18:12:26 splunk3 sendmail[32500]: n2V1CQoY032500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:13:26 splunk3 sendmail[32740]: n2V1DQxA032740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:14:26 splunk3 sendmail[504]: n2V1EQls000504: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:15:26 splunk3 sendmail[752]: n2V1FQQg000752: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310115.n2V1FPRR001500@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:15:26 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42433
|
|
Mar 30 18:15:26 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:15:26 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:15:26 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:15:26 splunk3 spamd[870]: spamd: processing message <200903310115.n2V1FPRR001500@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:15:26 splunk3 sendmail[758]: n2V1FQGG000758: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:15:28 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 30 18:15:28 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42433,mid=<200903310115.n2V1FPRR001500@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 18:15:28 splunk3 sendmail[753]: n2V1FQQg000752: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:16:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:16:26 splunk3 sendmail[1000]: n2V1GQKP001000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:16:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:17:26 splunk3 sendmail[1243]: n2V1HQpc001243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:18:26 splunk3 sendmail[1479]: n2V1IQYu001479: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:19:26 splunk3 sendmail[1720]: n2V1JQqt001720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:20:26 splunk3 sendmail[1972]: n2V1KQGw001972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:20:26 splunk3 sendmail[1973]: n2V1KQKC001973: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310120.n2V1KQ3I002163@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:20:26 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42489
|
|
Mar 30 18:20:26 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:20:26 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:20:26 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:20:26 splunk3 spamd[870]: spamd: processing message <200903310120.n2V1KQ3I002163@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:20:28 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Mar 30 18:20:28 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42489,mid=<200903310120.n2V1KQ3I002163@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 18:20:28 splunk3 sendmail[1974]: n2V1KQKC001973: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:21:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:21:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:21:26 splunk3 sendmail[2222]: n2V1LQ5d002222: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:22:26 splunk3 sendmail[2459]: n2V1MQBX002459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:23:26 splunk3 sendmail[2709]: n2V1NQlN002709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:24:26 splunk3 sendmail[2956]: n2V1OQR9002956: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:25:26 splunk3 sendmail[3212]: n2V1PQX1003212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:25:27 splunk3 sendmail[3213]: n2V1PQT5003213: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310125.n2V1PQI1002768@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:25:27 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42544
|
|
Mar 30 18:25:27 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:25:27 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:25:27 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:25:27 splunk3 spamd[870]: spamd: processing message <200903310125.n2V1PQI1002768@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:25:29 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 30 18:25:29 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42544,mid=<200903310125.n2V1PQI1002768@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 18:25:29 splunk3 sendmail[3214]: n2V1PQT5003213: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:26:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:26:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:26:26 splunk3 sendmail[3460]: n2V1QQId003460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 18:27:26 splunk3 sendmail[3729]: n2V1RQFD003729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:28:26 splunk3 sendmail[3962]: n2V1SQBw003962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:29:26 splunk3 sendmail[4220]: n2V1TQc8004220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:30:26 splunk3 sendmail[4482]: n2V1UQV0004482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:30:27 splunk3 sendmail[4483]: n2V1URjd004483: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310130.n2V1UR0f003388@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:30:27 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42601
|
|
Mar 30 18:30:27 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:30:27 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:30:27 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:30:27 splunk3 spamd[870]: spamd: processing message <200903310130.n2V1UR0f003388@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:30:30 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 30 18:30:30 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42601,mid=<200903310130.n2V1UR0f003388@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 18:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:30:30 splunk3 sendmail[4484]: n2V1URjd004483: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:31:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:31:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:31:26 splunk3 sendmail[4735]: n2V1VQL8004735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:32:26 splunk3 sendmail[4981]: n2V1WQZe004981: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:33:26 splunk3 sendmail[5257]: n2V1XQC7005257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:34:26 splunk3 sendmail[5497]: n2V1YQFV005497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:35:26 splunk3 sendmail[5742]: n2V1ZQfU005742: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:35:27 splunk3 sendmail[5744]: n2V1ZRBX005744: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310135.n2V1ZRXp004151@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:35:27 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42656
|
|
Mar 30 18:35:27 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:35:27 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:35:27 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:35:27 splunk3 spamd[870]: spamd: processing message <200903310135.n2V1ZRXp004151@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:35:30 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 30 18:35:30 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42656,mid=<200903310135.n2V1ZRXp004151@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 18:35:30 splunk3 sendmail[5745]: n2V1ZRBX005744: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:36:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:36:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:36:26 splunk3 sendmail[5992]: n2V1aQPl005992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:37:26 splunk3 sendmail[6232]: n2V1bQR2006232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:38:26 splunk3 sendmail[6471]: n2V1cQ27006471: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:39:26 splunk3 sendmail[6710]: n2V1dQAn006710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:40:26 splunk3 sendmail[6960]: n2V1eQ0n006960: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:40:28 splunk3 sendmail[6961]: n2V1eSSo006961: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310140.n2V1eSAS004761@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:40:28 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42712
|
|
Mar 30 18:40:28 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:40:28 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:40:28 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:40:28 splunk3 spamd[870]: spamd: processing message <200903310140.n2V1eSAS004761@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:40:30 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 30 18:40:30 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42712,mid=<200903310140.n2V1eSAS004761@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 18:40:30 splunk3 sendmail[6962]: n2V1eSSo006961: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:40:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:41:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:41:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:41:26 splunk3 sendmail[7211]: n2V1fQR6007211: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 18:42:26 splunk3 sendmail[7449]: n2V1gQLE007449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:43:26 splunk3 sendmail[7694]: n2V1hQKS007694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:44:26 splunk3 sendmail[7931]: n2V1iQ22007931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:45:26 splunk3 sendmail[8179]: n2V1jQ01008179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:45:29 splunk3 sendmail[8198]: n2V1jTNI008198: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310145.n2V1jSdG005397@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:45:29 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42768
|
|
Mar 30 18:45:29 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:45:29 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:45:29 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:45:29 splunk3 spamd[870]: spamd: processing message <200903310145.n2V1jSdG005397@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:45:31 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 30 18:45:31 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42768,mid=<200903310145.n2V1jSdG005397@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 18:45:31 splunk3 sendmail[8199]: n2V1jTNI008198: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:45:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:46:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:46:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:46:26 splunk3 sendmail[8427]: n2V1kQME008427: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:47:26 splunk3 sendmail[8667]: n2V1lQ5f008667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:48:26 splunk3 sendmail[8903]: n2V1mQKh008903: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:49:26 splunk3 sendmail[9141]: n2V1nQtT009141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:50:26 splunk3 sendmail[9389]: n2V1oQWo009389: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:50:29 splunk3 sendmail[9409]: n2V1oTrj009409: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310150.n2V1oTrh005998@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:50:29 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42824
|
|
Mar 30 18:50:29 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:50:29 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:50:29 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:50:29 splunk3 spamd[870]: spamd: processing message <200903310150.n2V1oTrh005998@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:50:31 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 18:50:31 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42824,mid=<200903310150.n2V1oTrh005998@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 18:50:31 splunk3 sendmail[9410]: n2V1oTrj009409: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:50:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:51:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:51:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:51:26 splunk3 sendmail[9652]: n2V1pQOZ009652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:52:26 splunk3 sendmail[9890]: n2V1qQbL009890: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:53:26 splunk3 sendmail[10133]: n2V1rQso010133: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:54:26 splunk3 sendmail[10370]: n2V1sQMP010370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:55:26 splunk3 sendmail[10618]: n2V1tQ1L010618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:55:30 splunk3 sendmail[10636]: n2V1tUPp010636: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310155.n2V1tTFg006626@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 18:55:30 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42879
|
|
Mar 30 18:55:30 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 18:55:30 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 18:55:30 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 18:55:30 splunk3 spamd[870]: spamd: processing message <200903310155.n2V1tTFg006626@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 18:55:32 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 30 18:55:32 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42879,mid=<200903310155.n2V1tTFg006626@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 18:55:32 splunk3 sendmail[10637]: n2V1tUPp010636: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 18:55:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 18:56:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 18:56:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 18:56:26 splunk3 sendmail[10864]: n2V1uQ84010864: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 18:57:26 splunk3 sendmail[11104]: n2V1vQMU011104: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:58:26 splunk3 sendmail[11337]: n2V1wQ1V011337: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 18:59:26 splunk3 sendmail[11579]: n2V1xQ64011579: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:00:00 splunk3 sendmail[11714]: n2V200c1011714: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310200.n2V200dG007146@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:00:00 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42924
|
|
Mar 30 19:00:00 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:00:00 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:00:00 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:00:00 splunk3 spamd[870]: spamd: processing message <200903310200.n2V200dG007146@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:00:02 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 30 19:00:02 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42924,mid=<200903310200.n2V200dG007146@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 19:00:02 splunk3 sendmail[11715]: n2V200c1011714: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:00:04 splunk3 sendmail[11805]: n2V204Je011805: from=root, size=291, class=0, nrcpts=1, msgid=<200903310200.n2V204Je011805@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 19:00:04 splunk3 sendmail[11809]: n2V204Sr011809: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310200.n2V204Je011805@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 19:00:04 splunk3 sendmail[11805]: n2V204Je011805: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V204Sr011809 Message accepted for delivery)
|
|
Mar 30 19:00:05 splunk3 sendmail[11810]: n2V204Sr011809: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:00:12 splunk3 sendmail[11849]: n2V20CHb011849: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903310200.n2V20CHb011849@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 19:00:12 splunk3 sendmail[11851]: n2V20CHb011849: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 19:00:12 splunk3 sendmail[11851]: n2V20CHb011849: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 19:00:12 splunk3 sendmail[11851]: n2V20CHb011849: n2V20CHb011851: postmaster notify: User unknown
|
|
Mar 30 19:00:14 splunk3 sendmail[11851]: n2V20CHb011851: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:00:26 splunk3 sendmail[11921]: n2V20Qne011921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:01:09 splunk3 sendmail[12063]: n2V211gV012063: from=root, size=443, class=0, nrcpts=1, msgid=<200903310201.n2V211gV012063@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 19:01:09 splunk3 sendmail[12107]: n2V219fl012107: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310201.n2V211gV012063@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 19:01:09 splunk3 sendmail[12063]: n2V211gV012063: to=root, ctladdr=root (0/0), delay=00:00:08, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V219fl012107 Message accepted for delivery)
|
|
Mar 30 19:01:10 splunk3 sendmail[12108]: n2V219fl012107: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:01:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:01:26 splunk3 sendmail[12176]: n2V21Q5a012176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:01:26 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:02:26 splunk3 sendmail[12412]: n2V22Q0U012412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:03:26 splunk3 sendmail[12649]: n2V23Qga012649: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:04:26 splunk3 sendmail[12883]: n2V24QKI012883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:05:00 splunk3 sendmail[13023]: n2V250DS013023: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310205.n2V250N6007849@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:05:00 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42989
|
|
Mar 30 19:05:00 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:05:00 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 19:05:00 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 19:05:00 splunk3 sendmail[13024]: n2V250DS013023: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:05:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:05:26 splunk3 sendmail[13135]: n2V25Qng013135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:06:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:06:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:06:26 splunk3 sendmail[13419]: n2V26QQc013419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:07:26 splunk3 sendmail[13659]: n2V27QFU013659: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:08:26 splunk3 sendmail[13898]: n2V28Qni013898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:09:26 splunk3 sendmail[14141]: n2V29Qnu014141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:10:01 splunk3 sendmail[14273]: n2V2A0Nb014273: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310210.n2V2A0nJ008463@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:10:01 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43044
|
|
Mar 30 19:10:01 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:10:01 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 19:10:01 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 19:10:01 splunk3 sendmail[14274]: n2V2A0Nb014273: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:10:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:10:02 splunk3 sendmail[14377]: n2V2A2Ma014377: from=root, size=292, class=0, nrcpts=1, msgid=<200903310210.n2V2A2Ma014377@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 19:10:02 splunk3 sendmail[14382]: n2V2A2fH014382: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310210.n2V2A2Ma014377@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 19:10:02 splunk3 sendmail[14377]: n2V2A2Ma014377: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V2A2fH014382 Message accepted for delivery)
|
|
Mar 30 19:10:03 splunk3 sendmail[14383]: n2V2A2fH014382: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:10:26 splunk3 sendmail[14496]: n2V2AQuW014496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:11:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:11:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:11:26 splunk3 sendmail[14742]: n2V2BQJ6014742: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 19:12:26 splunk3 sendmail[14978]: n2V2CQxx014978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:13:26 splunk3 sendmail[15219]: n2V2DQa9015219: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:14:26 splunk3 sendmail[15456]: n2V2EQTX015456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:15:01 splunk3 sendmail[15593]: n2V2F1bK015593: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310215.n2V2F19w009267@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:15:01 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43102
|
|
Mar 30 19:15:01 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:15:01 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:15:01 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:15:01 splunk3 spamd[870]: spamd: processing message <200903310215.n2V2F19w009267@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:15:03 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 30 19:15:03 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43102,mid=<200903310215.n2V2F19w009267@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 19:15:03 splunk3 sendmail[15594]: n2V2F1bK015593: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:15:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:15:26 splunk3 sendmail[15710]: n2V2FQUx015710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:16:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:16:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:16:26 splunk3 sendmail[15951]: n2V2GQpx015951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:17:26 splunk3 sendmail[16184]: n2V2HQOX016184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:18:26 splunk3 sendmail[16421]: n2V2IQgg016421: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:19:26 splunk3 sendmail[16661]: n2V2JQjt016661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:20:02 splunk3 sendmail[16804]: n2V2K2l3016804: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310220.n2V2K1dZ009930@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:20:02 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43157
|
|
Mar 30 19:20:02 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:20:02 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:20:02 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:20:02 splunk3 spamd[870]: spamd: processing message <200903310220.n2V2K1dZ009930@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:20:04 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 30 19:20:04 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43157,mid=<200903310220.n2V2K1dZ009930@virt2.int.splunk.com>,bayes=0.169615648761654,autolearn=no
|
|
Mar 30 19:20:04 splunk3 sendmail[16805]: n2V2K2l3016804: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:20:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:20:26 splunk3 sendmail[16918]: n2V2KQU5016918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:21:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:21:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:21:26 splunk3 sendmail[17164]: n2V2LQpx017164: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:22:26 splunk3 sendmail[17399]: n2V2MQAv017399: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:23:26 splunk3 sendmail[17643]: n2V2NQio017643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:24:26 splunk3 sendmail[17875]: n2V2OQtS017875: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:25:02 splunk3 sendmail[18015]: n2V2P20b018015: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310225.n2V2P2Ma010538@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:25:02 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43213
|
|
Mar 30 19:25:02 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:25:02 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:25:02 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:25:02 splunk3 spamd[870]: spamd: processing message <200903310225.n2V2P2Ma010538@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:25:04 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 30 19:25:04 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43213,mid=<200903310225.n2V2P2Ma010538@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 19:25:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:25:05 splunk3 sendmail[18016]: n2V2P20b018015: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:25:26 splunk3 sendmail[18130]: n2V2PQQc018130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:26:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:26:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:26:26 splunk3 sendmail[18372]: n2V2QQ15018372: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 19:27:26 splunk3 sendmail[18614]: n2V2RQ17018614: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:28:26 splunk3 sendmail[18849]: n2V2SQ9E018849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:29:26 splunk3 sendmail[19086]: n2V2TQ7F019086: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:30:03 splunk3 sendmail[19226]: n2V2U3EZ019226: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310230.n2V2U2ej011161@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:30:03 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43269
|
|
Mar 30 19:30:03 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:30:03 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:30:03 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:30:03 splunk3 spamd[870]: spamd: processing message <200903310230.n2V2U2ej011161@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:30:05 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 19:30:05 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43269,mid=<200903310230.n2V2U2ej011161@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 19:30:05 splunk3 sendmail[19227]: n2V2U3EZ019226: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:30:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:30:26 splunk3 sendmail[19341]: n2V2UQwv019341: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:31:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:31:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:31:26 splunk3 sendmail[19586]: n2V2VQXs019586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:31:59 splunk3 sendmail[19722]: n2V2VxFw019722: from=<3noDRSRQKBjockkchaWhanpo-jknalhuckkcha.YkiolWiiaolhqjgep.Yki@alerts.bounces.google.com>, size=7074, class=0, nrcpts=1, msgid=<001636283752d9620304666100dc@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 30 19:31:59 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43296
|
|
Mar 30 19:31:59 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:31:59 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:31:59 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:31:59 splunk3 spamd[870]: spamd: processing message <001636283752d9620304666100dc@google.com> for spamme:501
|
|
Mar 30 19:32:01 splunk3 spamd[870]: spamd: clean message (-1.3/5.0) for spamme:501 in 1.6 seconds, 7509 bytes.
|
|
Mar 30 19:32:01 splunk3 spamd[870]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=1.6,size=7509,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43296,mid=<001636283752d9620304666100dc@google.com>,bayes=1.66533453693773e-16,autolearn=no
|
|
Mar 30 19:32:01 splunk3 sendmail[19723]: n2V2VxFw019722: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=37290, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:32:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:32:26 splunk3 sendmail[19828]: n2V2WQYX019828: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:33:26 splunk3 sendmail[20066]: n2V2XQ9g020066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:34:26 splunk3 sendmail[20302]: n2V2YQPR020302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:35:03 splunk3 sendmail[20458]: n2V2Z3Fo020458: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310235.n2V2Z3cc011908@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:35:03 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43326
|
|
Mar 30 19:35:03 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:35:03 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:35:03 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:35:03 splunk3 spamd[870]: spamd: processing message <200903310235.n2V2Z3cc011908@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:35:05 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 19:35:05 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43326,mid=<200903310235.n2V2Z3cc011908@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 19:35:05 splunk3 sendmail[20459]: n2V2Z3Fo020458: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:35:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:35:26 splunk3 sendmail[20557]: n2V2ZQ6E020557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:36:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:36:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:36:26 splunk3 sendmail[20799]: n2V2aQUP020799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:37:26 splunk3 sendmail[21036]: n2V2bQFn021036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:38:26 splunk3 sendmail[21273]: n2V2cQSF021273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:39:26 splunk3 sendmail[21514]: n2V2dQxx021514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:40:04 splunk3 sendmail[21672]: n2V2e4d1021672: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310240.n2V2e3K1012540@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:40:04 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43381
|
|
Mar 30 19:40:04 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:40:04 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:40:04 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:40:04 splunk3 spamd[870]: spamd: processing message <200903310240.n2V2e3K1012540@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:40:06 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 19:40:06 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43381,mid=<200903310240.n2V2e3K1012540@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 19:40:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:40:06 splunk3 sendmail[21673]: n2V2e4d1021672: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:40:26 splunk3 sendmail[21770]: n2V2eQxF021770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:41:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:41:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:41:26 splunk3 sendmail[22018]: n2V2fQbo022018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 19:42:26 splunk3 sendmail[22256]: n2V2gQ3Y022256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:43:27 splunk3 sendmail[22494]: n2V2hRRn022494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:44:27 splunk3 sendmail[22729]: n2V2iR9b022729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:45:04 splunk3 sendmail[22884]: n2V2j4aU022884: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310245.n2V2j45v013150@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:45:04 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43438
|
|
Mar 30 19:45:04 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:45:04 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:45:04 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:45:04 splunk3 spamd[870]: spamd: processing message <200903310245.n2V2j45v013150@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:45:06 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 30 19:45:06 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43438,mid=<200903310245.n2V2j45v013150@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 19:45:06 splunk3 sendmail[22885]: n2V2j4aU022884: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:45:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:45:27 splunk3 sendmail[22982]: n2V2jRhl022982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:46:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:46:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:46:27 splunk3 sendmail[23225]: n2V2kRlT023225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:47:27 splunk3 sendmail[23464]: n2V2lRlR023464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:48:27 splunk3 sendmail[23699]: n2V2mRSb023699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:49:27 splunk3 sendmail[23940]: n2V2nRgv023940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:50:05 splunk3 sendmail[24098]: n2V2o4Xu024098: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310250.n2V2o4N5013761@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:50:05 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43494
|
|
Mar 30 19:50:05 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:50:05 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:50:05 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:50:05 splunk3 spamd[870]: spamd: processing message <200903310250.n2V2o4N5013761@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:50:07 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 19:50:07 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43494,mid=<200903310250.n2V2o4N5013761@virt2.int.splunk.com>,bayes=0.112638265630628,autolearn=no
|
|
Mar 30 19:50:07 splunk3 sendmail[24099]: n2V2o4Xu024098: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:50:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:50:27 splunk3 sendmail[24195]: n2V2oRtF024195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:51:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:51:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:51:27 splunk3 sendmail[24441]: n2V2pRTs024441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:51:28 splunk3 sendmail[24458]: n2V2pSZ4024458: from=<3L4XRSRQKBs819916zv6zCED-89CzA6J19916z.x97DAv77zDA6F853E.x97@alerts.bounces.google.com>, size=2755, class=0, nrcpts=1, msgid=<0016e643486a867f6b0466614607@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.186]
|
|
Mar 30 19:51:28 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43516
|
|
Mar 30 19:51:28 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:51:28 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:51:28 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:51:28 splunk3 spamd[870]: spamd: processing message <0016e643486a867f6b0466614607@google.com> for spamme:501
|
|
Mar 30 19:51:30 splunk3 spamd[870]: spamd: clean message (-2.4/5.0) for spamme:501 in 1.7 seconds, 3186 bytes.
|
|
Mar 30 19:51:30 splunk3 spamd[870]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.7,size=3186,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43516,mid=<0016e643486a867f6b0466614607@google.com>,bayes=0,autolearn=ham
|
|
Mar 30 19:51:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:51:30 splunk3 sendmail[24461]: n2V2pSZ4024458: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32967, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:52:27 splunk3 sendmail[24678]: n2V2qR4U024678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:53:27 splunk3 sendmail[24920]: n2V2rRN2024920: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:54:27 splunk3 sendmail[25157]: n2V2sRZV025157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:55:05 splunk3 sendmail[25314]: n2V2t5nJ025314: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310255.n2V2t5Dg014371@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 19:55:05 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43550
|
|
Mar 30 19:55:05 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 19:55:05 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 19:55:05 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 19:55:05 splunk3 spamd[870]: spamd: processing message <200903310255.n2V2t5Dg014371@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 19:55:07 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 19:55:07 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43550,mid=<200903310255.n2V2t5Dg014371@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 19:55:07 splunk3 sendmail[25315]: n2V2t5nJ025314: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 19:55:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 19:55:27 splunk3 sendmail[25411]: n2V2tRuu025411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:56:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 19:56:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 19:56:27 splunk3 sendmail[25654]: n2V2uRbL025654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 19:57:27 splunk3 sendmail[25895]: n2V2vRNq025895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:58:27 splunk3 sendmail[26128]: n2V2wR6c026128: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 19:59:27 splunk3 sendmail[26367]: n2V2xRme026367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:00:04 splunk3 sendmail[26587]: n2V304YA026587: from=root, size=291, class=0, nrcpts=1, msgid=<200903310300.n2V304YA026587@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 20:00:04 splunk3 sendmail[26591]: n2V304dg026591: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310300.n2V304YA026587@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 20:00:04 splunk3 sendmail[26587]: n2V304YA026587: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V304dg026591 Message accepted for delivery)
|
|
Mar 30 20:00:05 splunk3 sendmail[26592]: n2V304dg026591: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:00:05 splunk3 sendmail[26597]: n2V305wj026597: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310300.n2V3054C015011@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:00:05 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43608
|
|
Mar 30 20:00:05 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:00:05 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 20:00:05 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 20:00:05 splunk3 sendmail[26598]: n2V305wj026597: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:00:19 splunk3 sendmail[26673]: n2V30JJ6026673: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903310300.n2V30JJ6026673@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 20:00:19 splunk3 sendmail[26675]: n2V30JJ6026673: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 20:00:19 splunk3 sendmail[26675]: n2V30JJ6026673: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 20:00:19 splunk3 sendmail[26675]: n2V30JJ6026673: n2V30JJ6026675: postmaster notify: User unknown
|
|
Mar 30 20:00:20 splunk3 sendmail[26675]: n2V30JJ6026675: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:00:27 splunk3 sendmail[26708]: n2V30RfN026708: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:01:16 splunk3 sendmail[26851]: n2V311XK026851: from=root, size=443, class=0, nrcpts=1, msgid=<200903310301.n2V311XK026851@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 20:01:16 splunk3 sendmail[26914]: n2V31GR0026914: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310301.n2V311XK026851@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 20:01:16 splunk3 sendmail[26851]: n2V311XK026851: to=root, ctladdr=root (0/0), delay=00:00:15, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V31GR0026914 Message accepted for delivery)
|
|
Mar 30 20:01:17 splunk3 sendmail[26915]: n2V31GR0026914: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:01:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:01:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:01:27 splunk3 sendmail[26968]: n2V31R4v026968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:02:27 splunk3 sendmail[27202]: n2V32R6G027202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:03:27 splunk3 sendmail[27440]: n2V33RC7027440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:04:27 splunk3 sendmail[27677]: n2V34Rgl027677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:05:06 splunk3 sendmail[27832]: n2V356tg027832: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310305.n2V356TK015697@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:05:06 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43671
|
|
Mar 30 20:05:06 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:05:06 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 20:05:06 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 20:05:06 splunk3 sendmail[27833]: n2V356tg027832: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:05:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:05:27 splunk3 sendmail[27928]: n2V35Rdv027928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:06:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:06:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:06:27 splunk3 sendmail[28171]: n2V36RcG028171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:07:27 splunk3 sendmail[28409]: n2V37RWC028409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:08:27 splunk3 sendmail[28647]: n2V38R9a028647: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:09:27 splunk3 sendmail[28889]: n2V39RPj028889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:10:02 splunk3 sendmail[29123]: n2V3A2Bg029123: from=root, size=292, class=0, nrcpts=1, msgid=<200903310310.n2V3A2Bg029123@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 20:10:02 splunk3 sendmail[29128]: n2V3A25V029128: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310310.n2V3A2Bg029123@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 20:10:02 splunk3 sendmail[29123]: n2V3A2Bg029123: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V3A25V029128 Message accepted for delivery)
|
|
Mar 30 20:10:04 splunk3 sendmail[29129]: n2V3A25V029128: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:10:07 splunk3 sendmail[29151]: n2V3A6cD029151: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310310.n2V3A6u7016308@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:10:07 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43728
|
|
Mar 30 20:10:07 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:10:07 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:10:07 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:10:07 splunk3 spamd[870]: spamd: processing message <200903310310.n2V3A6u7016308@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:10:09 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 20:10:09 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43728,mid=<200903310310.n2V3A6u7016308@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:10:09 splunk3 sendmail[29152]: n2V3A6cD029151: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:10:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:10:27 splunk3 sendmail[29248]: n2V3ARsZ029248: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:11:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:11:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:11:27 splunk3 sendmail[29495]: n2V3BRdS029495: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 20:12:27 splunk3 sendmail[29730]: n2V3CRXT029730: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:13:27 splunk3 sendmail[29968]: n2V3DRAL029968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:14:27 splunk3 sendmail[30204]: n2V3ER0O030204: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:15:07 splunk3 sendmail[30362]: n2V3F7Np030362: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310315.n2V3F7uB017113@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:15:07 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43784
|
|
Mar 30 20:15:07 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:15:07 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:15:07 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:15:07 splunk3 spamd[870]: spamd: processing message <200903310315.n2V3F7uB017113@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:15:09 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 20:15:09 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43784,mid=<200903310315.n2V3F7uB017113@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:15:10 splunk3 sendmail[30363]: n2V3F7Np030362: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:15:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:15:27 splunk3 sendmail[30459]: n2V3FRXN030459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:16:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:16:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:16:27 splunk3 sendmail[30702]: n2V3GRLl030702: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:17:27 splunk3 sendmail[30941]: n2V3HRDA030941: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:18:27 splunk3 sendmail[31176]: n2V3IRUJ031176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:19:27 splunk3 sendmail[31413]: n2V3JRx9031413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:20:08 splunk3 sendmail[31592]: n2V3K8Ms031592: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310320.n2V3K7AV017744@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:20:08 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43840
|
|
Mar 30 20:20:08 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:20:08 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:20:08 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:20:08 splunk3 spamd[870]: spamd: processing message <200903310320.n2V3K7AV017744@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:20:10 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 20:20:10 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43840,mid=<200903310320.n2V3K7AV017744@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:20:10 splunk3 sendmail[31593]: n2V3K8Ms031592: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:20:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:20:27 splunk3 sendmail[31668]: n2V3KRMo031668: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:21:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:21:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:21:27 splunk3 sendmail[31917]: n2V3LRln031917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:22:27 splunk3 sendmail[32152]: n2V3MRmS032152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:23:27 splunk3 sendmail[32395]: n2V3NRLZ032395: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:24:27 splunk3 sendmail[32632]: n2V3OR6t032632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:25:09 splunk3 sendmail[342]: n2V3P9Tp000342: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310325.n2V3P844018356@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:25:09 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43895
|
|
Mar 30 20:25:09 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:25:09 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:25:09 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:25:09 splunk3 spamd[870]: spamd: processing message <200903310325.n2V3P844018356@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:25:11 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 20:25:11 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43895,mid=<200903310325.n2V3P844018356@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:25:11 splunk3 sendmail[343]: n2V3P9Tp000342: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:25:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:25:27 splunk3 sendmail[417]: n2V3PRYR000417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:26:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:26:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:26:27 splunk3 sendmail[660]: n2V3QRvi000660: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 20:27:27 splunk3 sendmail[900]: n2V3RRLx000900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:28:27 splunk3 sendmail[1135]: n2V3SRkZ001135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:29:27 splunk3 sendmail[1376]: n2V3TRQN001376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:30:09 splunk3 sendmail[1557]: n2V3U9Hf001557: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310330.n2V3U9Jk018978@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:30:09 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43952
|
|
Mar 30 20:30:09 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:30:09 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:30:09 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:30:09 splunk3 spamd[870]: spamd: processing message <200903310330.n2V3U9Jk018978@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:30:11 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 30 20:30:11 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43952,mid=<200903310330.n2V3U9Jk018978@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:30:11 splunk3 sendmail[1558]: n2V3U9Hf001557: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:30:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:30:27 splunk3 sendmail[1633]: n2V3URCO001633: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:31:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:31:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:31:27 splunk3 sendmail[1881]: n2V3VR4e001881: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:32:27 splunk3 sendmail[2118]: n2V3WRZk002118: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:33:27 splunk3 sendmail[2356]: n2V3XRM0002356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:34:27 splunk3 sendmail[2595]: n2V3YRGH002595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:35:10 splunk3 sendmail[2783]: n2V3ZAfH002783: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310335.n2V3Z9Vs019728@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:35:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44008
|
|
Mar 30 20:35:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:35:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:35:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:35:10 splunk3 spamd[870]: spamd: processing message <200903310335.n2V3Z9Vs019728@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:35:12 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 20:35:12 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44008,mid=<200903310335.n2V3Z9Vs019728@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:35:12 splunk3 sendmail[2784]: n2V3ZAfH002783: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:35:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:35:27 splunk3 sendmail[2859]: n2V3ZR0D002859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:36:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:36:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:36:27 splunk3 sendmail[3113]: n2V3aRAq003113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:37:27 splunk3 sendmail[3354]: n2V3bRKj003354: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:38:27 splunk3 sendmail[3611]: n2V3cRJY003611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:39:27 splunk3 sendmail[3862]: n2V3dRLE003862: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:40:10 splunk3 sendmail[4051]: n2V3eA71004051: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310340.n2V3eAgv020365@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:40:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44063
|
|
Mar 30 20:40:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:40:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:40:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:40:10 splunk3 spamd[870]: spamd: processing message <200903310340.n2V3eAgv020365@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:40:12 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 20:40:12 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44063,mid=<200903310340.n2V3eAgv020365@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:40:12 splunk3 sendmail[4052]: n2V3eA71004051: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:40:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:40:27 splunk3 sendmail[4129]: n2V3eRTH004129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:41:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:41:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:41:27 splunk3 sendmail[4392]: n2V3fRsb004392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 20:42:27 splunk3 sendmail[4630]: n2V3gRSn004630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:43:27 splunk3 sendmail[4872]: n2V3hRgR004872: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:44:27 splunk3 sendmail[5116]: n2V3iRAn005116: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:45:10 splunk3 sendmail[5331]: n2V3jARw005331: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310345.n2V3jA6v020973@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:45:10 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44120
|
|
Mar 30 20:45:10 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:45:10 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:45:10 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:45:11 splunk3 spamd[870]: spamd: processing message <200903310345.n2V3jA6v020973@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:45:13 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 30 20:45:13 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44120,mid=<200903310345.n2V3jA6v020973@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:45:13 splunk3 sendmail[5332]: n2V3jARw005331: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:45:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:45:27 splunk3 sendmail[5411]: n2V3jRpD005411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:46:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:46:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:46:27 splunk3 sendmail[5653]: n2V3kRXd005653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:47:27 splunk3 sendmail[5892]: n2V3lR1d005892: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:48:27 splunk3 sendmail[6127]: n2V3mRdf006127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:49:27 splunk3 sendmail[6366]: n2V3nRtE006366: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:50:11 splunk3 sendmail[6548]: n2V3oBsR006548: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310350.n2V3oBjD021584@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:50:11 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44175
|
|
Mar 30 20:50:11 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:50:11 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:50:11 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:50:11 splunk3 spamd[870]: spamd: processing message <200903310350.n2V3oBjD021584@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:50:13 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 20:50:13 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44175,mid=<200903310350.n2V3oBjD021584@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:50:13 splunk3 sendmail[6549]: n2V3oBsR006548: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:50:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:50:27 splunk3 sendmail[6622]: n2V3oRtO006622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:51:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:51:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:51:27 splunk3 sendmail[6869]: n2V3pRTf006869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:52:27 splunk3 sendmail[7104]: n2V3qRqB007104: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:53:27 splunk3 sendmail[7345]: n2V3rRHN007345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:54:27 splunk3 sendmail[7589]: n2V3sR28007589: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:55:13 splunk3 sendmail[7787]: n2V3tDIZ007787: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310355.n2V3tCW7022191@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 20:55:13 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44231
|
|
Mar 30 20:55:13 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 20:55:13 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 20:55:13 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 20:55:13 splunk3 spamd[870]: spamd: processing message <200903310355.n2V3tCW7022191@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 20:55:15 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 20:55:15 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44231,mid=<200903310355.n2V3tCW7022191@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 20:55:15 splunk3 sendmail[7788]: n2V3tDIZ007787: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 20:55:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 20:55:27 splunk3 sendmail[7843]: n2V3tRKv007843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:56:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 20:56:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 20:56:27 splunk3 sendmail[8101]: n2V3uREW008101: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 20:57:27 splunk3 sendmail[8340]: n2V3vRNF008340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:58:27 splunk3 sendmail[8575]: n2V3wRuh008575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 20:59:27 splunk3 sendmail[8816]: n2V3xRMO008816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:00:04 splunk3 sendmail[9018]: n2V404aB009018: from=root, size=291, class=0, nrcpts=1, msgid=<200903310400.n2V404aB009018@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 21:00:04 splunk3 sendmail[9024]: n2V404dW009024: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310400.n2V404aB009018@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 21:00:04 splunk3 sendmail[9018]: n2V404aB009018: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V404dW009024 Message accepted for delivery)
|
|
Mar 30 21:00:06 splunk3 sendmail[9025]: n2V404dW009024: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:00:14 splunk3 sendmail[9068]: n2V40ENq009068: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310400.n2V40EOw022827@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:00:15 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44289
|
|
Mar 30 21:00:15 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:00:15 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 21:00:15 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 21:00:15 splunk3 sendmail[9069]: n2V40ENq009068: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:00:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:00:24 splunk3 sendmail[9123]: n2V40O8U009123: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903310400.n2V40O8U009123@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 21:00:24 splunk3 sendmail[9125]: n2V40O8U009123: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 21:00:24 splunk3 sendmail[9125]: n2V40O8U009123: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 30 21:00:24 splunk3 sendmail[9125]: n2V40O8U009123: n2V40O8U009125: postmaster notify: User unknown
|
|
Mar 30 21:00:26 splunk3 sendmail[9125]: n2V40O8U009125: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:00:27 splunk3 sendmail[9156]: n2V40RaH009156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:01:03 splunk3 sendmail[9282]: n2V411J3009282: from=root, size=443, class=0, nrcpts=1, msgid=<200903310401.n2V411J3009282@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 21:01:03 splunk3 sendmail[9302]: n2V413UU009302: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310401.n2V411J3009282@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 21:01:03 splunk3 sendmail[9282]: n2V411J3009282: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V413UU009302 Message accepted for delivery)
|
|
Mar 30 21:01:04 splunk3 sendmail[9303]: n2V413UU009302: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:01:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:01:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:01:27 splunk3 sendmail[9414]: n2V41RS4009414: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:02:27 splunk3 sendmail[9660]: n2V42RvV009660: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:03:27 splunk3 sendmail[9900]: n2V43RbV009900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:04:27 splunk3 sendmail[10135]: n2V44RhE010135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:05:15 splunk3 sendmail[10317]: n2V45Fc0010317: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310405.n2V45Fjs023538@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:05:15 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44352
|
|
Mar 30 21:05:15 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:05:15 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 21:05:15 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 21:05:15 splunk3 sendmail[10318]: n2V45Fc0010317: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:05:27 splunk3 sendmail[10388]: n2V45R6K010388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:06:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:06:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:06:27 splunk3 sendmail[10633]: n2V46RBX010633: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:07:27 splunk3 sendmail[10869]: n2V47Rmn010869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:08:27 splunk3 sendmail[11105]: n2V48RKA011105: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:09:27 splunk3 sendmail[11348]: n2V49R2l011348: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:10:02 splunk3 sendmail[11581]: n2V4A2Dm011581: from=root, size=292, class=0, nrcpts=1, msgid=<200903310410.n2V4A2Dm011581@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 21:10:03 splunk3 sendmail[11586]: n2V4A2MS011586: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310410.n2V4A2Dm011581@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 21:10:03 splunk3 sendmail[11581]: n2V4A2Dm011581: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V4A2MS011586 Message accepted for delivery)
|
|
Mar 30 21:10:04 splunk3 sendmail[11587]: n2V4A2MS011586: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:10:15 splunk3 sendmail[11635]: n2V4AFLo011635: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310410.n2V4AF5w024152@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:10:16 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44409
|
|
Mar 30 21:10:16 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:10:16 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:10:16 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:10:16 splunk3 spamd[870]: spamd: processing message <200903310410.n2V4AF5w024152@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:10:18 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 21:10:18 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44409,mid=<200903310410.n2V4AF5w024152@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 21:10:18 splunk3 sendmail[11636]: n2V4AFLo011635: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:10:27 splunk3 sendmail[11705]: n2V4ARgS011705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:11:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:11:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:11:27 splunk3 sendmail[11951]: n2V4BR3Y011951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 21:12:27 splunk3 sendmail[12188]: n2V4CRGH012188: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:13:27 splunk3 sendmail[12432]: n2V4DRbr012432: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:14:27 splunk3 sendmail[12666]: n2V4ERJ8012666: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:15:16 splunk3 sendmail[12848]: n2V4FGsK012848: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310415.n2V4FGLI024948@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:15:16 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44465
|
|
Mar 30 21:15:16 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:15:16 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:15:16 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:15:16 splunk3 spamd[870]: spamd: processing message <200903310415.n2V4FGLI024948@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:15:18 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 30 21:15:18 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44465,mid=<200903310415.n2V4FGLI024948@virt2.int.splunk.com>,bayes=0.112670618431593,autolearn=no
|
|
Mar 30 21:15:18 splunk3 sendmail[12849]: n2V4FGsK012848: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:15:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:15:27 splunk3 sendmail[12919]: n2V4FRf8012919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:16:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:16:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:16:27 splunk3 sendmail[13162]: n2V4GRLG013162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:17:27 splunk3 sendmail[13441]: n2V4HRCt013441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:18:27 splunk3 sendmail[13676]: n2V4IRlv013676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:19:27 splunk3 sendmail[13917]: n2V4JRM2013917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:19:32 splunk3 sendmail[13879]: n2V4JNLf013879: from=<keenan-otomassa@EDSD.ORG>, size=6628, class=0, nrcpts=1, msgid=<200903310419.n2V4JNLf013879@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=[201.236.228.178]
|
|
Mar 30 21:19:32 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44515
|
|
Mar 30 21:19:32 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:19:32 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:19:32 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:19:32 splunk3 spamd[870]: spamd: processing message <200903310419.n2V4JNLf013879@splunk3.splunkit.com> for spamme:501
|
|
Mar 30 21:19:39 splunk3 spamd[870]: spamd: identified spam (27.4/5.0) for spamme:501 in 6.6 seconds, 7009 bytes.
|
|
Mar 30 21:19:39 splunk3 spamd[870]: spamd: result: Y 27 - BAYES_50,HTML_MESSAGE,INVESTMENT_ADVICE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL,URI_NOVOWEL scantime=6.6,size=7009,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44515,mid=<200903310419.n2V4JNLf013879@splunk3.splunkit.com>,bayes=0.507891898017264,autolearn=spam
|
|
Mar 30 21:19:39 splunk3 sendmail[13935]: n2V4JNLf013879: to=<spamme@splunkit.com>, delay=00:00:12, xdelay=00:00:07, mailer=local, pri=36922, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:19:39 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:20:17 splunk3 sendmail[14122]: n2V4KHie014122: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310420.n2V4KGB3025584@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:20:17 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44522
|
|
Mar 30 21:20:17 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:20:17 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:20:17 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:20:17 splunk3 spamd[870]: spamd: processing message <200903310420.n2V4KGB3025584@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:20:19 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 21:20:19 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44522,mid=<200903310420.n2V4KGB3025584@virt2.int.splunk.com>,bayes=0.112663141563978,autolearn=no
|
|
Mar 30 21:20:19 splunk3 sendmail[14123]: n2V4KHie014122: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:20:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:20:27 splunk3 sendmail[14180]: n2V4KRi5014180: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:21:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:21:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:21:27 splunk3 sendmail[14427]: n2V4LRlR014427: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:22:27 splunk3 sendmail[14659]: n2V4MRsP014659: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:23:27 splunk3 sendmail[14900]: n2V4NRqZ014900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:24:27 splunk3 sendmail[15136]: n2V4ORNi015136: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:25:17 splunk3 sendmail[15335]: n2V4PHOt015335: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310425.n2V4PHxf026198@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:25:17 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44577
|
|
Mar 30 21:25:17 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:25:17 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:25:17 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:25:17 splunk3 spamd[870]: spamd: processing message <200903310425.n2V4PHxf026198@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:25:19 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 21:25:19 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44577,mid=<200903310425.n2V4PHxf026198@virt2.int.splunk.com>,bayes=0.112663141563978,autolearn=no
|
|
Mar 30 21:25:19 splunk3 sendmail[15336]: n2V4PHOt015335: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:25:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:25:27 splunk3 sendmail[15388]: n2V4PR6W015388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:26:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:26:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:26:27 splunk3 sendmail[15630]: n2V4QR77015630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 21:27:27 splunk3 sendmail[15871]: n2V4RR2Q015871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:28:27 splunk3 sendmail[16103]: n2V4SRnk016103: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:29:27 splunk3 sendmail[16339]: n2V4TRj7016339: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:30:18 splunk3 sendmail[16539]: n2V4UI8l016539: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310430.n2V4UHb0026814@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:30:18 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44634
|
|
Mar 30 21:30:18 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:30:18 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:30:18 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:30:18 splunk3 spamd[870]: spamd: processing message <200903310430.n2V4UHb0026814@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:30:20 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 30 21:30:20 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44634,mid=<200903310430.n2V4UHb0026814@virt2.int.splunk.com>,bayes=0.112663141563978,autolearn=no
|
|
Mar 30 21:30:20 splunk3 sendmail[16540]: n2V4UI8l016539: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:30:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:30:27 splunk3 sendmail[16594]: n2V4UR1J016594: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:31:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:31:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:31:27 splunk3 sendmail[16839]: n2V4VRXv016839: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:32:27 splunk3 sendmail[17073]: n2V4WREn017073: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:33:27 splunk3 sendmail[17313]: n2V4XRnw017313: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:34:27 splunk3 sendmail[17550]: n2V4YRgH017550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:35:19 splunk3 sendmail[17749]: n2V4ZJad017749: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310435.n2V4ZIoJ027561@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:35:19 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44689
|
|
Mar 30 21:35:19 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:35:19 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:35:19 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:35:19 splunk3 spamd[870]: spamd: processing message <200903310435.n2V4ZIoJ027561@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:35:21 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 30 21:35:21 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44689,mid=<200903310435.n2V4ZIoJ027561@virt2.int.splunk.com>,bayes=0.112663141563978,autolearn=no
|
|
Mar 30 21:35:21 splunk3 sendmail[17750]: n2V4ZJad017749: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:35:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:35:27 splunk3 sendmail[17796]: n2V4ZRWR017796: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:36:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:36:25 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:36:27 splunk3 sendmail[18043]: n2V4aRjq018043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:37:27 splunk3 sendmail[18282]: n2V4bRcm018282: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:38:27 splunk3 sendmail[18522]: n2V4cRuC018522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:39:27 splunk3 sendmail[18762]: n2V4dRoq018762: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:40:19 splunk3 sendmail[18966]: n2V4eJX9018966: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310440.n2V4eJ8d028195@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:40:19 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44745
|
|
Mar 30 21:40:19 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:40:19 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:40:19 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:40:19 splunk3 spamd[870]: spamd: processing message <200903310440.n2V4eJ8d028195@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:40:21 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1311 bytes.
|
|
Mar 30 21:40:21 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44745,mid=<200903310440.n2V4eJ8d028195@virt2.int.splunk.com>,bayes=0.112663141563978,autolearn=no
|
|
Mar 30 21:40:21 splunk3 sendmail[18967]: n2V4eJX9018966: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:40:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:40:27 splunk3 sendmail[19008]: n2V4eRNC019008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:41:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:41:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:41:27 splunk3 sendmail[19263]: n2V4fRw0019263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 21:42:27 splunk3 sendmail[19499]: n2V4gRk4019499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:43:27 splunk3 sendmail[19736]: n2V4hRBA019736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:44:27 splunk3 sendmail[19971]: n2V4iRJf019971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:45:20 splunk3 sendmail[20174]: n2V4jK87020174: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310445.n2V4jKCB028806@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:45:20 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44802
|
|
Mar 30 21:45:20 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:45:20 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:45:20 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:45:20 splunk3 spamd[870]: spamd: processing message <200903310445.n2V4jKCB028806@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:45:22 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 21:45:22 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44802,mid=<200903310445.n2V4jKCB028806@virt2.int.splunk.com>,bayes=0.112663141563978,autolearn=no
|
|
Mar 30 21:45:22 splunk3 sendmail[20175]: n2V4jK87020174: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:45:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:45:27 splunk3 sendmail[20216]: n2V4jRfg020216: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:46:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:46:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:46:27 splunk3 sendmail[20467]: n2V4kRfQ020467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:47:27 splunk3 sendmail[20706]: n2V4lRa7020706: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:48:27 splunk3 sendmail[20943]: n2V4mRgE020943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:49:27 splunk3 sendmail[21182]: n2V4nR5A021182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:49:47 splunk3 sendmail[21227]: n2V4nd12021227: from=<tennisqueen5@planitsolutions.com>, size=1104, class=0, nrcpts=1, msgid=<01c9b1d5$40cb8580$0288c05b@tennisqueen5>, proto=ESMTP, daemon=MTA, relay=juniper1-ge0-1-110.gcn.ua [91.192.136.2]
|
|
Mar 30 21:49:47 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44853
|
|
Mar 30 21:49:47 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:49:47 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:49:47 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:49:47 splunk3 spamd[870]: spamd: processing message <01c9b1d5$40cb8580$0288c05b@tennisqueen5> for spamme:501
|
|
Mar 30 21:49:49 splunk3 spamd[870]: spamd: identified spam (23.3/5.0) for spamme:501 in 2.4 seconds, 1430 bytes.
|
|
Mar 30 21:49:49 splunk3 spamd[870]: spamd: result: Y 23 - BAYES_80,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_PH_SURBL,URIBL_WS_SURBL scantime=2.4,size=1430,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44853,mid=<01c9b1d5$40cb8580$0288c05b@tennisqueen5>,bayes=0.904995769157171,autolearn=spam
|
|
Mar 30 21:49:49 splunk3 sendmail[21264]: n2V4nd12021227: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:02, mailer=local, pri=31322, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:49:49 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:50:20 splunk3 sendmail[21393]: n2V4oKYc021393: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310450.n2V4oKk9029420@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:50:20 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44858
|
|
Mar 30 21:50:20 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:50:20 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:50:20 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:50:20 splunk3 spamd[870]: spamd: processing message <200903310450.n2V4oKk9029420@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:50:22 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 30 21:50:22 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44858,mid=<200903310450.n2V4oKk9029420@virt2.int.splunk.com>,bayes=0.11265566552016,autolearn=no
|
|
Mar 30 21:50:22 splunk3 sendmail[21394]: n2V4oKYc021393: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:50:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:50:27 splunk3 sendmail[21433]: n2V4oRw9021433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:51:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:51:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:51:28 splunk3 sendmail[21690]: n2V4pRnL021690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:52:28 splunk3 sendmail[21925]: n2V4qSAG021925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:53:28 splunk3 sendmail[22169]: n2V4rShG022169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:54:28 splunk3 sendmail[22405]: n2V4sSi0022405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:55:21 splunk3 sendmail[22607]: n2V4tLvS022607: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310455.n2V4tKY7030023@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 21:55:21 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44914
|
|
Mar 30 21:55:21 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 21:55:21 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 21:55:21 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 21:55:21 splunk3 spamd[870]: spamd: processing message <200903310455.n2V4tKY7030023@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 21:55:23 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 21:55:23 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44914,mid=<200903310455.n2V4tKY7030023@virt2.int.splunk.com>,bayes=0.11265566552016,autolearn=no
|
|
Mar 30 21:55:23 splunk3 sendmail[22624]: n2V4tLvS022607: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 21:55:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 21:55:28 splunk3 sendmail[22651]: n2V4tS35022651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:56:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 21:56:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 21:56:28 splunk3 sendmail[22901]: n2V4uSwn022901: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 21:57:28 splunk3 sendmail[23141]: n2V4vSlQ023141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:58:28 splunk3 sendmail[23375]: n2V4wSVF023375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 21:59:28 splunk3 sendmail[23615]: n2V4xSZT023615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:00:00 splunk3 sendmail[23749]: n2V500Jr023749: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903310500.n2V500Jr023749@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 22:00:00 splunk3 sendmail[23751]: n2V500Jr023749: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 22:00:00 splunk3 sendmail[23751]: n2V500Jr023749: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 30 22:00:00 splunk3 sendmail[23751]: n2V500Jr023749: n2V500Jr023751: postmaster notify: User unknown
|
|
Mar 30 22:00:01 splunk3 sendmail[23751]: n2V500Jr023751: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:00:04 splunk3 sendmail[23848]: n2V504WE023848: from=root, size=291, class=0, nrcpts=1, msgid=<200903310500.n2V504WE023848@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 22:00:04 splunk3 sendmail[23852]: n2V5042x023852: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310500.n2V504WE023848@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 22:00:04 splunk3 sendmail[23848]: n2V504WE023848: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V5042x023852 Message accepted for delivery)
|
|
Mar 30 22:00:06 splunk3 sendmail[23853]: n2V5042x023852: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:00:21 splunk3 sendmail[23935]: n2V50L09023935: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310500.n2V50LKd030667@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:00:22 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44986
|
|
Mar 30 22:00:22 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:00:22 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 22:00:22 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 22:00:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:00:22 splunk3 sendmail[23936]: n2V50L09023935: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:00:28 splunk3 sendmail[23958]: n2V50S1v023958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:01:08 splunk3 sendmail[24103]: n2V511DF024103: from=root, size=443, class=0, nrcpts=1, msgid=<200903310501.n2V511DF024103@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 22:01:08 splunk3 sendmail[24129]: n2V518rp024129: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310501.n2V511DF024103@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 22:01:08 splunk3 sendmail[24103]: n2V511DF024103: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V518rp024129 Message accepted for delivery)
|
|
Mar 30 22:01:10 splunk3 sendmail[24130]: n2V518rp024129: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:01:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:01:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:01:28 splunk3 sendmail[24217]: n2V51SXI024217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:02:28 splunk3 sendmail[24453]: n2V52SPA024453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:03:28 splunk3 sendmail[24692]: n2V53Spp024692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:04:28 splunk3 sendmail[24926]: n2V54S5F024926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:05:22 splunk3 sendmail[25155]: n2V55MaK025155: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310505.n2V55MQs031348@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:05:22 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45043
|
|
Mar 30 22:05:22 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:05:22 splunk3 spamd[870]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 22:05:22 splunk3 spamd[870]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 22:05:22 splunk3 sendmail[25156]: n2V55MaK025155: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:05:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:05:28 splunk3 sendmail[25179]: n2V55SBX025179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:06:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:06:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:06:28 splunk3 sendmail[25423]: n2V56SxE025423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:07:28 splunk3 sendmail[25661]: n2V57S3s025661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:08:28 splunk3 sendmail[25900]: n2V58S1C025900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:09:05 splunk3 sendmail[20328]: n2V4jund020328: static-dsl-141.87-197-124.telecom.sk [87.197.124.141] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:09:28 splunk3 sendmail[26144]: n2V59See026144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:10:02 splunk3 sendmail[26386]: n2V5A2J8026386: from=root, size=292, class=0, nrcpts=1, msgid=<200903310510.n2V5A2J8026386@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 22:10:02 splunk3 sendmail[26391]: n2V5A2e2026391: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310510.n2V5A2J8026386@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 22:10:02 splunk3 sendmail[26386]: n2V5A2J8026386: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V5A2e2026391 Message accepted for delivery)
|
|
Mar 30 22:10:04 splunk3 sendmail[26392]: n2V5A2e2026391: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:10:23 splunk3 sendmail[26476]: n2V5ANTI026476: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310510.n2V5AMCj031967@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:10:23 splunk3 spamd[870]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45099
|
|
Mar 30 22:10:23 splunk3 spamd[870]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:10:23 splunk3 spamd[870]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:10:23 splunk3 spamd[870]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:10:23 splunk3 spamd[870]: spamd: processing message <200903310510.n2V5AMCj031967@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:10:25 splunk3 spamd[870]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 22:10:25 splunk3 spamd[870]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45099,mid=<200903310510.n2V5AMCj031967@virt2.int.splunk.com>,bayes=0.11265566552016,autolearn=no
|
|
Mar 30 22:10:25 splunk3 sendmail[26477]: n2V5ANTI026476: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:10:25 splunk3 spamd[3033]: prefork: child states: BI
|
|
Mar 30 22:10:25 splunk3 spamd[3033]: spamd: handled cleanup of child pid 870 due to SIGCHLD
|
|
Mar 30 22:10:25 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 26484
|
|
Mar 30 22:10:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:10:28 splunk3 sendmail[26503]: n2V5ASVg026503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:11:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:11:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:11:28 splunk3 sendmail[26749]: n2V5BSQu026749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 22:12:28 splunk3 sendmail[26985]: n2V5CSnn026985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:13:28 splunk3 sendmail[27223]: n2V5DSTp027223: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:14:28 splunk3 sendmail[27457]: n2V5ESGH027457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:15:23 splunk3 sendmail[27688]: n2V5FN05027688: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310515.n2V5FNQX032760@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:15:23 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45156
|
|
Mar 30 22:15:23 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:15:23 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:15:23 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:15:23 splunk3 spamd[26484]: spamd: processing message <200903310515.n2V5FNQX032760@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:15:25 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 30 22:15:25 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45156,mid=<200903310515.n2V5FNQX032760@virt2.int.splunk.com>,bayes=0.11265566552016,autolearn=no
|
|
Mar 30 22:15:25 splunk3 sendmail[27689]: n2V5FN05027688: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:15:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:15:28 splunk3 sendmail[27712]: n2V5FSD7027712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:16:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:16:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:16:28 splunk3 sendmail[27955]: n2V5GS0H027955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:17:28 splunk3 sendmail[28194]: n2V5HSvX028194: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:18:28 splunk3 sendmail[28428]: n2V5IS25028428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:19:28 splunk3 sendmail[28665]: n2V5JSx7028665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:20:24 splunk3 sendmail[28896]: n2V5KOj0028896: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903310520.n2V5KNIh000936@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:20:24 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45211
|
|
Mar 30 22:20:24 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:20:24 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:20:24 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:20:24 splunk3 spamd[26484]: spamd: processing message <200903310520.n2V5KNIh000936@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:20:26 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Mar 30 22:20:26 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45211,mid=<200903310520.n2V5KNIh000936@virt2.int.splunk.com>,bayes=0.0666150717143343,autolearn=no
|
|
Mar 30 22:20:26 splunk3 sendmail[28897]: n2V5KOj0028896: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:20:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:20:28 splunk3 sendmail[28919]: n2V5KSXK028919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:21:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:21:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:21:28 splunk3 sendmail[29167]: n2V5LSKS029167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:22:28 splunk3 sendmail[29401]: n2V5MSoj029401: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:23:28 splunk3 sendmail[29645]: n2V5NSMB029645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:24:28 splunk3 sendmail[29881]: n2V5OSKb029881: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:25:24 splunk3 sendmail[30109]: n2V5POqh030109: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310525.n2V5POLg001560@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:25:24 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45267
|
|
Mar 30 22:25:24 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:25:24 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:25:24 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:25:24 splunk3 spamd[26484]: spamd: processing message <200903310525.n2V5POLg001560@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:25:26 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 30 22:25:26 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45267,mid=<200903310525.n2V5POLg001560@virt2.int.splunk.com>,bayes=0.169636052405267,autolearn=no
|
|
Mar 30 22:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:25:26 splunk3 sendmail[30110]: n2V5POqh030109: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:25:28 splunk3 sendmail[30132]: n2V5PSG2030132: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:26:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:26:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:26:28 splunk3 sendmail[30375]: n2V5QSdm030375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 22:27:28 splunk3 sendmail[30616]: n2V5RS3j030616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:28:28 splunk3 sendmail[30852]: n2V5SSrj030852: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:29:28 splunk3 sendmail[31091]: n2V5TSj3031091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:30:25 splunk3 sendmail[31326]: n2V5UPPv031326: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310530.n2V5UOQ7002201@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:30:25 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45323
|
|
Mar 30 22:30:25 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:30:25 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:30:25 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:30:25 splunk3 spamd[26484]: spamd: processing message <200903310530.n2V5UOQ7002201@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:30:27 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 30 22:30:27 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45323,mid=<200903310530.n2V5UOQ7002201@virt2.int.splunk.com>,bayes=0.169636052405267,autolearn=no
|
|
Mar 30 22:30:27 splunk3 sendmail[31327]: n2V5UPPv031326: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:30:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:30:28 splunk3 sendmail[31349]: n2V5US5I031349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:31:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:31:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:31:28 splunk3 sendmail[31596]: n2V5VSiH031596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:32:28 splunk3 sendmail[31828]: n2V5WSTp031828: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:32:33 splunk3 sendmail[31847]: n2V5WWqM031847: from=<38KrRSRQKBrYckkchaWhanpo-jknalhuckkcha.YkiolWiiaolhqjgep.Yki@alerts.bounces.google.com>, size=2826, class=0, nrcpts=1, msgid=<0016369204309196880466638697@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.188]
|
|
Mar 30 22:32:33 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45345
|
|
Mar 30 22:32:33 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:32:33 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:32:33 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:32:33 splunk3 spamd[26484]: spamd: processing message <0016369204309196880466638697@google.com> for spamme:501
|
|
Mar 30 22:32:35 splunk3 spamd[26484]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.8 seconds, 3257 bytes.
|
|
Mar 30 22:32:35 splunk3 spamd[26484]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.8,size=3257,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45345,mid=<0016369204309196880466638697@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Mar 30 22:32:35 splunk3 sendmail[31848]: n2V5WWqM031847: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33038, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:32:35 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:33:28 splunk3 sendmail[32070]: n2V5XSOv032070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:34:28 splunk3 sendmail[32304]: n2V5YStj032304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:35:25 splunk3 sendmail[32534]: n2V5ZP7X032534: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310535.n2V5ZP8m002938@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:35:25 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45379
|
|
Mar 30 22:35:25 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:35:25 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:35:25 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:35:25 splunk3 spamd[26484]: spamd: processing message <200903310535.n2V5ZP8m002938@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:35:27 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 30 22:35:27 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45379,mid=<200903310535.n2V5ZP8m002938@virt2.int.splunk.com>,bayes=0.169674169992872,autolearn=no
|
|
Mar 30 22:35:27 splunk3 sendmail[32535]: n2V5ZP7X032534: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:35:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:35:28 splunk3 sendmail[32557]: n2V5ZSud032557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:36:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:36:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:36:28 splunk3 sendmail[333]: n2V5aSMg000333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:37:28 splunk3 sendmail[572]: n2V5bSvM000572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:38:28 splunk3 sendmail[811]: n2V5cSQU000811: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:39:28 splunk3 sendmail[1052]: n2V5dScx001052: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:40:26 splunk3 sendmail[1285]: n2V5eQhJ001285: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310540.n2V5ePat003574@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:40:26 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45435
|
|
Mar 30 22:40:26 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:40:26 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:40:26 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:40:26 splunk3 spamd[26484]: spamd: processing message <200903310540.n2V5ePat003574@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:40:28 splunk3 sendmail[1307]: n2V5eSPT001307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:40:28 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 30 22:40:28 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45435,mid=<200903310540.n2V5ePat003574@virt2.int.splunk.com>,bayes=0.169674169992872,autolearn=no
|
|
Mar 30 22:40:28 splunk3 sendmail[1286]: n2V5eQhJ001285: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:41:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:41:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:41:28 splunk3 sendmail[1553]: n2V5fSdH001553: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 22:42:28 splunk3 sendmail[1792]: n2V5gSer001792: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:43:28 splunk3 sendmail[2033]: n2V5hSDQ002033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:44:28 splunk3 sendmail[2268]: n2V5iSOG002268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:45:27 splunk3 sendmail[2518]: n2V5jRPr002518: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310545.n2V5jQME004184@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:45:27 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45491
|
|
Mar 30 22:45:27 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:45:27 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:45:27 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:45:27 splunk3 spamd[26484]: spamd: processing message <200903310545.n2V5jQME004184@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:45:28 splunk3 sendmail[2524]: n2V5jSWc002524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:45:29 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 30 22:45:29 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45491,mid=<200903310545.n2V5jQME004184@virt2.int.splunk.com>,bayes=0.169674169992872,autolearn=no
|
|
Mar 30 22:45:29 splunk3 sendmail[2519]: n2V5jRPr002518: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:46:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:46:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:46:28 splunk3 sendmail[2779]: n2V5kSUa002779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:47:28 splunk3 sendmail[3025]: n2V5lS2U003025: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:48:28 splunk3 sendmail[3263]: n2V5mSsn003263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:49:28 splunk3 sendmail[3503]: n2V5nSb5003503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:50:27 splunk3 sendmail[3782]: n2V5oRf5003782: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310550.n2V5oR4x004801@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:50:27 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45547
|
|
Mar 30 22:50:27 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:50:27 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:50:27 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:50:28 splunk3 spamd[26484]: spamd: processing message <200903310550.n2V5oR4x004801@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:50:28 splunk3 sendmail[3789]: n2V5oSAp003789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:50:30 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 30 22:50:30 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45547,mid=<200903310550.n2V5oR4x004801@virt2.int.splunk.com>,bayes=0.169674169992872,autolearn=no
|
|
Mar 30 22:50:30 splunk3 sendmail[3783]: n2V5oRf5003782: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:50:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:51:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:51:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:51:28 splunk3 sendmail[4046]: n2V5pSGr004046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:52:28 splunk3 sendmail[4293]: n2V5qSUg004293: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:53:28 splunk3 sendmail[4541]: n2V5rS4b004541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:54:28 splunk3 sendmail[4777]: n2V5sS1u004777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:55:28 splunk3 sendmail[5036]: n2V5tSud005036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:55:28 splunk3 sendmail[5037]: n2V5tStl005037: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310555.n2V5tSlQ005431@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 22:55:28 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45602
|
|
Mar 30 22:55:28 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 22:55:28 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 22:55:28 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 22:55:28 splunk3 spamd[26484]: spamd: processing message <200903310555.n2V5tSlQ005431@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 22:55:30 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Mar 30 22:55:30 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45602,mid=<200903310555.n2V5tSlQ005431@virt2.int.splunk.com>,bayes=0.169674169992872,autolearn=no
|
|
Mar 30 22:55:30 splunk3 sendmail[5038]: n2V5tStl005037: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 22:55:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 22:56:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 22:56:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 22:56:28 splunk3 sendmail[5322]: n2V5uSkD005322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 22:57:28 splunk3 sendmail[5566]: n2V5vSCN005566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:58:28 splunk3 sendmail[5801]: n2V5wSY2005801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 22:59:28 splunk3 sendmail[6041]: n2V5xSBA006041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:00:04 splunk3 sendmail[6241]: n2V604d7006241: from=root, size=291, class=0, nrcpts=1, msgid=<200903310600.n2V604d7006241@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 23:00:04 splunk3 sendmail[6245]: n2V60488006245: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310600.n2V604d7006241@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 23:00:04 splunk3 sendmail[6241]: n2V604d7006241: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V60488006245 Message accepted for delivery)
|
|
Mar 30 23:00:06 splunk3 sendmail[6246]: n2V60488006245: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:00:06 splunk3 sendmail[6284]: n2V606RR006284: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903310600.n2V606RR006284@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 23:00:06 splunk3 sendmail[6286]: n2V606RR006284: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 30 23:00:06 splunk3 sendmail[6286]: n2V606RR006284: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 30 23:00:06 splunk3 sendmail[6286]: n2V606RR006284: n2V606RR006286: postmaster notify: User unknown
|
|
Mar 30 23:00:08 splunk3 sendmail[6286]: n2V606RR006286: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:00:28 splunk3 sendmail[6375]: n2V60Srf006375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:00:29 splunk3 sendmail[6378]: n2V60TUo006378: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310600.n2V60SQI006047@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:00:29 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45667
|
|
Mar 30 23:00:29 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:00:29 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 23:00:29 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 23:00:29 splunk3 sendmail[6379]: n2V60TUo006378: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:00:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:01:03 splunk3 sendmail[6524]: n2V611I0006524: from=root, size=443, class=0, nrcpts=1, msgid=<200903310601.n2V611I0006524@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 23:01:03 splunk3 sendmail[6526]: n2V613On006526: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310601.n2V611I0006524@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 23:01:03 splunk3 sendmail[6524]: n2V611I0006524: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V613On006526 Message accepted for delivery)
|
|
Mar 30 23:01:04 splunk3 sendmail[6527]: n2V613On006526: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:01:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:01:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:01:28 splunk3 sendmail[6637]: n2V61S63006637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:02:28 splunk3 sendmail[6871]: n2V62Stg006871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:03:28 splunk3 sendmail[7112]: n2V63S88007112: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:04:28 splunk3 sendmail[7347]: n2V64SVX007347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:05:28 splunk3 sendmail[7605]: n2V65SKp007605: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:05:29 splunk3 sendmail[7607]: n2V65TYr007607: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310605.n2V65TOj006749@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:05:29 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45724
|
|
Mar 30 23:05:29 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:05:29 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 30 23:05:29 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 30 23:05:29 splunk3 sendmail[7608]: n2V65TYr007607: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:05:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:06:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:06:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:06:28 splunk3 sendmail[7854]: n2V66Six007854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:07:28 splunk3 sendmail[8092]: n2V67Sj7008092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:08:28 splunk3 sendmail[8328]: n2V68Skc008328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:09:28 splunk3 sendmail[8570]: n2V69SHc008570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:10:03 splunk3 sendmail[8805]: n2V6A2nZ008805: from=root, size=292, class=0, nrcpts=1, msgid=<200903310610.n2V6A2nZ008805@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 30 23:10:03 splunk3 sendmail[8810]: n2V6A31Z008810: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310610.n2V6A2nZ008805@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 30 23:10:03 splunk3 sendmail[8805]: n2V6A2nZ008805: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V6A31Z008810 Message accepted for delivery)
|
|
Mar 30 23:10:04 splunk3 sendmail[8811]: n2V6A31Z008810: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:10:28 splunk3 sendmail[8925]: n2V6ASn9008925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:10:30 splunk3 sendmail[8926]: n2V6AUCR008926: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310610.n2V6AT5C007343@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:10:30 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45780
|
|
Mar 30 23:10:30 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:10:30 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:10:30 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:10:30 splunk3 spamd[26484]: spamd: processing message <200903310610.n2V6AT5C007343@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:10:32 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 30 23:10:32 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45780,mid=<200903310610.n2V6AT5C007343@virt2.int.splunk.com>,bayes=0.169674169992872,autolearn=no
|
|
Mar 30 23:10:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:10:32 splunk3 sendmail[8927]: n2V6AUCR008926: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:11:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:11:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:11:28 splunk3 sendmail[9178]: n2V6BSce009178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 23:12:28 splunk3 sendmail[9415]: n2V6CSG6009415: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:13:28 splunk3 sendmail[9665]: n2V6DS9B009665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:14:28 splunk3 sendmail[9900]: n2V6EStY009900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:15:00 splunk3 sendmail[10021]: n2V6F0kn010021: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310615.n2V6F0t7008070@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:15:00 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45825
|
|
Mar 30 23:15:00 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:15:00 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:15:00 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:15:00 splunk3 spamd[26484]: spamd: processing message <200903310615.n2V6F0t7008070@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:15:02 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Mar 30 23:15:02 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45825,mid=<200903310615.n2V6F0t7008070@virt2.int.splunk.com>,bayes=0.169674169992872,autolearn=no
|
|
Mar 30 23:15:02 splunk3 sendmail[10022]: n2V6F0kn010021: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:15:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:15:28 splunk3 sendmail[10151]: n2V6FSxe010151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:16:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:16:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:16:28 splunk3 sendmail[10394]: n2V6GSvU010394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:17:28 splunk3 sendmail[10635]: n2V6HStR010635: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:18:28 splunk3 sendmail[10871]: n2V6IShi010871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:19:10 splunk3 sendmail[10493]: n2V6GthS010493: from=<sunilr@mysiterank.info>, size=5717, class=0, nrcpts=1, msgid=<4a06019dbc21$f5a098c9$a4b0d24c@mysiterank.info>, proto=ESMTP, daemon=MTA, relay=[117.192.115.92]
|
|
Mar 30 23:19:10 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45874
|
|
Mar 30 23:19:10 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:19:10 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:19:10 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:19:10 splunk3 spamd[26484]: spamd: processing message <4a06019dbc21$f5a098c9$a4b0d24c@mysiterank.info> for spamme:501
|
|
Mar 30 23:19:12 splunk3 spamd[26484]: spamd: identified spam (39.1/5.0) for spamme:501 in 1.9 seconds, 5993 bytes.
|
|
Mar 30 23:19:12 splunk3 spamd[26484]: spamd: result: Y 39 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_BOGUSMX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,NO_DNS_FOR_FROM,RCVD_IN_BL_SPAMCOP_NET,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.9,size=5993,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45874,mid=<4a06019dbc21$f5a098c9$a4b0d24c@mysiterank.info>,bayes=1,autolearn=spam
|
|
Mar 30 23:19:12 splunk3 sendmail[11035]: n2V6GthS010493: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:02, mailer=local, pri=35896, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:19:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:19:28 splunk3 sendmail[11114]: n2V6JSfh011114: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:20:00 splunk3 sendmail[11246]: n2V6K0FL011246: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310620.n2V6K0Vg008684@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:20:01 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45881
|
|
Mar 30 23:20:01 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:20:01 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:20:01 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:20:01 splunk3 spamd[26484]: spamd: processing message <200903310620.n2V6K0Vg008684@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:20:03 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 30 23:20:03 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45881,mid=<200903310620.n2V6K0Vg008684@virt2.int.splunk.com>,bayes=0.169668797394123,autolearn=no
|
|
Mar 30 23:20:03 splunk3 sendmail[11247]: n2V6K0FL011246: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:20:28 splunk3 sendmail[11371]: n2V6KSek011371: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:21:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:21:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:21:28 splunk3 sendmail[11620]: n2V6LSnq011620: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:22:28 splunk3 sendmail[11852]: n2V6MSgm011852: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:23:28 splunk3 sendmail[12094]: n2V6NSKK012094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:24:28 splunk3 sendmail[12329]: n2V6OS6Y012329: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:25:01 splunk3 sendmail[12468]: n2V6P1rT012468: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310625.n2V6P1oP009309@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:25:01 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45937
|
|
Mar 30 23:25:01 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:25:01 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:25:01 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:25:01 splunk3 spamd[26484]: spamd: processing message <200903310625.n2V6P1oP009309@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:25:03 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 30 23:25:03 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45937,mid=<200903310625.n2V6P1oP009309@virt2.int.splunk.com>,bayes=0.169668797394123,autolearn=no
|
|
Mar 30 23:25:03 splunk3 sendmail[12469]: n2V6P1rT012468: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:25:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:25:28 splunk3 sendmail[12583]: n2V6PSQN012583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:26:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:26:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:26:28 splunk3 sendmail[12827]: n2V6QS2G012827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 23:27:28 splunk3 sendmail[13068]: n2V6RSlU013068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:28:28 splunk3 sendmail[13328]: n2V6SSvu013328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:29:28 splunk3 sendmail[13578]: n2V6TS8x013578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:30:01 splunk3 sendmail[13719]: n2V6U1MN013719: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310630.n2V6U1RE009924@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:30:01 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45993
|
|
Mar 30 23:30:01 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:30:01 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:30:01 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:30:01 splunk3 spamd[26484]: spamd: processing message <200903310630.n2V6U1RE009924@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:30:03 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Mar 30 23:30:03 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45993,mid=<200903310630.n2V6U1RE009924@virt2.int.splunk.com>,bayes=0.169668797394123,autolearn=no
|
|
Mar 30 23:30:03 splunk3 sendmail[13720]: n2V6U1MN013719: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:30:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:30:28 splunk3 sendmail[13835]: n2V6USSm013835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:31:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:31:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:31:28 splunk3 sendmail[14083]: n2V6VSdw014083: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:32:28 splunk3 sendmail[14317]: n2V6WS92014317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:33:28 splunk3 sendmail[14557]: n2V6XSWI014557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:34:28 splunk3 sendmail[14790]: n2V6YSfX014790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:35:02 splunk3 sendmail[14928]: n2V6Z2i3014928: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310635.n2V6Z1gX010713@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:35:02 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46049
|
|
Mar 30 23:35:02 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:35:02 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:35:02 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:35:02 splunk3 spamd[26484]: spamd: processing message <200903310635.n2V6Z1gX010713@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:35:04 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 30 23:35:04 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46049,mid=<200903310635.n2V6Z1gX010713@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 30 23:35:04 splunk3 sendmail[14929]: n2V6Z2i3014928: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:35:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:35:28 splunk3 sendmail[15044]: n2V6ZSUb015044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:36:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:36:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:36:28 splunk3 sendmail[15286]: n2V6aSKE015286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:37:28 splunk3 sendmail[15525]: n2V6bS09015525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:38:28 splunk3 sendmail[15763]: n2V6cSdm015763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:39:28 splunk3 sendmail[16003]: n2V6dS1e016003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:40:02 splunk3 sendmail[16143]: n2V6e2kw016143: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310640.n2V6e2MB011349@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:40:02 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46105
|
|
Mar 30 23:40:02 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:40:02 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:40:02 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:40:02 splunk3 spamd[26484]: spamd: processing message <200903310640.n2V6e2MB011349@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:40:04 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1311 bytes.
|
|
Mar 30 23:40:04 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46105,mid=<200903310640.n2V6e2MB011349@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 30 23:40:04 splunk3 sendmail[16144]: n2V6e2kw016143: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:40:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:40:28 splunk3 sendmail[16260]: n2V6eSdS016260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:41:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:41:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:41:28 splunk3 sendmail[16508]: n2V6fSxA016508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 23:42:28 splunk3 sendmail[16743]: n2V6gSGJ016743: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:43:28 splunk3 sendmail[16979]: n2V6hSKm016979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:44:28 splunk3 sendmail[17215]: n2V6iSSk017215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:45:03 splunk3 sendmail[17356]: n2V6j3w2017356: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310645.n2V6j3XD011959@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:45:03 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46161
|
|
Mar 30 23:45:03 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:45:03 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:45:03 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:45:03 splunk3 spamd[26484]: spamd: processing message <200903310645.n2V6j3XD011959@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:45:05 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 30 23:45:05 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46161,mid=<200903310645.n2V6j3XD011959@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 30 23:45:05 splunk3 sendmail[17357]: n2V6j3w2017356: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:45:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:45:28 splunk3 sendmail[17472]: n2V6jSa9017472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:46:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:46:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:46:28 splunk3 sendmail[17714]: n2V6kStP017714: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:47:28 splunk3 sendmail[17953]: n2V6lSXk017953: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:48:28 splunk3 sendmail[18190]: n2V6mS4o018190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:49:28 splunk3 sendmail[18427]: n2V6nSFj018427: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:50:04 splunk3 sendmail[18568]: n2V6o3eL018568: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310650.n2V6o3nh012580@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:50:04 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46217
|
|
Mar 30 23:50:04 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:50:04 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:50:04 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:50:04 splunk3 spamd[26484]: spamd: processing message <200903310650.n2V6o3nh012580@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:50:06 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 30 23:50:06 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46217,mid=<200903310650.n2V6o3nh012580@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 30 23:50:06 splunk3 sendmail[18569]: n2V6o3eL018568: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:50:28 splunk3 sendmail[18681]: n2V6oSwJ018681: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:51:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:51:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:51:28 splunk3 sendmail[18929]: n2V6pSg8018929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:52:28 splunk3 sendmail[19162]: n2V6qSST019162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:53:28 splunk3 sendmail[19409]: n2V6rSjn019409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:54:28 splunk3 sendmail[19644]: n2V6sSPv019644: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:55:04 splunk3 sendmail[19783]: n2V6t4bT019783: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310655.n2V6t4XE013185@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 30 23:55:04 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46272
|
|
Mar 30 23:55:04 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 30 23:55:04 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 30 23:55:04 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 30 23:55:04 splunk3 spamd[26484]: spamd: processing message <200903310655.n2V6t4XE013185@virt2.int.splunk.com> for spamme:501
|
|
Mar 30 23:55:06 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 30 23:55:06 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46272,mid=<200903310655.n2V6t4XE013185@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 30 23:55:06 splunk3 sendmail[19784]: n2V6t4bT019783: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 30 23:55:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 30 23:55:28 splunk3 sendmail[19899]: n2V6tSs5019899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:56:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 30 23:56:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 30 23:56:28 splunk3 sendmail[20139]: n2V6uSsj020139: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 30 23:57:28 splunk3 sendmail[20379]: n2V6vSHR020379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:58:28 splunk3 sendmail[20615]: n2V6wSmx020615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 30 23:59:28 splunk3 sendmail[20854]: n2V6xSCt020854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:00:05 splunk3 sendmail[21058]: n2V705E2021058: from=root, size=291, class=0, nrcpts=1, msgid=<200903310700.n2V705E2021058@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 00:00:05 splunk3 sendmail[21062]: n2V705ir021062: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310700.n2V705E2021058@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 00:00:05 splunk3 sendmail[21058]: n2V705E2021058: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V705ir021062 Message accepted for delivery)
|
|
Mar 31 00:00:05 splunk3 sendmail[21067]: n2V705X2021067: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310700.n2V704Ik013830@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:00:05 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46330
|
|
Mar 31 00:00:05 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:00:05 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 00:00:05 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 00:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:00:05 splunk3 sendmail[21078]: n2V705X2021067: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:00:06 splunk3 sendmail[21063]: n2V705ir021062: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:00:12 splunk3 sendmail[21122]: n2V70ChW021122: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903310700.n2V70ChW021122@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 00:00:12 splunk3 sendmail[21124]: n2V70ChW021122: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 00:00:12 splunk3 sendmail[21124]: n2V70ChW021122: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 00:00:12 splunk3 sendmail[21124]: n2V70ChW021122: n2V70ChW021124: postmaster notify: User unknown
|
|
Mar 31 00:00:13 splunk3 sendmail[21124]: n2V70ChW021124: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:00:29 splunk3 sendmail[21196]: n2V70S57021196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:01:01 splunk3 sendmail[21336]: n2V711jj021336: from=root, size=443, class=0, nrcpts=1, msgid=<200903310701.n2V711jj021336@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 00:01:01 splunk3 sendmail[21338]: n2V711J3021338: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310701.n2V711jj021336@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 00:01:01 splunk3 sendmail[21336]: n2V711jj021336: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V711J3021338 Message accepted for delivery)
|
|
Mar 31 00:01:03 splunk3 sendmail[21341]: n2V711J3021338: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:01:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:01:24 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:01:29 splunk3 sendmail[21456]: n2V71TNL021456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:02:29 splunk3 sendmail[21690]: n2V72Tqd021690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:03:29 splunk3 sendmail[21928]: n2V73T62021928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:04:29 splunk3 sendmail[22162]: n2V74Tmf022162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:05:05 splunk3 sendmail[22324]: n2V755pn022324: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310705.n2V755Ca014513@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:05:05 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46393
|
|
Mar 31 00:05:05 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:05:05 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 00:05:05 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 00:05:05 splunk3 sendmail[22325]: n2V755pn022324: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:05:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:05:29 splunk3 sendmail[22417]: n2V75T8D022417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:06:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:06:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:06:29 splunk3 sendmail[22661]: n2V76T9T022661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:07:29 splunk3 sendmail[22901]: n2V77T6S022901: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:08:29 splunk3 sendmail[23140]: n2V78T6F023140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:09:29 splunk3 sendmail[23384]: n2V79TVV023384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:10:02 splunk3 sendmail[23614]: n2V7A2aA023614: from=root, size=292, class=0, nrcpts=1, msgid=<200903310710.n2V7A2aA023614@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 00:10:02 splunk3 sendmail[23619]: n2V7A21r023619: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310710.n2V7A2aA023614@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 00:10:02 splunk3 sendmail[23614]: n2V7A2aA023614: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V7A21r023619 Message accepted for delivery)
|
|
Mar 31 00:10:04 splunk3 sendmail[23620]: n2V7A21r023619: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:10:06 splunk3 sendmail[23645]: n2V7A6e2023645: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310710.n2V7A59Q015128@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:10:06 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46450
|
|
Mar 31 00:10:06 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:10:06 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:10:06 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:10:06 splunk3 spamd[26484]: spamd: processing message <200903310710.n2V7A59Q015128@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:10:08 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 00:10:08 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46450,mid=<200903310710.n2V7A59Q015128@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 31 00:10:08 splunk3 sendmail[23646]: n2V7A6e2023645: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:10:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:10:29 splunk3 sendmail[23738]: n2V7ATaL023738: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:11:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:11:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:11:29 splunk3 sendmail[23986]: n2V7BT3U023986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 00:12:29 splunk3 sendmail[24224]: n2V7CTKN024224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:13:29 splunk3 sendmail[24461]: n2V7DTKW024461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:14:29 splunk3 sendmail[24695]: n2V7ETVU024695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:15:06 splunk3 sendmail[24857]: n2V7F6Yi024857: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310715.n2V7F6DI015930@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:15:06 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46506
|
|
Mar 31 00:15:06 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:15:06 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:15:06 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:15:06 splunk3 spamd[26484]: spamd: processing message <200903310715.n2V7F6DI015930@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:15:08 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 31 00:15:08 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46506,mid=<200903310715.n2V7F6DI015930@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 31 00:15:08 splunk3 sendmail[24858]: n2V7F6Yi024857: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:15:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:15:29 splunk3 sendmail[24951]: n2V7FT6M024951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:16:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:16:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:16:29 splunk3 sendmail[25193]: n2V7GTvR025193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:17:29 splunk3 sendmail[25428]: n2V7HTCD025428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:18:29 splunk3 sendmail[25664]: n2V7ITkJ025664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:19:29 splunk3 sendmail[25904]: n2V7JTc4025904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:20:07 splunk3 sendmail[26069]: n2V7K7FX026069: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310720.n2V7K6Ol016564@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:20:07 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46562
|
|
Mar 31 00:20:07 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:20:07 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:20:07 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:20:07 splunk3 spamd[26484]: spamd: processing message <200903310720.n2V7K6Ol016564@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:20:09 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 00:20:09 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46562,mid=<200903310720.n2V7K6Ol016564@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 31 00:20:09 splunk3 sendmail[26070]: n2V7K7FX026069: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:20:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:20:29 splunk3 sendmail[26162]: n2V7KTZI026162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:21:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:21:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:21:29 splunk3 sendmail[26411]: n2V7LTox026411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:22:29 splunk3 sendmail[26646]: n2V7MT0Q026646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:23:29 splunk3 sendmail[26888]: n2V7NTsC026888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:24:29 splunk3 sendmail[27120]: n2V7OTKO027120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:25:07 splunk3 sendmail[27282]: n2V7P7pP027282: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310725.n2V7P7tZ017170@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:25:07 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46617
|
|
Mar 31 00:25:07 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:25:07 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:25:07 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:25:07 splunk3 spamd[26484]: spamd: processing message <200903310725.n2V7P7tZ017170@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:25:09 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 00:25:09 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46617,mid=<200903310725.n2V7P7tZ017170@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 31 00:25:09 splunk3 sendmail[27283]: n2V7P7pP027282: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:25:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:25:29 splunk3 sendmail[27375]: n2V7PTDF027375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:26:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:26:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:26:29 splunk3 sendmail[27618]: n2V7QTTb027618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 00:27:29 splunk3 sendmail[27858]: n2V7RTi4027858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:28:29 splunk3 sendmail[28092]: n2V7ST59028092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:29:29 splunk3 sendmail[28329]: n2V7TTII028329: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:30:08 splunk3 sendmail[28492]: n2V7U8Lj028492: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310730.n2V7U7lP017786@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:30:08 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46674
|
|
Mar 31 00:30:08 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:30:08 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:30:08 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:30:08 splunk3 spamd[26484]: spamd: processing message <200903310730.n2V7U7lP017786@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:30:10 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 00:30:10 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46674,mid=<200903310730.n2V7U7lP017786@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 31 00:30:10 splunk3 sendmail[28493]: n2V7U8Lj028492: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:30:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:30:29 splunk3 sendmail[28586]: n2V7UTDM028586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:31:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:31:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:31:29 splunk3 sendmail[28830]: n2V7VTDe028830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:32:29 splunk3 sendmail[29065]: n2V7WTE5029065: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:33:29 splunk3 sendmail[29305]: n2V7XT5U029305: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:34:29 splunk3 sendmail[29541]: n2V7YTjB029541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:35:08 splunk3 sendmail[29704]: n2V7Z81o029704: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310735.n2V7Z8VJ018535@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:35:08 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46730
|
|
Mar 31 00:35:08 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:35:08 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:35:08 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:35:08 splunk3 spamd[26484]: spamd: processing message <200903310735.n2V7Z8VJ018535@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:35:10 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 00:35:10 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46730,mid=<200903310735.n2V7Z8VJ018535@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 31 00:35:10 splunk3 sendmail[29705]: n2V7Z81o029704: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:35:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:35:29 splunk3 sendmail[29796]: n2V7ZTjW029796: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:36:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:36:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:36:29 splunk3 sendmail[30040]: n2V7aT7O030040: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:37:29 splunk3 sendmail[30278]: n2V7bT5K030278: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:38:29 splunk3 sendmail[30514]: n2V7cTpl030514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:39:29 splunk3 sendmail[30754]: n2V7dTRu030754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:40:09 splunk3 sendmail[30920]: n2V7e9Mh030920: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310740.n2V7e88M019165@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:40:09 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46785
|
|
Mar 31 00:40:09 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:40:09 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:40:09 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:40:09 splunk3 spamd[26484]: spamd: processing message <200903310740.n2V7e88M019165@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:40:11 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 31 00:40:11 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46785,mid=<200903310740.n2V7e88M019165@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 31 00:40:11 splunk3 sendmail[30921]: n2V7e9Mh030920: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:40:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:40:29 splunk3 sendmail[31012]: n2V7eTCN031012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:41:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:41:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:41:29 splunk3 sendmail[31260]: n2V7fTKA031260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 00:42:29 splunk3 sendmail[31497]: n2V7gTKA031497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:43:29 splunk3 sendmail[31736]: n2V7hTAT031736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:44:29 splunk3 sendmail[31970]: n2V7iT6T031970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:45:10 splunk3 sendmail[32149]: n2V7jAi7032149: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310745.n2V7j9k2019776@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:45:10 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46842
|
|
Mar 31 00:45:10 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:45:10 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:45:10 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:45:10 splunk3 spamd[26484]: spamd: processing message <200903310745.n2V7j9k2019776@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:45:12 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 00:45:12 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46842,mid=<200903310745.n2V7j9k2019776@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 31 00:45:12 splunk3 sendmail[32150]: n2V7jAi7032149: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:45:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:45:29 splunk3 sendmail[32222]: n2V7jTQ2032222: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:46:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:46:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:46:29 splunk3 sendmail[32465]: n2V7kTRd032465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:47:29 splunk3 sendmail[32703]: n2V7lTKw032703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:48:29 splunk3 sendmail[473]: n2V7mTCK000473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:49:29 splunk3 sendmail[712]: n2V7nT7h000712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:50:10 splunk3 sendmail[893]: n2V7oAfM000893: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310750.n2V7oAvq020384@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:50:10 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46897
|
|
Mar 31 00:50:10 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:50:10 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:50:10 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:50:10 splunk3 spamd[26484]: spamd: processing message <200903310750.n2V7oAvq020384@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:50:12 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 00:50:12 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46897,mid=<200903310750.n2V7oAvq020384@virt2.int.splunk.com>,bayes=0.112683532001805,autolearn=no
|
|
Mar 31 00:50:12 splunk3 sendmail[894]: n2V7oAfM000893: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:50:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:50:29 splunk3 sendmail[970]: n2V7oTnb000970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:51:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:51:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:51:29 splunk3 sendmail[1218]: n2V7pT6p001218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:52:29 splunk3 sendmail[1456]: n2V7qTAx001456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:52:54 splunk3 sendmail[1547]: n2V7qpXf001547: from=<spamme@splunkit.com>, size=2745, class=0, nrcpts=1, msgid=<200903310752.n2V7qpXf001547@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=26.159.141-88.rev.gaoland.net [88.141.159.26] (may be forged)
|
|
Mar 31 00:52:54 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46932
|
|
Mar 31 00:52:54 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:52:54 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:52:54 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:52:54 splunk3 spamd[26484]: spamd: processing message <200903310752.n2V7qpXf001547@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 00:52:56 splunk3 spamd[26484]: spamd: identified spam (29.1/5.0) for spamme:501 in 2.2 seconds, 3153 bytes.
|
|
Mar 31 00:52:56 splunk3 spamd[26484]: spamd: result: Y 29 - BAYES_99,FORGED_RCVD_HELO,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.2,size=3153,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46932,mid=<200903310752.n2V7qpXf001547@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 31 00:52:56 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:52:56 splunk3 sendmail[1553]: n2V7qpXf001547: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:02, mailer=local, pri=33075, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:53:29 splunk3 sendmail[1705]: n2V7rTC0001705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:54:29 splunk3 sendmail[1941]: n2V7sTFA001941: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:55:11 splunk3 sendmail[2118]: n2V7tBfI002118: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310755.n2V7tAR5020997@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 00:55:11 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46954
|
|
Mar 31 00:55:11 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 00:55:11 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 00:55:11 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 00:55:11 splunk3 spamd[26484]: spamd: processing message <200903310755.n2V7tAR5020997@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 00:55:13 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 00:55:13 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46954,mid=<200903310755.n2V7tAR5020997@virt2.int.splunk.com>,bayes=0.11267605612216,autolearn=no
|
|
Mar 31 00:55:13 splunk3 sendmail[2119]: n2V7tBfI002118: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 00:55:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 00:55:29 splunk3 sendmail[2205]: n2V7tTBF002205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:56:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 00:56:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 00:56:29 splunk3 sendmail[2452]: n2V7uTSo002452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 00:57:29 splunk3 sendmail[2701]: n2V7vTtO002701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:58:29 splunk3 sendmail[2943]: n2V7wT2b002943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 00:59:29 splunk3 sendmail[3190]: n2V7xTxr003190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:00:04 splunk3 sendmail[3397]: n2V804eI003397: from=root, size=291, class=0, nrcpts=1, msgid=<200903310800.n2V804eI003397@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 01:00:04 splunk3 sendmail[3401]: n2V804vE003401: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310800.n2V804eI003397@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 01:00:04 splunk3 sendmail[3397]: n2V804eI003397: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V804vE003401 Message accepted for delivery)
|
|
Mar 31 01:00:06 splunk3 sendmail[3402]: n2V804vE003401: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:00:11 splunk3 sendmail[3425]: n2V80Bm9003425: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310800.n2V80B7j021630@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:00:11 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47010
|
|
Mar 31 01:00:11 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:00:11 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 01:00:11 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 01:00:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:00:11 splunk3 sendmail[3426]: n2V80Bm9003425: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:00:18 splunk3 sendmail[3462]: n2V80Ir9003462: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903310800.n2V80Ir9003462@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 01:00:18 splunk3 sendmail[3464]: n2V80Ir9003462: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 01:00:18 splunk3 sendmail[3464]: n2V80Ir9003462: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 31 01:00:18 splunk3 sendmail[3464]: n2V80Ir9003462: n2V80Ir9003464: postmaster notify: User unknown
|
|
Mar 31 01:00:19 splunk3 sendmail[3464]: n2V80Ir9003464: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:00:29 splunk3 sendmail[3530]: n2V80TmR003530: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:01:14 splunk3 sendmail[3679]: n2V811EO003679: from=root, size=443, class=0, nrcpts=1, msgid=<200903310801.n2V811EO003679@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 01:01:14 splunk3 sendmail[3751]: n2V81EPm003751: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310801.n2V811EO003679@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 01:01:14 splunk3 sendmail[3679]: n2V811EO003679: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V81EPm003751 Message accepted for delivery)
|
|
Mar 31 01:01:16 splunk3 sendmail[3752]: n2V81EPm003751: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:01:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:01:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:01:29 splunk3 sendmail[3817]: n2V81TL5003817: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:02:29 splunk3 sendmail[4064]: n2V82TBA004064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:03:29 splunk3 sendmail[4324]: n2V83TcB004324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:04:29 splunk3 sendmail[4558]: n2V84TR8004558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:05:12 splunk3 sendmail[4722]: n2V85CHC004722: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310805.n2V85BNx022313@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:05:12 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47074
|
|
Mar 31 01:05:12 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:05:12 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 01:05:12 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 01:05:12 splunk3 sendmail[4723]: n2V85CHC004722: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:05:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:05:29 splunk3 sendmail[4812]: n2V85Tme004812: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:06:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:06:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:06:29 splunk3 sendmail[5066]: n2V86TJT005066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:07:29 splunk3 sendmail[5339]: n2V87T1J005339: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:08:29 splunk3 sendmail[5583]: n2V88T0Y005583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:09:29 splunk3 sendmail[5825]: n2V89Tl9005825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:10:03 splunk3 sendmail[6044]: n2V8A3vZ006044: from=root, size=292, class=0, nrcpts=1, msgid=<200903310810.n2V8A3vZ006044@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 01:10:03 splunk3 sendmail[6049]: n2V8A38A006049: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310810.n2V8A3vZ006044@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 01:10:03 splunk3 sendmail[6044]: n2V8A3vZ006044: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V8A38A006049 Message accepted for delivery)
|
|
Mar 31 01:10:04 splunk3 sendmail[6050]: n2V8A38A006049: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:10:12 splunk3 sendmail[6095]: n2V8ACwk006095: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310810.n2V8ACLj022932@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:10:12 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47130
|
|
Mar 31 01:10:12 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:10:12 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:10:12 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:10:12 splunk3 spamd[26484]: spamd: processing message <200903310810.n2V8ACLj022932@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:10:14 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 01:10:14 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47130,mid=<200903310810.n2V8ACLj022932@virt2.int.splunk.com>,bayes=0.11267605612216,autolearn=no
|
|
Mar 31 01:10:14 splunk3 sendmail[6096]: n2V8ACwk006095: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:10:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:10:29 splunk3 sendmail[6185]: n2V8ATei006185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:11:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:11:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:11:29 splunk3 sendmail[6433]: n2V8BTZO006433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 01:12:29 splunk3 sendmail[6670]: n2V8CTmN006670: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:13:29 splunk3 sendmail[6905]: n2V8DTlZ006905: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:14:29 splunk3 sendmail[7139]: n2V8ETkO007139: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:15:13 splunk3 sendmail[7304]: n2V8FD7u007304: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310815.n2V8FCie023759@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:15:13 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47187
|
|
Mar 31 01:15:13 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:15:13 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:15:13 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:15:13 splunk3 spamd[26484]: spamd: processing message <200903310815.n2V8FCie023759@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:15:15 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 01:15:15 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47187,mid=<200903310815.n2V8FCie023759@virt2.int.splunk.com>,bayes=0.11267605612216,autolearn=no
|
|
Mar 31 01:15:15 splunk3 sendmail[7305]: n2V8FD7u007304: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:15:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:15:29 splunk3 sendmail[7395]: n2V8FTjS007395: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:16:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:16:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:16:29 splunk3 sendmail[7647]: n2V8GTlQ007647: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:17:29 splunk3 sendmail[7885]: n2V8HTnF007885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:18:29 splunk3 sendmail[8120]: n2V8ITuh008120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:19:09 splunk3 sendmail[8260]: n2V8J628008260: from=<usostbkx@bmpturismo.com.br>, size=1088, class=0, nrcpts=1, msgid=<01c9b207$76896200$55d45d3b@usostbkx>, proto=ESMTP, daemon=MTA, relay=[59.93.212.85]
|
|
Mar 31 01:19:09 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47233
|
|
Mar 31 01:19:09 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:19:09 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:19:09 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:19:09 splunk3 spamd[26484]: spamd: processing message <01c9b207$76896200$55d45d3b@usostbkx> for spamme:501
|
|
Mar 31 01:19:11 splunk3 spamd[26484]: spamd: identified spam (28.0/5.0) for spamme:501 in 2.4 seconds, 1365 bytes.
|
|
Mar 31 01:19:11 splunk3 spamd[26484]: spamd: result: Y 28 - BAYES_80,DNS_FROM_RFC_BOGUSMX,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_NJABL_PROXY,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_PH_SURBL,URIBL_WS_SURBL scantime=2.4,size=1365,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47233,mid=<01c9b207$76896200$55d45d3b@usostbkx>,bayes=0.904001195189268,autolearn=spam
|
|
Mar 31 01:19:11 splunk3 sendmail[8281]: n2V8J628008260: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31269, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:19:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:19:29 splunk3 sendmail[8362]: n2V8JTUV008362: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:20:13 splunk3 sendmail[8530]: n2V8KDjC008530: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310820.n2V8KDW6024396@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:20:13 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47244
|
|
Mar 31 01:20:13 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:20:13 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:20:13 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:20:13 splunk3 spamd[26484]: spamd: processing message <200903310820.n2V8KDW6024396@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:20:15 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 01:20:15 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47244,mid=<200903310820.n2V8KDW6024396@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 01:20:15 splunk3 sendmail[8531]: n2V8KDjC008530: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:20:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:20:29 splunk3 sendmail[8618]: n2V8KTlr008618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:21:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:21:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:21:29 splunk3 sendmail[8865]: n2V8LTDb008865: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:22:29 splunk3 sendmail[9101]: n2V8MTXL009101: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:23:29 splunk3 sendmail[9345]: n2V8NTf2009345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:24:29 splunk3 sendmail[9593]: n2V8OT24009593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:25:14 splunk3 sendmail[9772]: n2V8PEj1009772: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310825.n2V8PDQj025004@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:25:14 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47299
|
|
Mar 31 01:25:14 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:25:14 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:25:14 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:25:14 splunk3 spamd[26484]: spamd: processing message <200903310825.n2V8PDQj025004@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:25:17 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 01:25:17 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47299,mid=<200903310825.n2V8PDQj025004@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 01:25:17 splunk3 sendmail[9773]: n2V8PEj1009772: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:25:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:25:29 splunk3 sendmail[9847]: n2V8PTlx009847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:26:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:26:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:26:29 splunk3 sendmail[10087]: n2V8QTx6010087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 01:27:29 splunk3 sendmail[10328]: n2V8RT94010328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:28:29 splunk3 sendmail[10562]: n2V8STF7010562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:29:29 splunk3 sendmail[10801]: n2V8TTGJ010801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:30:15 splunk3 sendmail[10983]: n2V8UFvj010983: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310830.n2V8UFHw025629@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:30:15 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47355
|
|
Mar 31 01:30:15 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:30:15 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:30:15 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:30:15 splunk3 spamd[26484]: spamd: processing message <200903310830.n2V8UFHw025629@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:30:17 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 01:30:17 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47355,mid=<200903310830.n2V8UFHw025629@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 01:30:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:30:17 splunk3 sendmail[10985]: n2V8UFvj010983: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:30:29 splunk3 sendmail[11060]: n2V8UTKT011060: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:30:36 splunk3 sendmail[11062]: n2V8UX3U011062: from=<spammer@corp.latinol.com>, size=718, class=0, nrcpts=1, msgid=<200903310830.n2V8UX3U011062@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=ppp-58-9-51-130.revip2.asianet.co.th [58.9.51.130]
|
|
Mar 31 01:30:36 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47366
|
|
Mar 31 01:30:36 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:30:36 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:30:36 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:30:36 splunk3 spamd[26484]: spamd: processing message <200903310830.n2V8UX3U011062@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 01:30:38 splunk3 spamd[26484]: spamd: identified spam (18.1/5.0) for spamme:501 in 2.2 seconds, 1156 bytes.
|
|
Mar 31 01:30:38 splunk3 spamd[26484]: spamd: result: Y 18 - AWL,BAYES_60,MSGID_FROM_MTA_ID,RCVD_IN_SORBS_DUL scantime=2.2,size=1156,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47366,mid=<200903310830.n2V8UX3U011062@splunk3.splunkit.com>,bayes=0.72903639274876,autolearn=no
|
|
Mar 31 01:30:38 splunk3 sendmail[11083]: n2V8UX3U011062: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31030, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:30:38 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:31:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:31:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:31:29 splunk3 sendmail[11311]: n2V8VTiB011311: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:32:29 splunk3 sendmail[11545]: n2V8WTrU011545: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:33:29 splunk3 sendmail[11781]: n2V8XTBe011781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:34:29 splunk3 sendmail[12015]: n2V8YTgw012015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:35:16 splunk3 sendmail[12200]: n2V8ZGYE012200: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310835.n2V8ZGiG026378@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:35:16 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47411
|
|
Mar 31 01:35:16 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:35:16 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:35:16 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:35:16 splunk3 spamd[26484]: spamd: processing message <200903310835.n2V8ZGiG026378@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:35:18 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 01:35:18 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47411,mid=<200903310835.n2V8ZGiG026378@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 01:35:18 splunk3 sendmail[12202]: n2V8ZGYE012200: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:35:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:35:29 splunk3 sendmail[12270]: n2V8ZTl5012270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:36:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:36:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:36:29 splunk3 sendmail[12515]: n2V8aTVL012515: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:37:29 splunk3 sendmail[12755]: n2V8bTLo012755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:38:29 splunk3 sendmail[12993]: n2V8cTJL012993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:39:29 splunk3 sendmail[13234]: n2V8dTPA013234: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:40:17 splunk3 sendmail[13456]: n2V8eH7I013456: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310840.n2V8eGpU027015@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:40:17 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47467
|
|
Mar 31 01:40:17 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:40:17 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:40:17 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:40:17 splunk3 spamd[26484]: spamd: processing message <200903310840.n2V8eGpU027015@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:40:19 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 01:40:19 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47467,mid=<200903310840.n2V8eGpU027015@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 01:40:19 splunk3 sendmail[13457]: n2V8eH7I013456: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:40:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:40:29 splunk3 sendmail[13525]: n2V8eTqd013525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:41:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:41:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:41:29 splunk3 sendmail[13773]: n2V8fTEP013773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 01:42:29 splunk3 sendmail[14009]: n2V8gTnr014009: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:43:29 splunk3 sendmail[14250]: n2V8hTsl014250: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:44:29 splunk3 sendmail[14486]: n2V8iTUm014486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:45:17 splunk3 sendmail[14666]: n2V8jHZ5014666: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310845.n2V8jH92027624@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:45:17 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47523
|
|
Mar 31 01:45:17 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:45:17 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:45:17 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:45:17 splunk3 spamd[26484]: spamd: processing message <200903310845.n2V8jH92027624@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:45:19 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 01:45:19 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47523,mid=<200903310845.n2V8jH92027624@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 01:45:19 splunk3 sendmail[14667]: n2V8jHZ5014666: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:45:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:45:29 splunk3 sendmail[14741]: n2V8jTge014741: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:46:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:46:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:46:29 splunk3 sendmail[14985]: n2V8kTiP014985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:47:29 splunk3 sendmail[15220]: n2V8lTsI015220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:48:29 splunk3 sendmail[15456]: n2V8mT9Y015456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:49:29 splunk3 sendmail[15694]: n2V8nTWM015694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:50:17 splunk3 sendmail[15879]: n2V8oHPB015879: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310850.n2V8oHdO028233@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:50:17 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47579
|
|
Mar 31 01:50:17 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:50:17 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:50:17 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:50:17 splunk3 spamd[26484]: spamd: processing message <200903310850.n2V8oHdO028233@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:50:19 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 01:50:19 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47579,mid=<200903310850.n2V8oHdO028233@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 01:50:19 splunk3 sendmail[15880]: n2V8oHPB015879: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:50:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:50:29 splunk3 sendmail[15952]: n2V8oTvX015952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:51:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:51:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:51:29 splunk3 sendmail[16198]: n2V8pTVS016198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:52:29 splunk3 sendmail[16432]: n2V8qTYF016432: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:53:29 splunk3 sendmail[16676]: n2V8rTwX016676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:54:29 splunk3 sendmail[16909]: n2V8sTXd016909: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:55:18 splunk3 sendmail[17093]: n2V8tIHq017093: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310855.n2V8tH95028839@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 01:55:18 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47635
|
|
Mar 31 01:55:18 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 01:55:18 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 01:55:18 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 01:55:18 splunk3 spamd[26484]: spamd: processing message <200903310855.n2V8tH95028839@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 01:55:20 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 01:55:20 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47635,mid=<200903310855.n2V8tH95028839@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 01:55:20 splunk3 sendmail[17094]: n2V8tIHq017093: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 01:55:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 01:55:29 splunk3 sendmail[17164]: n2V8tTJ2017164: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:56:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 01:56:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 01:56:29 splunk3 sendmail[17406]: n2V8uTbA017406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 01:57:29 splunk3 sendmail[17648]: n2V8vT24017648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:58:29 splunk3 sendmail[17883]: n2V8wTCW017883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 01:59:29 splunk3 sendmail[18157]: n2V8xTYg018157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:00:04 splunk3 sendmail[18361]: n2V904TV018361: from=root, size=291, class=0, nrcpts=1, msgid=<200903310900.n2V904TV018361@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 02:00:05 splunk3 sendmail[18365]: n2V904Us018365: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903310900.n2V904TV018361@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 02:00:05 splunk3 sendmail[18361]: n2V904TV018361: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V904Us018365 Message accepted for delivery)
|
|
Mar 31 02:00:06 splunk3 sendmail[18366]: n2V904Us018365: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:00:18 splunk3 sendmail[18427]: n2V90IWc018427: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310900.n2V90IjJ029474@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:00:18 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47692
|
|
Mar 31 02:00:18 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:00:18 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 02:00:18 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 02:00:18 splunk3 sendmail[18428]: n2V90IWc018427: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:00:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:00:24 splunk3 sendmail[18463]: n2V90O7d018463: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903310900.n2V90O7d018463@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 02:00:24 splunk3 sendmail[18465]: n2V90O7d018463: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 02:00:24 splunk3 sendmail[18465]: n2V90O7d018463: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 02:00:24 splunk3 sendmail[18465]: n2V90O7d018463: n2V90O7d018465: postmaster notify: User unknown
|
|
Mar 31 02:00:25 splunk3 sendmail[18465]: n2V90O7d018465: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:00:29 splunk3 sendmail[18500]: n2V90T2F018500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:01:15 splunk3 sendmail[18623]: n2V911VT018623: from=root, size=443, class=0, nrcpts=1, msgid=<200903310901.n2V911VT018623@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 02:01:15 splunk3 sendmail[18691]: n2V91FsS018691: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903310901.n2V911VT018623@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 02:01:15 splunk3 sendmail[18623]: n2V911VT018623: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V91FsS018691 Message accepted for delivery)
|
|
Mar 31 02:01:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:01:17 splunk3 sendmail[18692]: n2V91FsS018691: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:01:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:01:29 splunk3 sendmail[18757]: n2V91TR0018757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:02:29 splunk3 sendmail[18992]: n2V92TRP018992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:03:29 splunk3 sendmail[19231]: n2V93Tlc019231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:04:29 splunk3 sendmail[19466]: n2V94T5V019466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:05:19 splunk3 sendmail[19664]: n2V95JRg019664: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310905.n2V95I6c030159@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:05:19 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47756
|
|
Mar 31 02:05:19 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:05:19 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 02:05:19 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 02:05:19 splunk3 sendmail[19665]: n2V95JRg019664: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:05:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:05:29 splunk3 sendmail[19720]: n2V95TNN019720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:06:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:06:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:06:29 splunk3 sendmail[19964]: n2V96T0I019964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:07:29 splunk3 sendmail[20203]: n2V97TiM020203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:08:29 splunk3 sendmail[20438]: n2V98TwS020438: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:09:30 splunk3 sendmail[20679]: n2V99USo020679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:10:02 splunk3 sendmail[20897]: n2V9A2B7020897: from=root, size=292, class=0, nrcpts=1, msgid=<200903310910.n2V9A2B7020897@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 02:10:03 splunk3 sendmail[20902]: n2V9A2Sm020902: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903310910.n2V9A2B7020897@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 02:10:03 splunk3 sendmail[20897]: n2V9A2B7020897: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2V9A2Sm020902 Message accepted for delivery)
|
|
Mar 31 02:10:04 splunk3 sendmail[20903]: n2V9A2Sm020902: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:10:19 splunk3 sendmail[20985]: n2V9AJcc020985: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310910.n2V9AJbU030770@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:10:19 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47812
|
|
Mar 31 02:10:19 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:10:19 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:10:19 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:10:19 splunk3 spamd[26484]: spamd: processing message <200903310910.n2V9AJbU030770@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:10:21 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 02:10:21 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47812,mid=<200903310910.n2V9AJbU030770@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 02:10:21 splunk3 sendmail[20986]: n2V9AJcc020985: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:10:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:10:30 splunk3 sendmail[21038]: n2V9AUcO021038: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:11:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:11:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:11:30 splunk3 sendmail[21286]: n2V9BUl2021286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 02:12:30 splunk3 sendmail[21523]: n2V9CU3n021523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:13:30 splunk3 sendmail[21761]: n2V9DULo021761: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:14:30 splunk3 sendmail[21999]: n2V9EU4M021999: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:15:19 splunk3 sendmail[22195]: n2V9FJc5022195: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310915.n2V9FJ7U031565@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:15:19 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47869
|
|
Mar 31 02:15:19 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:15:19 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:15:19 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:15:19 splunk3 spamd[26484]: spamd: processing message <200903310915.n2V9FJ7U031565@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:15:21 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1311 bytes.
|
|
Mar 31 02:15:21 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47869,mid=<200903310915.n2V9FJ7U031565@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 02:15:21 splunk3 sendmail[22197]: n2V9FJc5022195: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:15:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:15:30 splunk3 sendmail[22251]: n2V9FUKN022251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:16:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:16:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:16:30 splunk3 sendmail[22494]: n2V9GUc2022494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:17:30 splunk3 sendmail[22732]: n2V9HUfn022732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:18:30 splunk3 sendmail[22969]: n2V9IUPH022969: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:19:30 splunk3 sendmail[23209]: n2V9JU14023209: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:20:20 splunk3 sendmail[23409]: n2V9KKhr023409: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903310920.n2V9KKPh032203@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:20:20 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47924
|
|
Mar 31 02:20:20 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:20:20 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:20:20 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:20:20 splunk3 spamd[26484]: spamd: processing message <200903310920.n2V9KKPh032203@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:20:22 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 02:20:22 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47924,mid=<200903310920.n2V9KKPh032203@virt2.int.splunk.com>,bayes=0.112668581066013,autolearn=no
|
|
Mar 31 02:20:22 splunk3 sendmail[23411]: n2V9KKhr023409: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:20:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:20:30 splunk3 sendmail[23465]: n2V9KUNf023465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:21:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:21:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:21:30 splunk3 sendmail[23716]: n2V9LULc023716: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:22:30 splunk3 sendmail[23946]: n2V9MUEl023946: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:23:30 splunk3 sendmail[24187]: n2V9NUuJ024187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:24:30 splunk3 sendmail[24422]: n2V9OUTI024422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:25:21 splunk3 sendmail[24623]: n2V9PL2t024623: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903310925.n2V9PKRD000337@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:25:21 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47980
|
|
Mar 31 02:25:21 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:25:21 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:25:21 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:25:21 splunk3 spamd[26484]: spamd: processing message <200903310925.n2V9PKRD000337@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:25:23 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Mar 31 02:25:23 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47980,mid=<200903310925.n2V9PKRD000337@virt2.int.splunk.com>,bayes=0.0666251726468874,autolearn=no
|
|
Mar 31 02:25:23 splunk3 sendmail[24624]: n2V9PL2t024623: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:25:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:25:30 splunk3 sendmail[24676]: n2V9PUae024676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:26:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:26:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:26:30 splunk3 sendmail[24919]: n2V9QUgA024919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 02:27:30 splunk3 sendmail[25159]: n2V9RUGC025159: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:28:30 splunk3 sendmail[25396]: n2V9SUAA025396: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:29:30 splunk3 sendmail[25631]: n2V9TUlg025631: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:30:21 splunk3 sendmail[25835]: n2V9ULTl025835: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903310930.n2V9ULej000964@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:30:21 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48036
|
|
Mar 31 02:30:21 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:30:21 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:30:21 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:30:21 splunk3 spamd[26484]: spamd: processing message <200903310930.n2V9ULej000964@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:30:23 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Mar 31 02:30:23 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48036,mid=<200903310930.n2V9ULej000964@virt2.int.splunk.com>,bayes=0.0666251726468874,autolearn=no
|
|
Mar 31 02:30:23 splunk3 sendmail[25836]: n2V9ULTl025835: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:30:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:30:30 splunk3 sendmail[25889]: n2V9UUXY025889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:31:07 splunk3 sendmail[26033]: n2V9V6Xq026033: from=<32uLRSRQKBtgAIIAF84F8LNM-HIL8JFSAIIAF8.6IGMJ4GG8MJFOHECN.6IG@alerts.bounces.google.com>, size=9237, class=0, nrcpts=1, msgid=<0016361645a5c6c935046666dbb8@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 31 02:31:07 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48051
|
|
Mar 31 02:31:07 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:31:07 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:31:07 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:31:07 splunk3 spamd[26484]: spamd: processing message <0016361645a5c6c935046666dbb8@google.com> for spamme:501
|
|
Mar 31 02:31:09 splunk3 spamd[26484]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.2 seconds, 9672 bytes.
|
|
Mar 31 02:31:09 splunk3 spamd[26484]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.2,size=9672,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48051,mid=<0016361645a5c6c935046666dbb8@google.com>,bayes=1.11022302462516e-16,autolearn=ham
|
|
Mar 31 02:31:09 splunk3 sendmail[26034]: n2V9V6Xq026033: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=39453, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:31:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:31:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:31:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:31:30 splunk3 sendmail[26141]: n2V9VUE9026141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:32:30 splunk3 sendmail[26377]: n2V9WUHs026377: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:33:30 splunk3 sendmail[26618]: n2V9XU2h026618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:34:30 splunk3 sendmail[26853]: n2V9YUSn026853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:35:22 splunk3 sendmail[27052]: n2V9ZMgP027052: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310935.n2V9ZLUM001738@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:35:22 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48093
|
|
Mar 31 02:35:22 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:35:22 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:35:22 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:35:22 splunk3 spamd[26484]: spamd: processing message <200903310935.n2V9ZLUM001738@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:35:24 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Mar 31 02:35:24 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48093,mid=<200903310935.n2V9ZLUM001738@virt2.int.splunk.com>,bayes=0.169689193039842,autolearn=no
|
|
Mar 31 02:35:24 splunk3 sendmail[27054]: n2V9ZMgP027052: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:35:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:35:30 splunk3 sendmail[27109]: n2V9ZUf7027109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:36:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:36:23 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:36:30 splunk3 sendmail[27349]: n2V9aUFp027349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:37:30 splunk3 sendmail[27588]: n2V9bUkE027588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:38:30 splunk3 sendmail[27825]: n2V9cUmn027825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:39:17 splunk3 sendmail[27887]: n2V9cl66027887: from=<torz@dropscout.com>, size=5722, class=0, nrcpts=1, msgid=<fad8019dbbcf$e9311984$c9f05bc7@dropscout.com>, proto=ESMTP, daemon=MTA, relay=212.183.205.176.static.user.ono.com [212.183.205.176]
|
|
Mar 31 02:39:17 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48138
|
|
Mar 31 02:39:17 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:39:17 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:39:17 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:39:17 splunk3 spamd[26484]: spamd: processing message <fad8019dbbcf$e9311984$c9f05bc7@dropscout.com> for spamme:501
|
|
Mar 31 02:39:19 splunk3 spamd[26484]: spamd: identified spam (34.1/5.0) for spamme:501 in 1.9 seconds, 6053 bytes.
|
|
Mar 31 02:39:19 splunk3 spamd[26484]: spamd: result: Y 34 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_IPADDR2,HELO_DYNAMIC_SPLIT_IP,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,RCVD_NUMERIC_HELO,SUBJECT_EXCESS_BASE64,URIBL_JP_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=1.9,size=6053,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48138,mid=<fad8019dbbcf$e9311984$c9f05bc7@dropscout.com>,bayes=1,autolearn=spam
|
|
Mar 31 02:39:19 splunk3 sendmail[28005]: n2V9cl66027887: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=35964, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:39:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:39:30 splunk3 sendmail[28070]: n2V9dUAB028070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:40:22 splunk3 sendmail[28273]: n2V9eMt4028273: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310940.n2V9eMdn002384@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:40:22 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48149
|
|
Mar 31 02:40:22 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:40:22 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:40:22 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:40:22 splunk3 spamd[26484]: spamd: processing message <200903310940.n2V9eMdn002384@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:40:24 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 02:40:24 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48149,mid=<200903310940.n2V9eMdn002384@virt2.int.splunk.com>,bayes=0.169683821630801,autolearn=no
|
|
Mar 31 02:40:24 splunk3 sendmail[28275]: n2V9eMt4028273: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:40:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:40:30 splunk3 sendmail[28327]: n2V9eUi8028327: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:41:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:41:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:41:30 splunk3 sendmail[28573]: n2V9fUq1028573: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 02:42:30 splunk3 sendmail[28812]: n2V9gUKL028812: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:43:30 splunk3 sendmail[29049]: n2V9hUV4029049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:44:30 splunk3 sendmail[29283]: n2V9iULk029283: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:45:23 splunk3 sendmail[29502]: n2V9jNTs029502: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310945.n2V9jMoB002995@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:45:23 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48206
|
|
Mar 31 02:45:23 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:45:23 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:45:23 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:45:23 splunk3 spamd[26484]: spamd: processing message <200903310945.n2V9jMoB002995@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:45:25 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 02:45:25 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48206,mid=<200903310945.n2V9jMoB002995@virt2.int.splunk.com>,bayes=0.169683821630801,autolearn=no
|
|
Mar 31 02:45:25 splunk3 sendmail[29503]: n2V9jNTs029502: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:45:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:45:30 splunk3 sendmail[29538]: n2V9jUcY029538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:46:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:46:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:46:30 splunk3 sendmail[29782]: n2V9kUMQ029782: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:47:30 splunk3 sendmail[30021]: n2V9lUC6030021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:48:30 splunk3 sendmail[30256]: n2V9mU7q030256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:49:30 splunk3 sendmail[30495]: n2V9nUPL030495: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:50:23 splunk3 sendmail[30712]: n2V9oNmk030712: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310950.n2V9oNhe003619@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:50:23 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48262
|
|
Mar 31 02:50:23 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:50:23 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:50:23 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:50:23 splunk3 spamd[26484]: spamd: processing message <200903310950.n2V9oNhe003619@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:50:25 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 31 02:50:25 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48262,mid=<200903310950.n2V9oNhe003619@virt2.int.splunk.com>,bayes=0.169683821630801,autolearn=no
|
|
Mar 31 02:50:25 splunk3 sendmail[30713]: n2V9oNmk030712: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:50:30 splunk3 sendmail[30749]: n2V9oUZt030749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:51:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:51:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:51:30 splunk3 sendmail[30996]: n2V9pURP030996: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:52:30 splunk3 sendmail[31230]: n2V9qUim031230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:53:30 splunk3 sendmail[31473]: n2V9rU9T031473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:54:30 splunk3 sendmail[31707]: n2V9sUvC031707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:55:24 splunk3 sendmail[31921]: n2V9tOIM031921: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903310955.n2V9tNoT004219@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 02:55:24 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48317
|
|
Mar 31 02:55:24 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 02:55:24 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 02:55:24 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 02:55:24 splunk3 spamd[26484]: spamd: processing message <200903310955.n2V9tNoT004219@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 02:55:26 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 02:55:26 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48317,mid=<200903310955.n2V9tNoT004219@virt2.int.splunk.com>,bayes=0.169683821630801,autolearn=no
|
|
Mar 31 02:55:26 splunk3 sendmail[31922]: n2V9tOIM031921: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 02:55:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 02:55:30 splunk3 sendmail[31960]: n2V9tUhL031960: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:56:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 02:56:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 02:56:30 splunk3 sendmail[32202]: n2V9uUvE032202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 02:57:30 splunk3 sendmail[32440]: n2V9vUM9032440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:58:30 splunk3 sendmail[32674]: n2V9wUVu032674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 02:59:30 splunk3 sendmail[446]: n2V9xUQ3000446: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:00:04 splunk3 sendmail[654]: n2VA04nZ000654: from=root, size=291, class=0, nrcpts=1, msgid=<200903311000.n2VA04nZ000654@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 03:00:04 splunk3 sendmail[658]: n2VA044Y000658: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311000.n2VA04nZ000654@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 03:00:04 splunk3 sendmail[654]: n2VA04nZ000654: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VA044Y000658 Message accepted for delivery)
|
|
Mar 31 03:00:06 splunk3 sendmail[659]: n2VA044Y000658: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:00:24 splunk3 sendmail[737]: n2VA0Owu000737: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311000.n2VA0OVc004864@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:00:24 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48375
|
|
Mar 31 03:00:24 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:00:24 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 03:00:24 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 03:00:24 splunk3 sendmail[738]: n2VA0Owu000737: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:00:30 splunk3 sendmail[774]: n2VA0URl000774: from=<splunk@localhost>, size=717, class=0, nrcpts=1, msgid=<200903311000.n2VA0URl000774@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 03:00:30 splunk3 sendmail[776]: n2VA0URl000774: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120717, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 03:00:30 splunk3 sendmail[776]: n2VA0URl000774: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120717, dsn=5.1.1, stat=User unknown
|
|
Mar 31 03:00:30 splunk3 sendmail[776]: n2VA0URl000774: n2VA0URl000776: postmaster notify: User unknown
|
|
Mar 31 03:00:30 splunk3 sendmail[785]: n2VA0Uae000785: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:00:31 splunk3 sendmail[776]: n2VA0URl000776: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32087, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:01:14 splunk3 sendmail[921]: n2VA11Kw000921: from=root, size=443, class=0, nrcpts=1, msgid=<200903311001.n2VA11Kw000921@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 03:01:14 splunk3 sendmail[985]: n2VA1Elj000985: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311001.n2VA11Kw000921@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 03:01:14 splunk3 sendmail[921]: n2VA11Kw000921: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VA1Elj000985 Message accepted for delivery)
|
|
Mar 31 03:01:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:01:15 splunk3 sendmail[986]: n2VA1Elj000985: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:01:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:01:30 splunk3 sendmail[1050]: n2VA1UXr001050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:02:30 splunk3 sendmail[1285]: n2VA2Ukq001285: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:03:30 splunk3 sendmail[1526]: n2VA3Ugo001526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:04:30 splunk3 sendmail[1759]: n2VA4U3r001759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:05:25 splunk3 sendmail[1992]: n2VA5POj001992: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311005.n2VA5OGv005541@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:05:25 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48446
|
|
Mar 31 03:05:25 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:05:25 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 03:05:25 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 03:05:25 splunk3 sendmail[1993]: n2VA5POj001992: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:05:30 splunk3 sendmail[2014]: n2VA5Un3002014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:06:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:06:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:06:30 splunk3 sendmail[2258]: n2VA6UKn002258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:07:30 splunk3 sendmail[2498]: n2VA7UWN002498: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:08:30 splunk3 sendmail[2745]: n2VA8UIw002745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:09:30 splunk3 sendmail[2997]: n2VA9UxN002997: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:10:02 splunk3 sendmail[3234]: n2VAA2Xk003234: from=root, size=292, class=0, nrcpts=1, msgid=<200903311010.n2VAA2Xk003234@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 03:10:02 splunk3 sendmail[3253]: n2VAA2sn003253: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311010.n2VAA2Xk003234@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 03:10:02 splunk3 sendmail[3234]: n2VAA2Xk003234: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VAA2sn003253 Message accepted for delivery)
|
|
Mar 31 03:10:04 splunk3 sendmail[3255]: n2VAA2sn003253: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:10:25 splunk3 sendmail[3335]: n2VAAPV4003335: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311010.n2VAAPLm006157@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:10:25 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48503
|
|
Mar 31 03:10:25 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:10:25 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:10:25 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:10:25 splunk3 spamd[26484]: spamd: processing message <200903311010.n2VAAPLm006157@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:10:27 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 03:10:27 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48503,mid=<200903311010.n2VAAPLm006157@virt2.int.splunk.com>,bayes=0.169683821630801,autolearn=no
|
|
Mar 31 03:10:27 splunk3 sendmail[3336]: n2VAAPV4003335: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:10:30 splunk3 sendmail[3362]: n2VAAUr8003362: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:11:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:11:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:11:30 splunk3 sendmail[3623]: n2VABU62003623: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 03:12:30 splunk3 sendmail[3870]: n2VACU5g003870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:13:30 splunk3 sendmail[4127]: n2VADUT3004127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:14:30 splunk3 sendmail[4378]: n2VAEUXS004378: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:15:25 splunk3 sendmail[4610]: n2VAFPaM004610: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311015.n2VAFPe0006952@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:15:25 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48558
|
|
Mar 31 03:15:25 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:15:25 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:15:25 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:15:26 splunk3 spamd[26484]: spamd: processing message <200903311015.n2VAFPe0006952@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:15:28 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 31 03:15:28 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48558,mid=<200903311015.n2VAFPe0006952@virt2.int.splunk.com>,bayes=0.169683821630801,autolearn=no
|
|
Mar 31 03:15:28 splunk3 sendmail[4611]: n2VAFPaM004610: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:15:30 splunk3 sendmail[4634]: n2VAFUOO004634: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:16:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:16:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:16:30 splunk3 sendmail[4880]: n2VAGUGW004880: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:17:30 splunk3 sendmail[5163]: n2VAHUsj005163: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:18:30 splunk3 sendmail[5400]: n2VAIUrb005400: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:19:30 splunk3 sendmail[5638]: n2VAJUDk005638: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:20:26 splunk3 sendmail[5872]: n2VAKQ2k005872: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311020.n2VAKQ2x007589@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:20:26 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48614
|
|
Mar 31 03:20:26 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:20:26 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:20:26 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:20:26 splunk3 spamd[26484]: spamd: processing message <200903311020.n2VAKQ2x007589@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:20:28 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 31 03:20:28 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48614,mid=<200903311020.n2VAKQ2x007589@virt2.int.splunk.com>,bayes=0.169683821630801,autolearn=no
|
|
Mar 31 03:20:28 splunk3 sendmail[5873]: n2VAKQ2k005872: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:20:30 splunk3 sendmail[5895]: n2VAKUPY005895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:21:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:21:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:21:30 splunk3 sendmail[6144]: n2VALUdo006144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:22:30 splunk3 sendmail[6379]: n2VAMU7K006379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:23:30 splunk3 sendmail[6619]: n2VANUAM006619: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:24:30 splunk3 sendmail[6854]: n2VAOU7b006854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:25:26 splunk3 sendmail[7080]: n2VAPQi0007080: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311025.n2VAPQ5W008191@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:25:26 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48669
|
|
Mar 31 03:25:26 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:25:26 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:25:26 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:25:26 splunk3 spamd[26484]: spamd: processing message <200903311025.n2VAPQ5W008191@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:25:28 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 31 03:25:28 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48669,mid=<200903311025.n2VAPQ5W008191@virt2.int.splunk.com>,bayes=0.169683821630801,autolearn=no
|
|
Mar 31 03:25:28 splunk3 sendmail[7081]: n2VAPQi0007080: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:25:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:25:30 splunk3 sendmail[7105]: n2VAPUw7007105: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:26:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:26:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:26:30 splunk3 sendmail[7347]: n2VAQURM007347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 03:27:30 splunk3 sendmail[7596]: n2VARUGi007596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:28:30 splunk3 sendmail[7830]: n2VASUQn007830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:29:30 splunk3 sendmail[8067]: n2VATUVF008067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:30:27 splunk3 sendmail[8302]: n2VAURRL008302: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311030.n2VAUQqw008817@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:30:27 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48726
|
|
Mar 31 03:30:27 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:30:27 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:30:27 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:30:27 splunk3 spamd[26484]: spamd: processing message <200903311030.n2VAUQqw008817@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:30:29 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 03:30:29 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48726,mid=<200903311030.n2VAUQqw008817@virt2.int.splunk.com>,bayes=0.169683821630801,autolearn=no
|
|
Mar 31 03:30:29 splunk3 sendmail[8304]: n2VAURRL008302: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:30:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:30:30 splunk3 sendmail[8325]: n2VAUUFr008325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:31:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:31:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:31:30 splunk3 sendmail[8573]: n2VAVUq4008573: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:32:30 splunk3 sendmail[8805]: n2VAWUxj008805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:33:30 splunk3 sendmail[9042]: n2VAXUKh009042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:34:28 splunk3 sendmail[9261]: n2VAYPpR009261: from=<spamme@splunkit.com>, size=2775, class=0, nrcpts=1, msgid=<200903311034.n2VAYPpR009261@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=[89.122.9.95]
|
|
Mar 31 03:34:28 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48766
|
|
Mar 31 03:34:28 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:34:28 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:34:28 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:34:28 splunk3 spamd[26484]: spamd: processing message <200903311034.n2VAYPpR009261@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 03:34:30 splunk3 spamd[26484]: spamd: identified spam (30.1/5.0) for spamme:501 in 1.6 seconds, 3132 bytes.
|
|
Mar 31 03:34:30 splunk3 spamd[26484]: spamd: result: Y 30 - AWL,BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.6,size=3132,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48766,mid=<200903311034.n2VAYPpR009261@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 31 03:34:30 splunk3 sendmail[9278]: n2VAYPpR009261: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33054, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:34:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:34:30 splunk3 sendmail[9283]: n2VAYUeQ009283: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:35:27 splunk3 sendmail[9534]: n2VAZRbd009534: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311035.n2VAZRua009585@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:35:27 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48782
|
|
Mar 31 03:35:27 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:35:27 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:35:27 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:35:27 splunk3 spamd[26484]: spamd: processing message <200903311035.n2VAZRua009585@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:35:29 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 31 03:35:29 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48782,mid=<200903311035.n2VAZRua009585@virt2.int.splunk.com>,bayes=0.169674964575957,autolearn=no
|
|
Mar 31 03:35:29 splunk3 sendmail[9535]: n2VAZRbd009534: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:35:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:35:30 splunk3 sendmail[9541]: n2VAZUiZ009541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:36:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:36:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:36:30 splunk3 sendmail[9794]: n2VAaUkT009794: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:37:30 splunk3 sendmail[10032]: n2VAbUTD010032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:38:30 splunk3 sendmail[10271]: n2VAcUxU010271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:39:30 splunk3 sendmail[10508]: n2VAdUJv010508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:40:28 splunk3 sendmail[10758]: n2VAeS5Z010758: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311040.n2VAeRTV010193@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:40:28 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48838
|
|
Mar 31 03:40:28 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:40:28 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:40:28 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:40:28 splunk3 spamd[26484]: spamd: processing message <200903311040.n2VAeRTV010193@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:40:30 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.9 seconds, 1311 bytes.
|
|
Mar 31 03:40:30 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.9,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48838,mid=<200903311040.n2VAeRTV010193@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 03:40:30 splunk3 sendmail[10759]: n2VAeS5Z010758: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:40:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:40:30 splunk3 sendmail[10765]: n2VAeU9k010765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:41:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:41:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:41:30 splunk3 sendmail[11012]: n2VAfUML011012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 03:42:30 splunk3 sendmail[11250]: n2VAgUkC011250: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:43:30 splunk3 sendmail[11487]: n2VAhU3O011487: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:44:30 splunk3 sendmail[11720]: n2VAiUa8011720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:45:28 splunk3 sendmail[11966]: n2VAjSmw011966: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311045.n2VAjSEh010834@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:45:28 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48894
|
|
Mar 31 03:45:28 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:45:28 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:45:28 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:45:28 splunk3 spamd[26484]: spamd: processing message <200903311045.n2VAjSEh010834@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:45:30 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 31 03:45:30 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48894,mid=<200903311045.n2VAjSEh010834@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 03:45:30 splunk3 sendmail[11967]: n2VAjSmw011966: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:45:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:45:30 splunk3 sendmail[11976]: n2VAjUEo011976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:46:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:46:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:46:30 splunk3 sendmail[12215]: n2VAkUFw012215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:47:30 splunk3 sendmail[12454]: n2VAlUgA012454: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:48:30 splunk3 sendmail[12690]: n2VAmUPC012690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:49:30 splunk3 sendmail[12930]: n2VAnU9R012930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:50:29 splunk3 sendmail[13180]: n2VAoTC3013180: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311050.n2VAoSR8011429@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:50:29 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48950
|
|
Mar 31 03:50:29 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:50:29 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:50:29 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:50:29 splunk3 spamd[26484]: spamd: processing message <200903311050.n2VAoSR8011429@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:50:30 splunk3 sendmail[13187]: n2VAoU9B013187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:50:31 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 03:50:31 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48950,mid=<200903311050.n2VAoSR8011429@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 03:50:31 splunk3 sendmail[13181]: n2VAoTC3013180: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:50:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:51:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:51:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:51:30 splunk3 sendmail[13473]: n2VApUan013473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:52:30 splunk3 sendmail[13707]: n2VAqUEd013707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:53:30 splunk3 sendmail[13948]: n2VArULr013948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:54:30 splunk3 sendmail[14185]: n2VAsUru014185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:55:29 splunk3 sendmail[14434]: n2VAtTg1014434: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311055.n2VAtTlT012057@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 03:55:29 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49006
|
|
Mar 31 03:55:29 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 03:55:29 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 03:55:29 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 03:55:29 splunk3 spamd[26484]: spamd: processing message <200903311055.n2VAtTlT012057@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 03:55:30 splunk3 sendmail[14440]: n2VAtUNc014440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:55:31 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 03:55:31 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49006,mid=<200903311055.n2VAtTlT012057@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 03:55:31 splunk3 sendmail[14435]: n2VAtTg1014434: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 03:55:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 03:56:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 03:56:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 03:56:30 splunk3 sendmail[14684]: n2VAuUk0014684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 03:57:30 splunk3 sendmail[14924]: n2VAvURc014924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:58:30 splunk3 sendmail[15156]: n2VAwUiL015156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 03:59:30 splunk3 sendmail[15393]: n2VAxUNJ015393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:00:04 splunk3 sendmail[15597]: n2VB04vC015597: from=root, size=291, class=0, nrcpts=1, msgid=<200903311100.n2VB04vC015597@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 04:00:04 splunk3 sendmail[15601]: n2VB0484015601: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311100.n2VB04vC015597@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 04:00:04 splunk3 sendmail[15597]: n2VB04vC015597: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VB0484015601 Message accepted for delivery)
|
|
Mar 31 04:00:06 splunk3 sendmail[15602]: n2VB0484015601: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:00:06 splunk3 sendmail[15619]: n2VB067q015619: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903311100.n2VB067q015619@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 04:00:06 splunk3 sendmail[15621]: n2VB067q015619: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 04:00:06 splunk3 sendmail[15621]: n2VB067q015619: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 04:00:06 splunk3 sendmail[15621]: n2VB067q015619: n2VB067q015621: postmaster notify: User unknown
|
|
Mar 31 04:00:07 splunk3 sendmail[15621]: n2VB067q015621: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:00:29 splunk3 sendmail[15727]: n2VB0Trl015727: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311100.n2VB0TfS012671@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:00:30 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49070
|
|
Mar 31 04:00:30 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:00:30 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 04:00:30 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 04:00:30 splunk3 sendmail[15728]: n2VB0Trl015727: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:00:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:00:30 splunk3 sendmail[15732]: n2VB0UeP015732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:01:10 splunk3 sendmail[15861]: n2VB1186015861: from=root, size=443, class=0, nrcpts=1, msgid=<200903311101.n2VB1186015861@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 04:01:10 splunk3 sendmail[15905]: n2VB1Ab5015905: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311101.n2VB1186015861@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 04:01:10 splunk3 sendmail[15861]: n2VB1186015861: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VB1Ab5015905 Message accepted for delivery)
|
|
Mar 31 04:01:12 splunk3 sendmail[15906]: n2VB1Ab5015905: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:01:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:01:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:01:30 splunk3 sendmail[15993]: n2VB1Ud9015993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:02:04 splunk3 sendmail[16447]: n2VB24GD016447: from=root, size=1745, class=0, nrcpts=1, msgid=<200903311102.n2VB24GD016447@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 04:02:04 splunk3 sendmail[16449]: n2VB24kE016449: from=<root@splunk3.splunkit.com>, size=2047, class=0, nrcpts=1, msgid=<200903311102.n2VB24GD016447@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 04:02:04 splunk3 sendmail[16447]: n2VB24GD016447: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=31745, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VB24kE016449 Message accepted for delivery)
|
|
Mar 31 04:02:07 splunk3 sendmail[16450]: n2VB24kE016449: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=local, pri=32281, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:02:30 splunk3 sendmail[16689]: n2VB2USW016689: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:03:04 splunk3 sendmail[16831]: n2VB33mu016831: from=<3Z_jRSRQKBnsfnnfkdZkdqsr-mnqdokxfnnfkd.bnlroZlldroktmjhs.bnl@alerts.bounces.google.com>, size=3434, class=0, nrcpts=1, msgid=<0016362834ee9c58840466682488@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 31 04:03:04 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49097
|
|
Mar 31 04:03:04 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:03:04 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 04:03:04 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 04:03:04 splunk3 sendmail[16833]: n2VB33mu016831: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=33650, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:03:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:03:30 splunk3 sendmail[16934]: n2VB3U8a016934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:04:30 splunk3 sendmail[17168]: n2VB4U0b017168: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:05:30 splunk3 sendmail[17416]: n2VB5UqK017416: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311105.n2VB5UIp013879@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:05:30 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49129
|
|
Mar 31 04:05:30 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:05:30 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 04:05:30 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 04:05:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:05:30 splunk3 sendmail[17417]: n2VB5UqK017416: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:05:30 splunk3 sendmail[17421]: n2VB5Uii017421: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:06:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:06:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:06:30 splunk3 sendmail[17664]: n2VB6UZR017664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:07:30 splunk3 sendmail[17900]: n2VB7Ur2017900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:08:30 splunk3 sendmail[18140]: n2VB8UkY018140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:09:30 splunk3 sendmail[18382]: n2VB9UHc018382: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:10:00 splunk3 sendmail[18498]: n2VBA046018498: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311110.n2VBA0s8014394@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:10:00 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49172
|
|
Mar 31 04:10:00 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:10:00 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 04:10:00 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 04:10:00 splunk3 sendmail[18499]: n2VBA046018498: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:10:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:10:02 splunk3 sendmail[18624]: n2VBA2TK018624: from=root, size=292, class=0, nrcpts=1, msgid=<200903311110.n2VBA2TK018624@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 04:10:02 splunk3 sendmail[18629]: n2VBA2fr018629: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311110.n2VBA2TK018624@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 04:10:02 splunk3 sendmail[18624]: n2VBA2TK018624: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VBA2fr018629 Message accepted for delivery)
|
|
Mar 31 04:10:04 splunk3 sendmail[18635]: n2VBA2fr018629: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:10:30 splunk3 sendmail[18755]: n2VBAUTf018755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:11:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:11:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:11:30 splunk3 sendmail[19003]: n2VBBUDH019003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 04:12:30 splunk3 sendmail[19239]: n2VBCUIg019239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:13:31 splunk3 sendmail[19476]: n2VBDViK019476: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:14:31 splunk3 sendmail[19709]: n2VBEVZA019709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:15:01 splunk3 sendmail[19833]: n2VBF1wU019833: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311115.n2VBF0BA015194@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:15:01 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49230
|
|
Mar 31 04:15:01 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:15:01 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 04:15:01 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 04:15:01 splunk3 spamd[26484]: spamd: processing message <200903311115.n2VBF0BA015194@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 04:15:03 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 04:15:03 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49230,mid=<200903311115.n2VBF0BA015194@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 04:15:03 splunk3 sendmail[19834]: n2VBF1wU019833: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:15:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:15:31 splunk3 sendmail[19966]: n2VBFVCD019966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:16:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:16:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:16:31 splunk3 sendmail[20209]: n2VBGVie020209: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:17:31 splunk3 sendmail[20448]: n2VBHVUM020448: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:18:31 splunk3 sendmail[20683]: n2VBIVdp020683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:19:31 splunk3 sendmail[20920]: n2VBJVT1020920: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:20:01 splunk3 sendmail[21041]: n2VBK1rf021041: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311120.n2VBK1Ru015805@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:20:01 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49285
|
|
Mar 31 04:20:01 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:20:01 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 04:20:01 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 04:20:01 splunk3 spamd[26484]: spamd: processing message <200903311120.n2VBK1Ru015805@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 04:20:03 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 04:20:03 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49285,mid=<200903311120.n2VBK1Ru015805@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 04:20:03 splunk3 sendmail[21042]: n2VBK1rf021041: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:20:31 splunk3 sendmail[21176]: n2VBKVXm021176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:21:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:21:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:21:31 splunk3 sendmail[21422]: n2VBLVMj021422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:22:31 splunk3 sendmail[21657]: n2VBMVXK021657: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:23:31 splunk3 sendmail[21900]: n2VBNVED021900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:24:31 splunk3 sendmail[22138]: n2VBOVjg022138: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:25:01 splunk3 sendmail[22276]: n2VBP1CU022276: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311125.n2VBP1PJ016435@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:25:01 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49341
|
|
Mar 31 04:25:01 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:25:02 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 04:25:02 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 04:25:02 splunk3 spamd[26484]: spamd: processing message <200903311125.n2VBP1PJ016435@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 04:25:04 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 04:25:04 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49341,mid=<200903311125.n2VBP1PJ016435@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 04:25:04 splunk3 sendmail[22277]: n2VBP1CU022276: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:25:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:25:31 splunk3 sendmail[22392]: n2VBPVkK022392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:26:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:26:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 04:26:31 splunk3 sendmail[22650]: n2VBQVEF022650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:27:31 splunk3 sendmail[22888]: n2VBRV1Q022888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:28:31 splunk3 sendmail[23122]: n2VBSVsu023122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:29:31 splunk3 sendmail[23361]: n2VBTVEq023361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:30:02 splunk3 sendmail[23506]: n2VBU2dc023506: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311130.n2VBU23e017098@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:30:02 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49398
|
|
Mar 31 04:30:02 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:30:02 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 04:30:02 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 04:30:02 splunk3 spamd[26484]: spamd: processing message <200903311130.n2VBU23e017098@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 04:30:04 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 04:30:04 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49398,mid=<200903311130.n2VBU23e017098@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 04:30:04 splunk3 sendmail[23507]: n2VBU2dc023506: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:30:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:30:31 splunk3 sendmail[23619]: n2VBUVde023619: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:31:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:31:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:31:31 splunk3 sendmail[23867]: n2VBVVoJ023867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:32:31 splunk3 sendmail[24102]: n2VBWVWe024102: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:33:31 splunk3 sendmail[24340]: n2VBXVC6024340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:34:31 splunk3 sendmail[24572]: n2VBYVrn024572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:35:02 splunk3 sendmail[24714]: n2VBZ2ak024714: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311135.n2VBZ25Q017846@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:35:02 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49453
|
|
Mar 31 04:35:02 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:35:02 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 04:35:02 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 04:35:02 splunk3 spamd[26484]: spamd: processing message <200903311135.n2VBZ25Q017846@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 04:35:04 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 04:35:04 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49453,mid=<200903311135.n2VBZ25Q017846@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 04:35:04 splunk3 sendmail[24715]: n2VBZ2ak024714: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:35:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:35:31 splunk3 sendmail[24824]: n2VBZVrx024824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:36:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:36:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:36:31 splunk3 sendmail[25067]: n2VBaV9M025067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:37:31 splunk3 sendmail[25306]: n2VBbVZt025306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:38:31 splunk3 sendmail[25546]: n2VBcVwX025546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:39:31 splunk3 sendmail[25787]: n2VBdVrh025787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:40:03 splunk3 sendmail[25926]: n2VBe3uw025926: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311140.n2VBe2Wo018462@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:40:03 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49509
|
|
Mar 31 04:40:03 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:40:03 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 04:40:03 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 04:40:03 splunk3 spamd[26484]: spamd: processing message <200903311140.n2VBe2Wo018462@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 04:40:05 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 04:40:05 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49509,mid=<200903311140.n2VBe2Wo018462@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 04:40:05 splunk3 sendmail[25927]: n2VBe3uw025926: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:40:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:40:31 splunk3 sendmail[26042]: n2VBeVv3026042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:41:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:41:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 04:41:31 splunk3 sendmail[26288]: n2VBfVpm026288: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:42:31 splunk3 sendmail[26527]: n2VBgVfc026527: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:43:31 splunk3 sendmail[26765]: n2VBhVRP026765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:44:31 splunk3 sendmail[27000]: n2VBiVHW027000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:45:03 splunk3 sendmail[27143]: n2VBj3uW027143: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311145.n2VBj3FG019091@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:45:03 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49565
|
|
Mar 31 04:45:03 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:45:03 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 04:45:03 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 04:45:03 splunk3 spamd[26484]: spamd: processing message <200903311145.n2VBj3FG019091@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 04:45:05 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1311 bytes.
|
|
Mar 31 04:45:05 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49565,mid=<200903311145.n2VBj3FG019091@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 04:45:05 splunk3 sendmail[27144]: n2VBj3uW027143: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:45:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:45:31 splunk3 sendmail[27256]: n2VBjV6w027256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:46:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:46:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:46:31 splunk3 sendmail[27500]: n2VBkVpK027500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:47:31 splunk3 sendmail[27738]: n2VBlVJH027738: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:48:31 splunk3 sendmail[27971]: n2VBmVeJ027971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:49:31 splunk3 sendmail[28208]: n2VBnVpP028208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:50:04 splunk3 sendmail[28354]: n2VBo450028354: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311150.n2VBo3IV019707@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:50:04 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49621
|
|
Mar 31 04:50:04 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:50:04 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 04:50:04 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 04:50:04 splunk3 spamd[26484]: spamd: processing message <200903311150.n2VBo3IV019707@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 04:50:06 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 04:50:06 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49621,mid=<200903311150.n2VBo3IV019707@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 04:50:06 splunk3 sendmail[28355]: n2VBo450028354: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:50:31 splunk3 sendmail[28465]: n2VBoVqn028465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:51:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:51:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:51:31 splunk3 sendmail[28712]: n2VBpVbj028712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:52:31 splunk3 sendmail[28947]: n2VBqVJF028947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:53:31 splunk3 sendmail[29190]: n2VBrVsF029190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:54:31 splunk3 sendmail[29424]: n2VBsVIX029424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:55:04 splunk3 sendmail[29563]: n2VBt4Jx029563: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311155.n2VBt4xR020319@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 04:55:04 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49676
|
|
Mar 31 04:55:04 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 04:55:04 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 04:55:04 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 04:55:04 splunk3 spamd[26484]: spamd: processing message <200903311155.n2VBt4xR020319@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 04:55:06 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 04:55:06 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49676,mid=<200903311155.n2VBt4xR020319@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 04:55:06 splunk3 sendmail[29564]: n2VBt4Jx029563: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 04:55:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 04:55:31 splunk3 sendmail[29676]: n2VBtVXr029676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:56:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 04:56:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 04:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 04:56:31 splunk3 sendmail[29919]: n2VBuVi5029919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:57:31 splunk3 sendmail[30161]: n2VBvVuA030161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:58:31 splunk3 sendmail[30396]: n2VBwVqP030396: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 04:59:31 splunk3 sendmail[30636]: n2VBxVuB030636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:00:04 splunk3 sendmail[30839]: n2VC04e7030839: from=root, size=291, class=0, nrcpts=1, msgid=<200903311200.n2VC04e7030839@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 05:00:04 splunk3 sendmail[30843]: n2VC04Zq030843: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311200.n2VC04e7030839@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 05:00:04 splunk3 sendmail[30839]: n2VC04e7030839: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VC04Zq030843 Message accepted for delivery)
|
|
Mar 31 05:00:05 splunk3 sendmail[30848]: n2VC05F3030848: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311200.n2VC04jc020959@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:00:05 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49734
|
|
Mar 31 05:00:05 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:00:05 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 05:00:05 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 05:00:05 splunk3 sendmail[30849]: n2VC05F3030848: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:00:06 splunk3 sendmail[30844]: n2VC04Zq030843: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:00:11 splunk3 sendmail[30903]: n2VC0BoA030903: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903311200.n2VC0BoA030903@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 05:00:11 splunk3 sendmail[30905]: n2VC0BoA030903: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 05:00:11 splunk3 sendmail[30905]: n2VC0BoA030903: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 05:00:11 splunk3 sendmail[30905]: n2VC0BoA030903: n2VC0BoA030905: postmaster notify: User unknown
|
|
Mar 31 05:00:13 splunk3 sendmail[30905]: n2VC0BoA030905: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:00:31 splunk3 sendmail[30997]: n2VC0VjE030997: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:01:06 splunk3 sendmail[31120]: n2VC11bq031120: from=root, size=443, class=0, nrcpts=1, msgid=<200903311201.n2VC11bq031120@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 05:01:06 splunk3 sendmail[31141]: n2VC16ow031141: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311201.n2VC11bq031120@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 05:01:06 splunk3 sendmail[31120]: n2VC11bq031120: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VC16ow031141 Message accepted for delivery)
|
|
Mar 31 05:01:08 splunk3 sendmail[31142]: n2VC16ow031141: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:01:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:01:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:01:31 splunk3 sendmail[31257]: n2VC1Vmh031257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:01:48 splunk3 sendmail[31294]: n2VC1hcv031294: from=<spamme@splunkit.com>, size=1979, class=0, nrcpts=1, msgid=<200903311201.n2VC1hcv031294@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=ppp-58-8-22-153.revip2.asianet.co.th [58.8.22.153]
|
|
Mar 31 05:01:48 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49767
|
|
Mar 31 05:01:48 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:01:48 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 05:01:48 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 05:01:48 splunk3 sendmail[31313]: n2VC1hcv031294: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:01, xdelay=00:00:00, mailer=local, pri=32325, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:01:48 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:02:31 splunk3 sendmail[31494]: n2VC2Vlu031494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:02:46 splunk3 sendmail[31519]: n2VC2fjk031519: from=<spamme@splunkit.com>, size=2745, class=0, nrcpts=1, msgid=<200903311202.n2VC2fjk031519@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=triband-mum-59.184.148.86.mtnl.net.in [59.184.148.86] (may be forged)
|
|
Mar 31 05:02:46 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49777
|
|
Mar 31 05:02:46 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:02:46 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 05:02:46 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 05:02:46 splunk3 sendmail[31553]: n2VC2fjk031519: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:00, mailer=local, pri=33094, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:02:46 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:03:31 splunk3 sendmail[31738]: n2VC3VGc031738: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:04:31 splunk3 sendmail[31971]: n2VC4VFR031971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:05:06 splunk3 sendmail[32112]: n2VC56x3032112: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311205.n2VC55iD021645@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:05:06 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49799
|
|
Mar 31 05:05:06 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:05:06 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 05:05:06 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 05:05:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:05:06 splunk3 sendmail[32113]: n2VC56x3032112: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:05:31 splunk3 sendmail[32224]: n2VC5VYA032224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:06:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:06:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:06:31 splunk3 sendmail[32470]: n2VC6VBx032470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:07:31 splunk3 sendmail[32708]: n2VC7V62032708: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:08:31 splunk3 sendmail[478]: n2VC8VBM000478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:09:31 splunk3 sendmail[718]: n2VC9VVG000718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:10:02 splunk3 sendmail[935]: n2VCA25F000935: from=root, size=292, class=0, nrcpts=1, msgid=<200903311210.n2VCA25F000935@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 05:10:03 splunk3 sendmail[940]: n2VCA2WD000940: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311210.n2VCA25F000935@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 05:10:03 splunk3 sendmail[935]: n2VCA25F000935: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VCA2WD000940 Message accepted for delivery)
|
|
Mar 31 05:10:04 splunk3 sendmail[941]: n2VCA2WD000940: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:10:06 splunk3 sendmail[962]: n2VCA62l000962: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311210.n2VCA6ZU022262@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:10:06 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49856
|
|
Mar 31 05:10:06 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:10:06 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:10:06 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:10:06 splunk3 spamd[26484]: spamd: processing message <200903311210.n2VCA6ZU022262@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:10:08 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 31 05:10:08 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49856,mid=<200903311210.n2VCA6ZU022262@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 05:10:08 splunk3 sendmail[963]: n2VCA62l000962: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:10:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:10:31 splunk3 sendmail[1077]: n2VCAVM8001077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:11:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:11:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 05:11:31 splunk3 sendmail[1326]: n2VCBVP2001326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:12:31 splunk3 sendmail[1563]: n2VCCVQP001563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:13:31 splunk3 sendmail[1804]: n2VCDVRF001804: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:14:31 splunk3 sendmail[2041]: n2VCEV59002041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:15:07 splunk3 sendmail[2179]: n2VCF7iw002179: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311215.n2VCF6FA023062@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:15:07 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49913
|
|
Mar 31 05:15:07 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:15:07 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:15:07 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:15:07 splunk3 spamd[26484]: spamd: processing message <200903311215.n2VCF6FA023062@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:15:09 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 05:15:09 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49913,mid=<200903311215.n2VCF6FA023062@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 05:15:09 splunk3 sendmail[2180]: n2VCF7iw002179: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:15:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:15:31 splunk3 sendmail[2296]: n2VCFVX6002296: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:16:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:16:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:16:31 splunk3 sendmail[2538]: n2VCGVOs002538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:17:31 splunk3 sendmail[2790]: n2VCHVT4002790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:18:31 splunk3 sendmail[3036]: n2VCIVTH003036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:19:31 splunk3 sendmail[3278]: n2VCJVHJ003278: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:20:07 splunk3 sendmail[3421]: n2VCK7B7003421: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311220.n2VCK7Yg023725@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:20:07 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49968
|
|
Mar 31 05:20:07 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:20:07 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:20:07 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:20:07 splunk3 spamd[26484]: spamd: processing message <200903311220.n2VCK7Yg023725@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:20:09 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 05:20:09 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49968,mid=<200903311220.n2VCK7Yg023725@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 05:20:09 splunk3 sendmail[3423]: n2VCK7B7003421: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:20:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:20:31 splunk3 sendmail[3534]: n2VCKV59003534: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:21:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:21:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:21:31 splunk3 sendmail[3813]: n2VCLVWM003813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:22:31 splunk3 sendmail[4057]: n2VCMV1I004057: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:23:31 splunk3 sendmail[4309]: n2VCNVoN004309: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:24:31 splunk3 sendmail[4553]: n2VCOV9C004553: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:25:07 splunk3 sendmail[4692]: n2VCP7o1004692: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311225.n2VCP778024338@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:25:08 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50024
|
|
Mar 31 05:25:08 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:25:08 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:25:08 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:25:08 splunk3 spamd[26484]: spamd: processing message <200903311225.n2VCP778024338@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:25:10 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 31 05:25:10 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50024,mid=<200903311225.n2VCP778024338@virt2.int.splunk.com>,bayes=0.112688969592671,autolearn=no
|
|
Mar 31 05:25:10 splunk3 sendmail[4693]: n2VCP7o1004692: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:25:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:25:31 splunk3 sendmail[4807]: n2VCPVFD004807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:26:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:26:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 05:26:31 splunk3 sendmail[5063]: n2VCQVh1005063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:27:31 splunk3 sendmail[5340]: n2VCRVLe005340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:28:31 splunk3 sendmail[5579]: n2VCSVVp005579: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:29:20 splunk3 sendmail[5757]: n2VCTJwS005757: from=<npotential@epaulv.com>, size=1436, class=0, nrcpts=1, msgid=<001b01c9b215$766556e0$02880fa4@home1>, proto=ESMTP, daemon=MTA, relay=[193.110.163.158]
|
|
Mar 31 05:29:20 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50074
|
|
Mar 31 05:29:20 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:29:20 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:29:20 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:29:20 splunk3 spamd[26484]: spamd: processing message <001b01c9b215$766556e0$02880fa4@home1> for spamme:501
|
|
Mar 31 05:29:22 splunk3 spamd[26484]: spamd: identified spam (22.6/5.0) for spamme:501 in 1.6 seconds, 1711 bytes.
|
|
Mar 31 05:29:22 splunk3 spamd[26484]: spamd: result: Y 22 - BAYES_99,DNS_FROM_RFC_BOGUSMX,HTML_MESSAGE,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=1.6,size=1711,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50074,mid=<001b01c9b215$766556e0$02880fa4@home1>,bayes=0.999999999126457,autolearn=spam
|
|
Mar 31 05:29:22 splunk3 sendmail[5759]: n2VCTJwS005757: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31625, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:29:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:29:31 splunk3 sendmail[5823]: n2VCTVKh005823: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:30:08 splunk3 sendmail[5963]: n2VCU861005963: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311230.n2VCU8Hx024956@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:30:08 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50081
|
|
Mar 31 05:30:08 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:30:08 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:30:08 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:30:08 splunk3 spamd[26484]: spamd: processing message <200903311230.n2VCU8Hx024956@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:30:10 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 05:30:10 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50081,mid=<200903311230.n2VCU8Hx024956@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 05:30:10 splunk3 sendmail[5964]: n2VCU861005963: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:30:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:30:31 splunk3 sendmail[6077]: n2VCUVuJ006077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:31:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:31:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:31:31 splunk3 sendmail[6325]: n2VCVVCb006325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:32:31 splunk3 sendmail[6560]: n2VCWVHN006560: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:33:31 splunk3 sendmail[6800]: n2VCXVDR006800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:34:31 splunk3 sendmail[7036]: n2VCYVio007036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:35:09 splunk3 sendmail[7176]: n2VCZ962007176: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311235.n2VCZ8gM025701@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:35:09 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50137
|
|
Mar 31 05:35:09 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:35:09 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:35:09 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:35:09 splunk3 spamd[26484]: spamd: processing message <200903311235.n2VCZ8gM025701@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:35:11 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 05:35:11 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50137,mid=<200903311235.n2VCZ8gM025701@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 05:35:11 splunk3 sendmail[7177]: n2VCZ962007176: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:35:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:35:31 splunk3 sendmail[7290]: n2VCZVZa007290: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:36:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:36:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:36:31 splunk3 sendmail[7538]: n2VCaVti007538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:37:31 splunk3 sendmail[7777]: n2VCbVIJ007777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:38:31 splunk3 sendmail[8015]: n2VCcV2p008015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:39:31 splunk3 sendmail[8254]: n2VCdV0r008254: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:40:09 splunk3 sendmail[8397]: n2VCe9nA008397: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311240.n2VCe9X1026342@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:40:09 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50192
|
|
Mar 31 05:40:09 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:40:09 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:40:09 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:40:09 splunk3 spamd[26484]: spamd: processing message <200903311240.n2VCe9X1026342@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:40:11 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 05:40:11 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50192,mid=<200903311240.n2VCe9X1026342@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 05:40:11 splunk3 sendmail[8398]: n2VCe9nA008397: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:40:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:40:31 splunk3 sendmail[8509]: n2VCeVLo008509: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:41:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:41:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 05:41:31 splunk3 sendmail[8758]: n2VCfVPl008758: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:42:31 splunk3 sendmail[8993]: n2VCgV46008993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:43:31 splunk3 sendmail[9230]: n2VChVp7009230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:44:31 splunk3 sendmail[9462]: n2VCiVSw009462: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:45:10 splunk3 sendmail[9615]: n2VCjAFD009615: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311245.n2VCj9Kw026954@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:45:10 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50249
|
|
Mar 31 05:45:10 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:45:10 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:45:10 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:45:10 splunk3 spamd[26484]: spamd: processing message <200903311245.n2VCj9Kw026954@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:45:12 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 05:45:12 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50249,mid=<200903311245.n2VCj9Kw026954@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 05:45:12 splunk3 sendmail[9616]: n2VCjAFD009615: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:45:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:45:31 splunk3 sendmail[9728]: n2VCjVg8009728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:46:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:46:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:46:31 splunk3 sendmail[9972]: n2VCkVlC009972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:47:31 splunk3 sendmail[10212]: n2VClVGV010212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:48:31 splunk3 sendmail[10450]: n2VCmVIN010450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:49:31 splunk3 sendmail[10690]: n2VCnVuP010690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:50:10 splunk3 sendmail[10847]: n2VCoAqP010847: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311250.n2VCoAls027568@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:50:10 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50304
|
|
Mar 31 05:50:10 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:50:10 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:50:10 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:50:10 splunk3 spamd[26484]: spamd: processing message <200903311250.n2VCoAls027568@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:50:12 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1311 bytes.
|
|
Mar 31 05:50:12 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50304,mid=<200903311250.n2VCoAls027568@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 05:50:12 splunk3 sendmail[10848]: n2VCoAqP010847: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:50:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:50:31 splunk3 sendmail[10944]: n2VCoVJS010944: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:51:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:51:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:51:31 splunk3 sendmail[11189]: n2VCpVdQ011189: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:52:31 splunk3 sendmail[11424]: n2VCqVxv011424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:53:31 splunk3 sendmail[11667]: n2VCrVbB011667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:54:31 splunk3 sendmail[11902]: n2VCsVNk011902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:55:11 splunk3 sendmail[12060]: n2VCtBKe012060: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311255.n2VCtAPx028178@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 05:55:11 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50360
|
|
Mar 31 05:55:11 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 05:55:11 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 05:55:11 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 05:55:11 splunk3 spamd[26484]: spamd: processing message <200903311255.n2VCtAPx028178@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 05:55:13 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 05:55:13 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50360,mid=<200903311255.n2VCtAPx028178@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 05:55:13 splunk3 sendmail[12061]: n2VCtBKe012060: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 05:55:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 05:55:31 splunk3 sendmail[12156]: n2VCtVhC012156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:56:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 05:56:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 05:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 05:56:31 splunk3 sendmail[12399]: n2VCuVK5012399: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:57:31 splunk3 sendmail[12640]: n2VCvVJA012640: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:58:31 splunk3 sendmail[12870]: n2VCwVkR012870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 05:59:31 splunk3 sendmail[13110]: n2VCxVJO013110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:00:04 splunk3 sendmail[13326]: n2VD04l5013326: from=root, size=291, class=0, nrcpts=1, msgid=<200903311300.n2VD04l5013326@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 06:00:04 splunk3 sendmail[13331]: n2VD04nq013331: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311300.n2VD04l5013326@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 06:00:04 splunk3 sendmail[13326]: n2VD04l5013326: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VD04nq013331 Message accepted for delivery)
|
|
Mar 31 06:00:06 splunk3 sendmail[13332]: n2VD04nq013331: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:00:11 splunk3 sendmail[13377]: n2VD0BcM013377: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311300.n2VD0B3R028814@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:00:11 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50418
|
|
Mar 31 06:00:11 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:00:11 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 06:00:11 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 06:00:11 splunk3 sendmail[13378]: n2VD0BcM013377: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:00:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:00:17 splunk3 sendmail[13413]: n2VD0Ht0013413: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903311300.n2VD0Ht0013413@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 06:00:17 splunk3 sendmail[13415]: n2VD0Ht0013413: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 06:00:17 splunk3 sendmail[13415]: n2VD0Ht0013413: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 06:00:17 splunk3 sendmail[13415]: n2VD0Ht0013413: n2VD0Ht0013415: postmaster notify: User unknown
|
|
Mar 31 06:00:18 splunk3 sendmail[13415]: n2VD0Ht0013415: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:00:31 splunk3 sendmail[13488]: n2VD0Vjb013488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:01:06 splunk3 sendmail[13616]: n2VD11Rx013616: from=root, size=443, class=0, nrcpts=1, msgid=<200903311301.n2VD11Rx013616@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 06:01:06 splunk3 sendmail[13638]: n2VD16gX013638: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311301.n2VD11Rx013616@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 06:01:06 splunk3 sendmail[13616]: n2VD11Rx013616: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VD16gX013638 Message accepted for delivery)
|
|
Mar 31 06:01:08 splunk3 sendmail[13639]: n2VD16gX013638: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:01:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:01:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:01:31 splunk3 sendmail[13750]: n2VD1Vhi013750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:02:31 splunk3 sendmail[13986]: n2VD2VWM013986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:03:31 splunk3 sendmail[14225]: n2VD3VVh014225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:04:27 splunk3 sendmail[14435]: n2VD4Qi3014435: ruleset=check_rcpt, arg1=<sanjinn001@yahoo.com.tw>, relay=218-160-113-53.dynamic.hinet.net [218.160.113.53], reject=550 5.7.1 <sanjinn001@yahoo.com.tw>... Relaying denied
|
|
Mar 31 06:04:31 splunk3 sendmail[14461]: n2VD4VZn014461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:05:12 splunk3 sendmail[14619]: n2VD5CgX014619: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311305.n2VD5C3H029499@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:05:12 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50482
|
|
Mar 31 06:05:12 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:05:12 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 06:05:12 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 06:05:12 splunk3 sendmail[14620]: n2VD5CgX014619: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:05:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:05:31 splunk3 sendmail[14711]: n2VD5VD0014711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:06:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:06:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:06:31 splunk3 sendmail[14956]: n2VD6Vat014956: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:07:31 splunk3 sendmail[15195]: n2VD7VAX015195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:08:31 splunk3 sendmail[15435]: n2VD8V0D015435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:09:31 splunk3 sendmail[15678]: n2VD9VrQ015678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:10:02 splunk3 sendmail[15891]: n2VDA2Hk015891: from=root, size=292, class=0, nrcpts=1, msgid=<200903311310.n2VDA2Hk015891@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 06:10:03 splunk3 sendmail[15896]: n2VDA3Em015896: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311310.n2VDA2Hk015891@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 06:10:03 splunk3 sendmail[15891]: n2VDA2Hk015891: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VDA3Em015896 Message accepted for delivery)
|
|
Mar 31 06:10:04 splunk3 sendmail[15897]: n2VDA3Em015896: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:10:13 splunk3 sendmail[15941]: n2VDADgU015941: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311310.n2VDACQY030115@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:10:13 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50539
|
|
Mar 31 06:10:13 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:10:13 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:10:13 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:10:13 splunk3 spamd[26484]: spamd: processing message <200903311310.n2VDACQY030115@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:10:15 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 06:10:15 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50539,mid=<200903311310.n2VDACQY030115@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 06:10:15 splunk3 sendmail[15942]: n2VDADgU015941: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:10:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:10:31 splunk3 sendmail[16036]: n2VDAVVh016036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:11:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:11:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 06:11:31 splunk3 sendmail[16284]: n2VDBVYH016284: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:12:31 splunk3 sendmail[16515]: n2VDCVLu016515: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:13:31 splunk3 sendmail[16754]: n2VDDVVe016754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:14:31 splunk3 sendmail[16988]: n2VDEVBS016988: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:15:14 splunk3 sendmail[17147]: n2VDFEVY017147: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311315.n2VDFDUZ030917@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:15:14 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50595
|
|
Mar 31 06:15:14 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:15:14 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:15:14 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:15:14 splunk3 spamd[26484]: spamd: processing message <200903311315.n2VDFDUZ030917@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:15:18 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1311 bytes.
|
|
Mar 31 06:15:18 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50595,mid=<200903311315.n2VDFDUZ030917@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 06:15:18 splunk3 sendmail[17148]: n2VDFEVY017147: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:15:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:15:31 splunk3 sendmail[17244]: n2VDFVcD017244: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:16:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:16:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:16:31 splunk3 sendmail[17489]: n2VDGVeX017489: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:17:31 splunk3 sendmail[17727]: n2VDHVbV017727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:18:31 splunk3 sendmail[17963]: n2VDIVvN017963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:19:31 splunk3 sendmail[18198]: n2VDJVCq018198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:20:14 splunk3 sendmail[18359]: n2VDKEut018359: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311320.n2VDKEol031548@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:20:14 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50651
|
|
Mar 31 06:20:14 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:20:14 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:20:14 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:20:14 splunk3 spamd[26484]: spamd: processing message <200903311320.n2VDKEol031548@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:20:16 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 31 06:20:16 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50651,mid=<200903311320.n2VDKEol031548@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 06:20:16 splunk3 sendmail[18360]: n2VDKEut018359: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:20:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:20:31 splunk3 sendmail[18455]: n2VDKVX7018455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:21:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:21:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:21:31 splunk3 sendmail[18703]: n2VDLVb6018703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:22:32 splunk3 sendmail[18940]: n2VDMWpu018940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:23:32 splunk3 sendmail[19184]: n2VDNW4a019184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:24:15 splunk3 sendmail[19354]: n2VDOFJe019354: from=<3fxnSSRQKBrQaiiafYUfYlnm-hilYjfsaiiafY.WigmjUggYmjfohecn.Wig@alerts.bounces.google.com>, size=10242, class=0, nrcpts=1, msgid=<000e0cd47bbc8bbe4c04666a1d5d@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 31 06:24:15 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50697
|
|
Mar 31 06:24:15 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:24:15 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:24:15 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:24:15 splunk3 spamd[26484]: spamd: processing message <000e0cd47bbc8bbe4c04666a1d5d@google.com> for spamme:501
|
|
Mar 31 06:24:18 splunk3 spamd[26484]: spamd: clean message (-1.3/5.0) for spamme:501 in 2.6 seconds, 10677 bytes.
|
|
Mar 31 06:24:18 splunk3 spamd[26484]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=2.6,size=10677,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50697,mid=<000e0cd47bbc8bbe4c04666a1d5d@google.com>,bayes=5.55111512312578e-17,autolearn=no
|
|
Mar 31 06:24:18 splunk3 sendmail[19355]: n2VDOFJe019354: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=40458, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:24:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:24:32 splunk3 sendmail[19424]: n2VDOWLW019424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:25:15 splunk3 sendmail[19594]: n2VDPFax019594: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311325.n2VDPE83032155@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:25:15 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50707
|
|
Mar 31 06:25:15 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:25:15 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:25:15 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:25:15 splunk3 spamd[26484]: spamd: processing message <200903311325.n2VDPE83032155@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:25:17 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 06:25:17 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50707,mid=<200903311325.n2VDPE83032155@virt2.int.splunk.com>,bayes=0.112689917545608,autolearn=no
|
|
Mar 31 06:25:17 splunk3 sendmail[19600]: n2VDPFax019594: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:25:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:25:32 splunk3 sendmail[19676]: n2VDPWbF019676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:26:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:26:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 06:26:32 splunk3 sendmail[19919]: n2VDQWCw019919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:27:32 splunk3 sendmail[20160]: n2VDRW6r020160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:28:32 splunk3 sendmail[20393]: n2VDSWwv020393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:29:32 splunk3 sendmail[20632]: n2VDTWfN020632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:30:16 splunk3 sendmail[20809]: n2VDUGJr020809: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903311330.n2VDUF1Y000308@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:30:16 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50764
|
|
Mar 31 06:30:16 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:30:16 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:30:16 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:30:16 splunk3 spamd[26484]: spamd: processing message <200903311330.n2VDUF1Y000308@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:30:18 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Mar 31 06:30:18 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50764,mid=<200903311330.n2VDUF1Y000308@virt2.int.splunk.com>,bayes=0.0666417611255411,autolearn=no
|
|
Mar 31 06:30:18 splunk3 sendmail[20810]: n2VDUGJr020809: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:30:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:30:32 splunk3 sendmail[20889]: n2VDUWZq020889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:31:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:31:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:31:32 splunk3 sendmail[21136]: n2VDVWbm021136: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:32:32 splunk3 sendmail[21371]: n2VDWW5w021371: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:33:32 splunk3 sendmail[21607]: n2VDXWFA021607: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:34:32 splunk3 sendmail[21843]: n2VDYWqa021843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:35:16 splunk3 sendmail[22019]: n2VDZGYK022019: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311335.n2VDZGMX001066@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:35:16 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50819
|
|
Mar 31 06:35:16 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:35:16 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:35:16 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:35:16 splunk3 spamd[26484]: spamd: processing message <200903311335.n2VDZGMX001066@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:35:18 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 31 06:35:18 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50819,mid=<200903311335.n2VDZGMX001066@virt2.int.splunk.com>,bayes=0.169681210031966,autolearn=no
|
|
Mar 31 06:35:18 splunk3 sendmail[22020]: n2VDZGYK022019: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:35:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:35:32 splunk3 sendmail[22097]: n2VDZWks022097: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:36:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:36:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:36:32 splunk3 sendmail[22342]: n2VDaWCj022342: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:37:32 splunk3 sendmail[22583]: n2VDbWuG022583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:38:32 splunk3 sendmail[22821]: n2VDcWIY022821: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:38:57 splunk3 sendmail[22912]: n2VDctOE022912: from=<spamme@splunkit.com>, size=2759, class=0, nrcpts=1, msgid=<200903311338.n2VDctOE022912@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=pool-173-66-227-175.washdc.fios.verizon.net [173.66.227.175]
|
|
Mar 31 06:38:57 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50863
|
|
Mar 31 06:38:57 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:38:57 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:38:57 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:38:57 splunk3 spamd[26484]: spamd: processing message <200903311338.n2VDctOE022912@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 06:38:59 splunk3 spamd[26484]: spamd: identified spam (32.8/5.0) for spamme:501 in 2.2 seconds, 3200 bytes.
|
|
Mar 31 06:38:59 splunk3 spamd[26484]: spamd: result: Y 32 - AWL,BAYES_99,HELO_DYNAMIC_IPADDR,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.2,size=3200,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50863,mid=<200903311338.n2VDctOE022912@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 31 06:38:59 splunk3 sendmail[22920]: n2VDctOE022912: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33122, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:38:59 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:39:32 splunk3 sendmail[23067]: n2VDdWDg023067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:40:16 splunk3 sendmail[23245]: n2VDeGgd023245: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311340.n2VDeGCk001727@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:40:16 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50876
|
|
Mar 31 06:40:16 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:40:16 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:40:16 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:40:16 splunk3 spamd[26484]: spamd: processing message <200903311340.n2VDeGCk001727@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:40:19 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 06:40:19 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50876,mid=<200903311340.n2VDeGCk001727@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 06:40:19 splunk3 sendmail[23246]: n2VDeGgd023245: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:40:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:40:32 splunk3 sendmail[23320]: n2VDeWod023320: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:41:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:41:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 06:41:32 splunk3 sendmail[23570]: n2VDfWpD023570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:42:32 splunk3 sendmail[23805]: n2VDgWe2023805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:43:32 splunk3 sendmail[24043]: n2VDhWnN024043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:44:32 splunk3 sendmail[24280]: n2VDiWm9024280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:45:17 splunk3 sendmail[24454]: n2VDjHx2024454: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311345.n2VDjHtg002355@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:45:17 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50933
|
|
Mar 31 06:45:17 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:45:17 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:45:17 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:45:17 splunk3 spamd[26484]: spamd: processing message <200903311345.n2VDjHtg002355@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:45:20 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 31 06:45:20 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50933,mid=<200903311345.n2VDjHtg002355@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 06:45:20 splunk3 sendmail[24455]: n2VDjHx2024454: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:45:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:45:32 splunk3 sendmail[24533]: n2VDjWQU024533: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:46:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:46:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:46:32 splunk3 sendmail[24777]: n2VDkWPv024777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:47:32 splunk3 sendmail[25012]: n2VDlW3c025012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:48:32 splunk3 sendmail[25249]: n2VDmWW2025249: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:49:32 splunk3 sendmail[25487]: n2VDnWXL025487: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:50:18 splunk3 sendmail[25666]: n2VDoIQT025666: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311350.n2VDoHJZ002963@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:50:18 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50988
|
|
Mar 31 06:50:18 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:50:18 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:50:18 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:50:18 splunk3 spamd[26484]: spamd: processing message <200903311350.n2VDoHJZ002963@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:50:20 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 06:50:20 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50988,mid=<200903311350.n2VDoHJZ002963@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 06:50:20 splunk3 sendmail[25667]: n2VDoIQT025666: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:50:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:50:32 splunk3 sendmail[25743]: n2VDoW9H025743: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:51:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:51:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:51:32 splunk3 sendmail[25994]: n2VDpWkJ025994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:52:32 splunk3 sendmail[26228]: n2VDqWXM026228: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:53:32 splunk3 sendmail[26471]: n2VDrW8E026471: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:54:32 splunk3 sendmail[26704]: n2VDsWDY026704: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:55:19 splunk3 sendmail[26884]: n2VDtId8026884: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311355.n2VDtIeg003572@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 06:55:19 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51044
|
|
Mar 31 06:55:19 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 06:55:19 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 06:55:19 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 06:55:19 splunk3 spamd[26484]: spamd: processing message <200903311355.n2VDtIeg003572@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 06:55:21 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 31 06:55:21 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51044,mid=<200903311355.n2VDtIeg003572@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 06:55:21 splunk3 sendmail[26885]: n2VDtId8026884: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 06:55:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 06:55:32 splunk3 sendmail[26959]: n2VDtWTw026959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:56:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 06:56:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 06:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 06:56:32 splunk3 sendmail[27203]: n2VDuWpM027203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:57:32 splunk3 sendmail[27443]: n2VDvWj6027443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:58:32 splunk3 sendmail[27679]: n2VDwWj9027679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 06:59:32 splunk3 sendmail[27915]: n2VDxWhw027915: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:00:04 splunk3 sendmail[28098]: n2VE04jP028098: from=root, size=291, class=0, nrcpts=1, msgid=<200903311400.n2VE04jP028098@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 07:00:05 splunk3 sendmail[28111]: n2VE04JR028111: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311400.n2VE04jP028098@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 07:00:05 splunk3 sendmail[28098]: n2VE04jP028098: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VE04JR028111 Message accepted for delivery)
|
|
Mar 31 07:00:06 splunk3 sendmail[28120]: n2VE04JR028111: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:00:19 splunk3 sendmail[28163]: n2VE0JHt028163: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311400.n2VE0J6s004212@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:00:19 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51101
|
|
Mar 31 07:00:19 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:00:19 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 07:00:19 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 07:00:19 splunk3 sendmail[28164]: n2VE0JHt028163: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:00:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:00:22 splunk3 sendmail[28197]: n2VE0Mui028197: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903311400.n2VE0Mui028197@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 07:00:22 splunk3 sendmail[28199]: n2VE0Mui028197: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 07:00:22 splunk3 sendmail[28199]: n2VE0Mui028197: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 07:00:22 splunk3 sendmail[28199]: n2VE0Mui028197: n2VE0Mui028199: postmaster notify: User unknown
|
|
Mar 31 07:00:24 splunk3 sendmail[28199]: n2VE0Mui028199: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:00:32 splunk3 sendmail[28256]: n2VE0W1Z028256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:01:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:01:15 splunk3 sendmail[28380]: n2VE11Nf028380: from=root, size=443, class=0, nrcpts=1, msgid=<200903311401.n2VE11Nf028380@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 07:01:15 splunk3 sendmail[28444]: n2VE1FaT028444: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311401.n2VE11Nf028380@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 07:01:15 splunk3 sendmail[28380]: n2VE11Nf028380: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VE1FaT028444 Message accepted for delivery)
|
|
Mar 31 07:01:16 splunk3 sendmail[28445]: n2VE1FaT028444: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:01:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:01:32 splunk3 sendmail[28512]: n2VE1W6o028512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:02:32 splunk3 sendmail[28747]: n2VE2W1A028747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:03:32 splunk3 sendmail[28985]: n2VE3WJ9028985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:04:16 splunk3 sendmail[14396]: n2VD4F5Y014396: timeout waiting for input from 218-160-113-53.dynamic.hinet.net during server cmd read
|
|
Mar 31 07:04:16 splunk3 sendmail[14396]: n2VD4F5Y014396: 218-160-113-53.dynamic.hinet.net [218.160.113.53] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:04:27 splunk3 sendmail[14435]: n2VD4Qi3014435: timeout waiting for input from 218-160-113-53.dynamic.hinet.net during server cmd read
|
|
Mar 31 07:04:27 splunk3 sendmail[14435]: n2VD4Qi3014435: lost input channel from 218-160-113-53.dynamic.hinet.net [218.160.113.53] to MTA after data
|
|
Mar 31 07:04:27 splunk3 sendmail[14435]: n2VD4Qi3014435: from=<jmpr@64.127.105.55>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=218-160-113-53.dynamic.hinet.net [218.160.113.53]
|
|
Mar 31 07:04:32 splunk3 sendmail[29218]: n2VE4WhL029218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:05:19 splunk3 sendmail[29406]: n2VE5JqN029406: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311405.n2VE5JNF004893@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:05:19 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51165
|
|
Mar 31 07:05:19 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:05:19 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 07:05:19 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 07:05:19 splunk3 sendmail[29414]: n2VE5JqN029406: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:05:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:05:32 splunk3 sendmail[29473]: n2VE5Wj3029473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:06:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:06:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:06:32 splunk3 sendmail[29720]: n2VE6WWi029720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:07:32 splunk3 sendmail[29957]: n2VE7WQO029957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:08:32 splunk3 sendmail[30193]: n2VE8WTv030193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:09:32 splunk3 sendmail[30435]: n2VE9Wj6030435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:10:02 splunk3 sendmail[30653]: n2VEA25e030653: from=root, size=292, class=0, nrcpts=1, msgid=<200903311410.n2VEA25e030653@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 07:10:02 splunk3 sendmail[30658]: n2VEA2qL030658: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311410.n2VEA25e030653@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 07:10:02 splunk3 sendmail[30653]: n2VEA25e030653: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VEA2qL030658 Message accepted for delivery)
|
|
Mar 31 07:10:04 splunk3 sendmail[30659]: n2VEA2qL030658: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:10:20 splunk3 sendmail[30733]: n2VEAKXa030733: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311410.n2VEAJW0005506@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:10:20 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51221
|
|
Mar 31 07:10:20 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:10:20 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:10:20 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:10:20 splunk3 spamd[26484]: spamd: processing message <200903311410.n2VEAJW0005506@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:10:22 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 07:10:22 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51221,mid=<200903311410.n2VEAJW0005506@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 07:10:22 splunk3 sendmail[30734]: n2VEAKXa030733: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:10:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:10:32 splunk3 sendmail[30793]: n2VEAWH8030793: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:11:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:11:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 07:11:32 splunk3 sendmail[31042]: n2VEBWPg031042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:12:32 splunk3 sendmail[31279]: n2VECWjv031279: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:13:32 splunk3 sendmail[31520]: n2VEDWCI031520: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:14:32 splunk3 sendmail[31751]: n2VEEWvr031751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:15:21 splunk3 sendmail[31945]: n2VEFKJK031945: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311415.n2VEFKdi006309@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:15:21 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51278
|
|
Mar 31 07:15:21 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:15:21 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:15:21 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:15:21 splunk3 spamd[26484]: spamd: processing message <200903311415.n2VEFKdi006309@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:15:23 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 31 07:15:23 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51278,mid=<200903311415.n2VEFKdi006309@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 07:15:23 splunk3 sendmail[31947]: n2VEFKJK031945: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:15:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:15:32 splunk3 sendmail[32004]: n2VEFW6O032004: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:16:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:16:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:16:32 splunk3 sendmail[32249]: n2VEGWvJ032249: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:17:32 splunk3 sendmail[32487]: n2VEHWwS032487: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:18:32 splunk3 sendmail[32722]: n2VEIWaN032722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:19:32 splunk3 sendmail[494]: n2VEJWmf000494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:20:21 splunk3 sendmail[688]: n2VEKLTQ000688: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311420.n2VEKLcV006948@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:20:21 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51333
|
|
Mar 31 07:20:21 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:20:21 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:20:21 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:20:21 splunk3 spamd[26484]: spamd: processing message <200903311420.n2VEKLcV006948@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:20:23 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 31 07:20:23 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51333,mid=<200903311420.n2VEKLcV006948@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 07:20:23 splunk3 sendmail[689]: n2VEKLTQ000688: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:20:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:20:32 splunk3 sendmail[750]: n2VEKW7O000750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:21:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:21:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:21:32 splunk3 sendmail[996]: n2VELWIW000996: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:22:32 splunk3 sendmail[1229]: n2VEMWYj001229: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:23:32 splunk3 sendmail[1474]: n2VENWPJ001474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:24:32 splunk3 sendmail[1709]: n2VEOWFG001709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:25:22 splunk3 sendmail[1903]: n2VEPMMD001903: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311425.n2VEPLoV007558@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:25:22 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51389
|
|
Mar 31 07:25:22 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:25:22 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:25:22 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:25:22 splunk3 spamd[26484]: spamd: processing message <200903311425.n2VEPLoV007558@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:25:26 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.3 seconds, 1308 bytes.
|
|
Mar 31 07:25:26 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51389,mid=<200903311425.n2VEPLoV007558@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 07:25:26 splunk3 sendmail[1904]: n2VEPMMD001903: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:25:32 splunk3 sendmail[1965]: n2VEPWle001965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:26:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:26:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 07:26:32 splunk3 sendmail[2212]: n2VEQW7w002212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:27:32 splunk3 sendmail[2453]: n2VERWNN002453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:28:32 splunk3 sendmail[2692]: n2VESWqf002692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:29:32 splunk3 sendmail[2939]: n2VETWpJ002939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:30:22 splunk3 sendmail[3147]: n2VEUMFk003147: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311430.n2VEUMP3008180@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:30:22 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51446
|
|
Mar 31 07:30:22 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:30:22 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:30:22 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:30:22 splunk3 spamd[26484]: spamd: processing message <200903311430.n2VEUMP3008180@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:30:24 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 07:30:24 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51446,mid=<200903311430.n2VEUMP3008180@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 07:30:24 splunk3 sendmail[3148]: n2VEUMFk003147: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:30:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:30:32 splunk3 sendmail[3207]: n2VEUWbj003207: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:31:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:31:21 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:31:32 splunk3 sendmail[3453]: n2VEVW9t003453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:32:32 splunk3 sendmail[3718]: n2VEWWS3003718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:33:32 splunk3 sendmail[3962]: n2VEXWrY003962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:34:32 splunk3 sendmail[4213]: n2VEYWt2004213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:35:23 splunk3 sendmail[4417]: n2VEZMKO004417: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311435.n2VEZMA1008922@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:35:23 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51501
|
|
Mar 31 07:35:23 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:35:23 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:35:23 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:35:23 splunk3 spamd[26484]: spamd: processing message <200903311435.n2VEZMA1008922@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:35:25 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 07:35:25 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51501,mid=<200903311435.n2VEZMA1008922@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 07:35:25 splunk3 sendmail[4418]: n2VEZMKO004417: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:35:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:35:32 splunk3 sendmail[4477]: n2VEZWRA004477: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:36:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:36:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:36:32 splunk3 sendmail[4721]: n2VEaWw2004721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:37:32 splunk3 sendmail[4972]: n2VEbWVx004972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:38:32 splunk3 sendmail[5245]: n2VEcWx0005245: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:39:32 splunk3 sendmail[5490]: n2VEdWAK005490: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:40:23 splunk3 sendmail[5686]: n2VEeNFi005686: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311440.n2VEeNYi009561@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:40:23 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51557
|
|
Mar 31 07:40:23 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:40:23 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:40:23 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:40:23 splunk3 spamd[26484]: spamd: processing message <200903311440.n2VEeNYi009561@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:40:25 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 31 07:40:25 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51557,mid=<200903311440.n2VEeNYi009561@virt2.int.splunk.com>,bayes=0.169672354346105,autolearn=no
|
|
Mar 31 07:40:25 splunk3 sendmail[5687]: n2VEeNFi005686: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:40:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:40:32 splunk3 sendmail[5747]: n2VEeWIK005747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:41:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:41:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 07:41:32 splunk3 sendmail[5996]: n2VEfW2b005996: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:42:32 splunk3 sendmail[6231]: n2VEgWD4006231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:43:32 splunk3 sendmail[6468]: n2VEhW2e006468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:44:32 splunk3 sendmail[6704]: n2VEiWOq006704: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:45:23 splunk3 sendmail[6901]: n2VEjNlb006901: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311445.n2VEjN0X010169@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:45:23 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51613
|
|
Mar 31 07:45:23 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:45:23 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:45:23 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:45:23 splunk3 spamd[26484]: spamd: processing message <200903311445.n2VEjN0X010169@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:45:25 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 07:45:25 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51613,mid=<200903311445.n2VEjN0X010169@virt2.int.splunk.com>,bayes=0.112682444001896,autolearn=no
|
|
Mar 31 07:45:25 splunk3 sendmail[6902]: n2VEjNlb006901: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:45:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:45:32 splunk3 sendmail[6957]: n2VEjWW6006957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:46:02 splunk3 sendmail[7072]: n2VEk1WG007072: from=<3pyzSSRQKBu8XffXcVRcVikj-efiVgcpXffXcV.TfdjgRddVjgclebZk.Tfd@alerts.bounces.google.com>, size=2804, class=0, nrcpts=1, msgid=<000e0cd2e73cdc896904666b4119@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.166]
|
|
Mar 31 07:46:02 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51627
|
|
Mar 31 07:46:02 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:46:02 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:46:02 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:46:02 splunk3 spamd[26484]: spamd: processing message <000e0cd2e73cdc896904666b4119@google.com> for spamme:501
|
|
Mar 31 07:46:04 splunk3 spamd[26484]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.6 seconds, 3234 bytes.
|
|
Mar 31 07:46:04 splunk3 spamd[26484]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.6,size=3234,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51627,mid=<000e0cd2e73cdc896904666b4119@google.com>,bayes=0,autolearn=ham
|
|
Mar 31 07:46:04 splunk3 sendmail[7074]: n2VEk1WG007072: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33015, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:46:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:46:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:46:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:46:32 splunk3 sendmail[7208]: n2VEkW69007208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:47:32 splunk3 sendmail[7447]: n2VElW6q007447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:48:07 splunk3 sendmail[7505]: n2VElphR007505: from=<jet@booktraveler.com>, size=64547, class=0, nrcpts=1, msgid=<01c9b239$946fba80$a520975a@jet>, proto=ESMTP, daemon=MTA, relay=[90.151.32.165]
|
|
Mar 31 07:48:07 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51649
|
|
Mar 31 07:48:07 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:48:07 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:48:07 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:48:07 splunk3 spamd[26484]: spamd: processing message <01c9b239$946fba80$a520975a@jet> for spamme:501
|
|
Mar 31 07:48:09 splunk3 spamd[26484]: spamd: identified spam (9.4/5.0) for spamme:501 in 2.2 seconds, 64814 bytes.
|
|
Mar 31 07:48:09 splunk3 spamd[26484]: spamd: result: Y 9 - BAYES_99,EXTRA_MPART_TYPE,HTML_30_40,HTML_IMAGE_ONLY_16,HTML_MESSAGE,RCVD_IN_XBL scantime=2.2,size=64814,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51649,mid=<01c9b239$946fba80$a520975a@jet>,bayes=0.999997189330735,autolearn=no
|
|
Mar 31 07:48:09 splunk3 sendmail[7589]: n2VElphR007505: to=<spamme@splunkit.com>, delay=00:00:15, xdelay=00:00:02, mailer=local, pri=94730, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:48:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:48:32 splunk3 sendmail[7698]: n2VEmW7H007698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:49:32 splunk3 sendmail[7936]: n2VEnWT5007936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:50:24 splunk3 sendmail[8148]: n2VEoOV7008148: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311450.n2VEoOB3010790@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:50:24 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51671
|
|
Mar 31 07:50:24 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:50:24 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:50:24 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:50:24 splunk3 spamd[26484]: spamd: processing message <200903311450.n2VEoOB3010790@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:50:26 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 07:50:26 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51671,mid=<200903311450.n2VEoOB3010790@virt2.int.splunk.com>,bayes=0.112714785804686,autolearn=no
|
|
Mar 31 07:50:26 splunk3 sendmail[8149]: n2VEoOV7008148: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:50:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:50:32 splunk3 sendmail[8190]: n2VEoWFF008190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:51:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:51:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:51:32 splunk3 sendmail[8440]: n2VEpWcK008440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:52:32 splunk3 sendmail[8673]: n2VEqWNn008673: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:53:32 splunk3 sendmail[8914]: n2VErWqQ008914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:54:32 splunk3 sendmail[9149]: n2VEsWdw009149: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:55:25 splunk3 sendmail[9358]: n2VEtPlQ009358: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311455.n2VEtOtI011393@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 07:55:25 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51726
|
|
Mar 31 07:55:25 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:55:25 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:55:25 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:55:25 splunk3 spamd[26484]: spamd: processing message <200903311455.n2VEtOtI011393@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 07:55:27 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 07:55:27 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51726,mid=<200903311455.n2VEtOtI011393@virt2.int.splunk.com>,bayes=0.112714785804686,autolearn=no
|
|
Mar 31 07:55:27 splunk3 sendmail[9359]: n2VEtPlQ009358: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:55:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:55:32 splunk3 sendmail[9402]: n2VEtW2M009402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:56:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 07:56:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 07:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 07:56:32 splunk3 sendmail[9656]: n2VEuW81009656: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:57:32 splunk3 sendmail[9895]: n2VEvWf0009895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:58:32 splunk3 sendmail[10130]: n2VEwWhG010130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 07:59:03 splunk3 sendmail[10171]: n2VEwiSQ010171: from=<tfsjkyqq@mwe.com>, size=64423, class=0, nrcpts=1, msgid=<01c9b219$945fc280$be610e53@tfsjkyqq>, proto=ESMTP, daemon=MTA, relay=dzt190.internetdsl.tpnet.pl [83.14.97.190]
|
|
Mar 31 07:59:03 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51771
|
|
Mar 31 07:59:03 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 07:59:03 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 07:59:03 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 07:59:03 splunk3 spamd[26484]: spamd: processing message <01c9b219$945fc280$be610e53@tfsjkyqq> for spamme:501
|
|
Mar 31 07:59:05 splunk3 spamd[26484]: spamd: identified spam (10.2/5.0) for spamme:501 in 1.3 seconds, 64721 bytes.
|
|
Mar 31 07:59:05 splunk3 spamd[26484]: spamd: result: Y 10 - BAYES_99,DNS_FROM_RFC_ABUSE,HTML_30_40,HTML_IMAGE_ONLY_16,HTML_MESSAGE,HTML_TITLE_EMPTY,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL scantime=1.3,size=64721,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51771,mid=<01c9b219$945fc280$be610e53@tfsjkyqq>,bayes=0.998062986589247,autolearn=no
|
|
Mar 31 07:59:05 splunk3 sendmail[10255]: n2VEwiSQ010171: to=<spamme@splunkit.com>, delay=00:00:17, xdelay=00:00:02, mailer=local, pri=94646, dsn=2.0.0, stat=Sent
|
|
Mar 31 07:59:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 07:59:32 splunk3 sendmail[10373]: n2VExWs3010373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:00:04 splunk3 sendmail[10577]: n2VF043M010577: from=root, size=291, class=0, nrcpts=1, msgid=<200903311500.n2VF043M010577@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 08:00:04 splunk3 sendmail[10581]: n2VF04fI010581: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311500.n2VF043M010577@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 08:00:04 splunk3 sendmail[10577]: n2VF043M010577: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VF04fI010581 Message accepted for delivery)
|
|
Mar 31 08:00:06 splunk3 sendmail[10582]: n2VF04fI010581: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:00:25 splunk3 sendmail[10661]: n2VF0PkH010661: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311500.n2VF0P7f012034@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:00:25 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51785
|
|
Mar 31 08:00:25 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:00:25 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 08:00:25 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 08:00:25 splunk3 sendmail[10662]: n2VF0PkH010661: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:00:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:00:29 splunk3 sendmail[10700]: n2VF0Tr3010700: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903311500.n2VF0Tr3010700@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 08:00:29 splunk3 sendmail[10702]: n2VF0Tr3010700: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 08:00:29 splunk3 sendmail[10702]: n2VF0Tr3010700: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 08:00:29 splunk3 sendmail[10702]: n2VF0Tr3010700: n2VF0Tr3010702: postmaster notify: User unknown
|
|
Mar 31 08:00:30 splunk3 sendmail[10702]: n2VF0Tr3010702: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:00:32 splunk3 sendmail[10715]: n2VF0WbV010715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:01:10 splunk3 sendmail[10839]: n2VF11cj010839: from=root, size=443, class=0, nrcpts=1, msgid=<200903311501.n2VF11cj010839@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 08:01:10 splunk3 sendmail[10885]: n2VF1Alr010885: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311501.n2VF11cj010839@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 08:01:10 splunk3 sendmail[10839]: n2VF11cj010839: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VF1Alr010885 Message accepted for delivery)
|
|
Mar 31 08:01:11 splunk3 sendmail[10887]: n2VF1Alr010885: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:01:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:01:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:01:32 splunk3 sendmail[10977]: n2VF1WBN010977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:02:32 splunk3 sendmail[11212]: n2VF2WQ0011212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:03:32 splunk3 sendmail[11449]: n2VF3W0v011449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:04:32 splunk3 sendmail[11684]: n2VF4WE3011684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:05:26 splunk3 sendmail[11897]: n2VF5Qoq011897: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311505.n2VF5PT2012718@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:05:26 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51848
|
|
Mar 31 08:05:26 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:05:26 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 08:05:26 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 08:05:26 splunk3 sendmail[11898]: n2VF5Qoq011897: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:05:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:05:32 splunk3 sendmail[11937]: n2VF5WmZ011937: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:06:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:06:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:06:32 splunk3 sendmail[12181]: n2VF6WW1012181: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:07:32 splunk3 sendmail[12420]: n2VF7W90012420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:08:32 splunk3 sendmail[12658]: n2VF8Wea012658: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:09:32 splunk3 sendmail[12898]: n2VF9Wcr012898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:10:02 splunk3 sendmail[13122]: n2VFA22l013122: from=root, size=292, class=0, nrcpts=1, msgid=<200903311510.n2VFA22l013122@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 08:10:02 splunk3 sendmail[13127]: n2VFA2qR013127: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311510.n2VFA22l013122@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 08:10:02 splunk3 sendmail[13122]: n2VFA22l013122: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VFA2qR013127 Message accepted for delivery)
|
|
Mar 31 08:10:03 splunk3 sendmail[13128]: n2VFA2qR013127: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:10:26 splunk3 sendmail[13227]: n2VFAQls013227: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311510.n2VFAQbe013330@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:10:26 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51913
|
|
Mar 31 08:10:26 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:10:26 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:10:26 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:10:26 splunk3 spamd[26484]: spamd: processing message <200903311510.n2VFAQbe013330@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:10:28 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 08:10:28 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51913,mid=<200903311510.n2VFAQbe013330@virt2.int.splunk.com>,bayes=0.112714785804686,autolearn=no
|
|
Mar 31 08:10:28 splunk3 sendmail[13228]: n2VFAQls013227: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:10:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:10:32 splunk3 sendmail[13260]: n2VFAWro013260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:11:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:11:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 08:11:32 splunk3 sendmail[13542]: n2VFBWNY013542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:12:32 splunk3 sendmail[13778]: n2VFCWn1013778: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:13:32 splunk3 sendmail[14015]: n2VFDWWA014015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:14:32 splunk3 sendmail[14251]: n2VFEWXF014251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:15:27 splunk3 sendmail[14476]: n2VFFRRK014476: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311515.n2VFFQQY014126@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:15:27 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51969
|
|
Mar 31 08:15:27 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:15:27 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:15:27 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:15:27 splunk3 spamd[26484]: spamd: processing message <200903311515.n2VFFQQY014126@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:15:29 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 08:15:29 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51969,mid=<200903311515.n2VFFQQY014126@virt2.int.splunk.com>,bayes=0.112714785804686,autolearn=no
|
|
Mar 31 08:15:29 splunk3 sendmail[14477]: n2VFFRRK014476: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:15:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:15:32 splunk3 sendmail[14507]: n2VFFWC9014507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:16:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:16:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:16:32 splunk3 sendmail[14750]: n2VFGWKf014750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:17:32 splunk3 sendmail[14987]: n2VFHWFY014987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:18:32 splunk3 sendmail[15221]: n2VFIW62015221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:19:32 splunk3 sendmail[15461]: n2VFJW1g015461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:20:27 splunk3 sendmail[15689]: n2VFKRwo015689: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311520.n2VFKRZr014765@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:20:27 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52025
|
|
Mar 31 08:20:27 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:20:27 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:20:27 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:20:27 splunk3 spamd[26484]: spamd: processing message <200903311520.n2VFKRZr014765@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:20:29 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 08:20:29 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52025,mid=<200903311520.n2VFKRZr014765@virt2.int.splunk.com>,bayes=0.112714785804686,autolearn=no
|
|
Mar 31 08:20:29 splunk3 sendmail[15690]: n2VFKRwo015689: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:20:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:20:32 splunk3 sendmail[15715]: n2VFKWYS015715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:21:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:21:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:21:32 splunk3 sendmail[15965]: n2VFLWfb015965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:22:32 splunk3 sendmail[16201]: n2VFMWQ0016201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:23:32 splunk3 sendmail[16441]: n2VFNW6b016441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:24:32 splunk3 sendmail[16674]: n2VFOWYe016674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:25:28 splunk3 sendmail[16899]: n2VFPSnN016899: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311525.n2VFPRPY015393@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:25:28 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52081
|
|
Mar 31 08:25:28 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:25:28 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:25:28 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:25:28 splunk3 spamd[26484]: spamd: processing message <200903311525.n2VFPRPY015393@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:25:30 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 08:25:30 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52081,mid=<200903311525.n2VFPRPY015393@virt2.int.splunk.com>,bayes=0.112714785804686,autolearn=no
|
|
Mar 31 08:25:30 splunk3 sendmail[16900]: n2VFPSnN016899: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:25:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:25:33 splunk3 sendmail[16926]: n2VFPXsV016926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:26:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:26:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 08:26:33 splunk3 sendmail[17172]: n2VFQXVt017172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:27:33 splunk3 sendmail[17410]: n2VFRXFN017410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:28:33 splunk3 sendmail[17646]: n2VFSXfK017646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:29:33 splunk3 sendmail[17886]: n2VFTXVo017886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:30:28 splunk3 sendmail[18112]: n2VFUSq7018112: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311530.n2VFUSqX015994@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:30:28 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52137
|
|
Mar 31 08:30:28 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:30:28 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:30:28 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:30:28 splunk3 spamd[26484]: spamd: processing message <200903311530.n2VFUSqX015994@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:30:30 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 08:30:30 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52137,mid=<200903311530.n2VFUSqX015994@virt2.int.splunk.com>,bayes=0.112714785804686,autolearn=no
|
|
Mar 31 08:30:30 splunk3 sendmail[18122]: n2VFUSq7018112: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:30:33 splunk3 sendmail[18142]: n2VFUXFl018142: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:31:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:31:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:31:33 splunk3 sendmail[18388]: n2VFVX3p018388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:32:33 splunk3 sendmail[18622]: n2VFWXkx018622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:33:33 splunk3 sendmail[18863]: n2VFXXuO018863: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:34:33 splunk3 sendmail[19096]: n2VFYXSb019096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:35:29 splunk3 sendmail[19345]: n2VFZTdQ019345: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311535.n2VFZSdK016757@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:35:29 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52193
|
|
Mar 31 08:35:29 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:35:29 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:35:29 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:35:29 splunk3 spamd[26484]: spamd: processing message <200903311535.n2VFZSdK016757@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:35:31 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 31 08:35:31 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52193,mid=<200903311535.n2VFZSdK016757@virt2.int.splunk.com>,bayes=0.112714785804686,autolearn=no
|
|
Mar 31 08:35:31 splunk3 sendmail[19346]: n2VFZTdQ019345: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:35:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:35:33 splunk3 sendmail[19351]: n2VFZXUA019351: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:36:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:36:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:36:33 splunk3 sendmail[19597]: n2VFaX8J019597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:36:57 splunk3 sendmail[19688]: n2VFaumr019688: from=<3mDjSSRQKBuwUccUZSOZSfhg-bcfSdZmUccUZS.QcagdOaaSgdZibYWh.Qca@alerts.bounces.google.com>, size=5338, class=0, nrcpts=1, msgid=<000e0cd3107e137cf904666bf8ca@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.163]
|
|
Mar 31 08:36:57 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52208
|
|
Mar 31 08:36:57 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:36:57 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:36:57 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:36:57 splunk3 spamd[26484]: spamd: processing message <000e0cd3107e137cf904666bf8ca@google.com> for spamme:501
|
|
Mar 31 08:36:59 splunk3 spamd[26484]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.8 seconds, 5768 bytes.
|
|
Mar 31 08:36:59 splunk3 spamd[26484]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.8,size=5768,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52208,mid=<000e0cd3107e137cf904666bf8ca@google.com>,bayes=0,autolearn=ham
|
|
Mar 31 08:36:59 splunk3 sendmail[19689]: n2VFaumr019688: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=35549, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:36:59 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:37:33 splunk3 sendmail[19842]: n2VFbX53019842: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:38:33 splunk3 sendmail[20076]: n2VFcXQM020076: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:39:33 splunk3 sendmail[20315]: n2VFdXM8020315: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:40:29 splunk3 sendmail[20563]: n2VFeTWN020563: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311540.n2VFeTEi017368@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:40:29 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52249
|
|
Mar 31 08:40:29 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:40:29 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:40:29 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:40:29 splunk3 spamd[26484]: spamd: processing message <200903311540.n2VFeTEi017368@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:40:31 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 31 08:40:31 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52249,mid=<200903311540.n2VFeTEi017368@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 08:40:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:40:31 splunk3 sendmail[20564]: n2VFeTWN020563: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:40:33 splunk3 sendmail[20572]: n2VFeXcV020572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:41:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:41:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 08:41:33 splunk3 sendmail[20818]: n2VFfXSg020818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:42:33 splunk3 sendmail[21053]: n2VFgXlv021053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:43:33 splunk3 sendmail[21293]: n2VFhXUP021293: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:44:33 splunk3 sendmail[21528]: n2VFiXGG021528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:45:30 splunk3 sendmail[21773]: n2VFjUkl021773: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311545.n2VFjTJ8018003@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:45:30 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52305
|
|
Mar 31 08:45:30 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:45:30 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:45:30 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:45:30 splunk3 spamd[26484]: spamd: processing message <200903311545.n2VFjTJ8018003@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:45:32 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 08:45:32 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52305,mid=<200903311545.n2VFjTJ8018003@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 08:45:32 splunk3 sendmail[21774]: n2VFjUkl021773: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:45:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:45:33 splunk3 sendmail[21779]: n2VFjX4s021779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:46:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:46:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:46:33 splunk3 sendmail[22025]: n2VFkXvr022025: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:47:33 splunk3 sendmail[22265]: n2VFlXwe022265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:48:33 splunk3 sendmail[22500]: n2VFmXvN022500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:49:33 splunk3 sendmail[22739]: n2VFnXWX022739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:50:00 splunk3 sendmail[22854]: n2VFo0m3022854: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311550.n2VFo09t018517@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:50:00 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52348
|
|
Mar 31 08:50:00 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:50:00 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:50:00 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:50:00 splunk3 spamd[26484]: spamd: processing message <200903311550.n2VFo09t018517@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:50:02 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 08:50:02 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52348,mid=<200903311550.n2VFo09t018517@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 08:50:02 splunk3 sendmail[22855]: n2VFo0m3022854: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:50:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:50:33 splunk3 sendmail[22995]: n2VFoXbk022995: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:51:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:51:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:51:33 splunk3 sendmail[23244]: n2VFpXoK023244: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:52:33 splunk3 sendmail[23475]: n2VFqXnJ023475: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:53:33 splunk3 sendmail[23719]: n2VFrXJ7023719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:54:33 splunk3 sendmail[23955]: n2VFsXMA023955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:55:01 splunk3 sendmail[24070]: n2VFt0RI024070: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311555.n2VFt05V019124@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 08:55:01 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52404
|
|
Mar 31 08:55:01 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 08:55:01 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 08:55:01 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 08:55:01 splunk3 spamd[26484]: spamd: processing message <200903311555.n2VFt05V019124@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 08:55:03 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 08:55:03 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52404,mid=<200903311555.n2VFt05V019124@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 08:55:03 splunk3 sendmail[24073]: n2VFt0RI024070: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 08:55:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 08:55:33 splunk3 sendmail[24206]: n2VFtXKk024206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:56:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 08:56:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 08:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 08:56:33 splunk3 sendmail[24450]: n2VFuXQ1024450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:57:33 splunk3 sendmail[24689]: n2VFvXEI024689: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:58:33 splunk3 sendmail[24924]: n2VFwX32024924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 08:59:33 splunk3 sendmail[25163]: n2VFxXeU025163: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:00:01 splunk3 sendmail[25331]: n2VG01da025331: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311600.n2VG01D3019740@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:00:01 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52461
|
|
Mar 31 09:00:01 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:00:01 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 09:00:01 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 09:00:01 splunk3 sendmail[25332]: n2VG01da025331: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:00:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:00:04 splunk3 sendmail[25364]: n2VG0487025364: from=root, size=291, class=0, nrcpts=1, msgid=<200903311600.n2VG0487025364@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 09:00:04 splunk3 sendmail[25368]: n2VG04XC025368: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311600.n2VG0487025364@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 09:00:04 splunk3 sendmail[25364]: n2VG0487025364: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VG04XC025368 Message accepted for delivery)
|
|
Mar 31 09:00:05 splunk3 sendmail[25385]: n2VG05mo025385: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903311600.n2VG05mo025385@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 09:00:05 splunk3 sendmail[25387]: n2VG05mo025385: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 09:00:05 splunk3 sendmail[25387]: n2VG05mo025385: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 09:00:05 splunk3 sendmail[25387]: n2VG05mo025385: n2VG05mo025387: postmaster notify: User unknown
|
|
Mar 31 09:00:05 splunk3 sendmail[25369]: n2VG04XC025368: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:00:14 splunk3 sendmail[25387]: n2VG05mo025387: to=root, delay=00:00:09, xdelay=00:00:09, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:00:33 splunk3 sendmail[25503]: n2VG0XEL025503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:01:06 splunk3 sendmail[25624]: n2VG11f1025624: from=root, size=443, class=0, nrcpts=1, msgid=<200903311601.n2VG11f1025624@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 09:01:06 splunk3 sendmail[25646]: n2VG16cG025646: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311601.n2VG11f1025624@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 09:01:06 splunk3 sendmail[25624]: n2VG11f1025624: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VG16cG025646 Message accepted for delivery)
|
|
Mar 31 09:01:08 splunk3 sendmail[25647]: n2VG16cG025646: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:01:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:01:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:01:33 splunk3 sendmail[25767]: n2VG1XFC025767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:02:14 splunk3 sendmail[25851]: n2VG1vMM025851: from=<theobaldm@bartbaggett.com>, size=2133, class=0, nrcpts=1, msgid=<387c019dbc29$7303d7f3$ea4522e5@bartbaggett.com>, proto=ESMTP, daemon=MTA, relay=201009038103.user.veloxzone.com.br [201.9.38.103]
|
|
Mar 31 09:02:14 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52500
|
|
Mar 31 09:02:14 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:02:14 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 09:02:14 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 09:02:14 splunk3 sendmail[25933]: n2VG1vMM025851: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=32370, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:02:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:02:33 splunk3 sendmail[26014]: n2VG2XuV026014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:03:33 splunk3 sendmail[26255]: n2VG3XdZ026255: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:04:33 splunk3 sendmail[26491]: n2VG4Xp4026491: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:05:02 splunk3 sendmail[26594]: n2VG51iT026594: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311605.n2VG51BT020485@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:05:02 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52526
|
|
Mar 31 09:05:02 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:05:02 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 09:05:02 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 09:05:02 splunk3 sendmail[26595]: n2VG51iT026594: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:05:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:05:33 splunk3 sendmail[26744]: n2VG5XA0026744: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:06:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:06:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:06:33 splunk3 sendmail[26985]: n2VG6X7K026985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:07:33 splunk3 sendmail[27225]: n2VG7XH8027225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:08:33 splunk3 sendmail[27465]: n2VG8X0k027465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:09:33 splunk3 sendmail[27705]: n2VG9Xp5027705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:10:02 splunk3 sendmail[27902]: n2VGA2x9027902: from=root, size=292, class=0, nrcpts=1, msgid=<200903311610.n2VGA2x9027902@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 09:10:02 splunk3 sendmail[27907]: n2VGA2Fm027907: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311610.n2VGA2x9027902@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 09:10:02 splunk3 sendmail[27902]: n2VGA2x9027902: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VGA2Fm027907 Message accepted for delivery)
|
|
Mar 31 09:10:02 splunk3 sendmail[27912]: n2VGA2wA027912: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311610.n2VGA2Du021132@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:10:02 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52583
|
|
Mar 31 09:10:02 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:10:02 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:10:02 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:10:02 splunk3 spamd[26484]: spamd: processing message <200903311610.n2VGA2Du021132@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:10:03 splunk3 sendmail[27908]: n2VGA2Fm027907: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:10:04 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 09:10:04 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52583,mid=<200903311610.n2VGA2Du021132@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 09:10:04 splunk3 sendmail[27913]: n2VGA2wA027912: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:10:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:10:33 splunk3 sendmail[28064]: n2VGAXNc028064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:11:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:11:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 09:11:33 splunk3 sendmail[28311]: n2VGBXni028311: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:12:33 splunk3 sendmail[28547]: n2VGCXZu028547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:13:33 splunk3 sendmail[28787]: n2VGDXxo028787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:14:33 splunk3 sendmail[29021]: n2VGEXOt029021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:15:02 splunk3 sendmail[29126]: n2VGF2et029126: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311615.n2VGF2Bf021932@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:15:02 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52639
|
|
Mar 31 09:15:02 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:15:02 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:15:02 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:15:02 splunk3 spamd[26484]: spamd: processing message <200903311615.n2VGF2Bf021932@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:15:05 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 09:15:05 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52639,mid=<200903311615.n2VGF2Bf021932@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 09:15:05 splunk3 sendmail[29127]: n2VGF2et029126: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:15:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:15:33 splunk3 sendmail[29275]: n2VGFXM0029275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:16:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:16:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:16:33 splunk3 sendmail[29517]: n2VGGXqD029517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:17:33 splunk3 sendmail[29755]: n2VGHXlY029755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:18:33 splunk3 sendmail[29991]: n2VGIXXr029991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:19:33 splunk3 sendmail[30231]: n2VGJXqN030231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:20:03 splunk3 sendmail[30352]: n2VGK3oa030352: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311620.n2VGK3r4022566@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:20:03 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52695
|
|
Mar 31 09:20:03 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:20:03 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:20:03 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:20:03 splunk3 spamd[26484]: spamd: processing message <200903311620.n2VGK3r4022566@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:20:05 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 09:20:05 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52695,mid=<200903311620.n2VGK3r4022566@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 09:20:05 splunk3 sendmail[30353]: n2VGK3oa030352: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:20:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:20:33 splunk3 sendmail[30482]: n2VGKXEO030482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:21:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:21:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:21:33 splunk3 sendmail[30732]: n2VGLXW0030732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:22:33 splunk3 sendmail[30968]: n2VGMX9f030968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:23:33 splunk3 sendmail[31209]: n2VGNX3E031209: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:24:33 splunk3 sendmail[31445]: n2VGOXWD031445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:25:04 splunk3 sendmail[31563]: n2VGP4lv031563: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311625.n2VGP3XV023180@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:25:04 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52750
|
|
Mar 31 09:25:04 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:25:04 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:25:04 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:25:04 splunk3 spamd[26484]: spamd: processing message <200903311625.n2VGP3XV023180@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:25:06 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 09:25:06 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52750,mid=<200903311625.n2VGP3XV023180@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 09:25:06 splunk3 sendmail[31564]: n2VGP4lv031563: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:25:33 splunk3 sendmail[31699]: n2VGPXIQ031699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:26:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:26:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 09:26:33 splunk3 sendmail[31944]: n2VGQXsZ031944: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:27:33 splunk3 sendmail[32178]: n2VGRXiS032178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:28:33 splunk3 sendmail[32414]: n2VGSXhr032414: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:29:33 splunk3 sendmail[32654]: n2VGTXjd032654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:30:04 splunk3 sendmail[311]: n2VGU4En000311: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311630.n2VGU4qN023832@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:30:04 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52807
|
|
Mar 31 09:30:04 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:30:04 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:30:04 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:30:04 splunk3 spamd[26484]: spamd: processing message <200903311630.n2VGU4qN023832@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:30:06 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 09:30:06 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52807,mid=<200903311630.n2VGU4qN023832@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 09:30:06 splunk3 sendmail[312]: n2VGU4En000311: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:30:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:30:33 splunk3 sendmail[443]: n2VGUXrr000443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:31:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:31:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:31:33 splunk3 sendmail[688]: n2VGVXcp000688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:32:33 splunk3 sendmail[922]: n2VGWXVw000922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:33:33 splunk3 sendmail[1161]: n2VGXXse001161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:34:33 splunk3 sendmail[1392]: n2VGYXTu001392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:35:05 splunk3 sendmail[1515]: n2VGZ5Xc001515: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311635.n2VGZ4xw024583@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:35:05 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52862
|
|
Mar 31 09:35:05 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:35:05 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:35:05 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:35:05 splunk3 spamd[26484]: spamd: processing message <200903311635.n2VGZ4xw024583@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:35:07 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 09:35:07 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52862,mid=<200903311635.n2VGZ4xw024583@virt2.int.splunk.com>,bayes=0.112747127357175,autolearn=no
|
|
Mar 31 09:35:07 splunk3 sendmail[1516]: n2VGZ5Xc001515: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:35:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:35:33 splunk3 sendmail[1647]: n2VGZXcg001647: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:36:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:36:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:36:33 splunk3 sendmail[1895]: n2VGaXNM001895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:36:35 splunk3 sendmail[1877]: n2VGaWdQ001877: from=<evitqjur@bluesky-world.com>, size=1060, class=0, nrcpts=1, msgid=<01c9b227$3cc85380$8a4d0f58@evitqjur>, proto=ESMTP, daemon=MTA, relay=138.Red-88-15-77.dynamicIP.rima-tde.net [88.15.77.138]
|
|
Mar 31 09:36:35 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52886
|
|
Mar 31 09:36:35 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:36:35 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:36:35 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:36:35 splunk3 spamd[26484]: spamd: processing message <01c9b227$3cc85380$8a4d0f58@evitqjur> for spamme:501
|
|
Mar 31 09:36:40 splunk3 spamd[26484]: spamd: identified spam (17.6/5.0) for spamme:501 in 4.2 seconds, 1403 bytes.
|
|
Mar 31 09:36:40 splunk3 spamd[26484]: spamd: result: Y 17 - BAYES_50,HELO_DYNAMIC_SPLIT_IP,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL scantime=4.2,size=1403,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52886,mid=<01c9b227$3cc85380$8a4d0f58@evitqjur>,bayes=0.59517071287745,autolearn=spam
|
|
Mar 31 09:36:40 splunk3 sendmail[1896]: n2VGaWdQ001877: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:05, mailer=local, pri=31304, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:36:40 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:37:33 splunk3 sendmail[2141]: n2VGbX0U002141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:38:33 splunk3 sendmail[2380]: n2VGcXdG002380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:39:33 splunk3 sendmail[2625]: n2VGdXmH002625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:40:06 splunk3 sendmail[2751]: n2VGe6fQ002751: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311640.n2VGe5uk025215@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:40:06 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52919
|
|
Mar 31 09:40:06 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:40:06 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:40:06 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:40:06 splunk3 spamd[26484]: spamd: processing message <200903311640.n2VGe5uk025215@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:40:08 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 09:40:08 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52919,mid=<200903311640.n2VGe5uk025215@virt2.int.splunk.com>,bayes=0.112739651888821,autolearn=no
|
|
Mar 31 09:40:08 splunk3 sendmail[2756]: n2VGe6fQ002751: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:40:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:40:33 splunk3 sendmail[2891]: n2VGeXl8002891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:41:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:41:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 09:41:33 splunk3 sendmail[3145]: n2VGfXQN003145: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:42:33 splunk3 sendmail[3384]: n2VGgXT0003384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:43:33 splunk3 sendmail[3646]: n2VGhXL2003646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:44:33 splunk3 sendmail[3889]: n2VGiXIk003889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:45:08 splunk3 sendmail[4038]: n2VGj85S004038: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311645.n2VGj7AF025827@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:45:08 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52976
|
|
Mar 31 09:45:08 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:45:08 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:45:08 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:45:08 splunk3 spamd[26484]: spamd: processing message <200903311645.n2VGj7AF025827@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:45:10 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 09:45:10 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52976,mid=<200903311645.n2VGj7AF025827@virt2.int.splunk.com>,bayes=0.112739651888821,autolearn=no
|
|
Mar 31 09:45:10 splunk3 sendmail[4039]: n2VGj85S004038: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:45:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:45:33 splunk3 sendmail[4159]: n2VGjXZQ004159: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:46:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:46:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:46:33 splunk3 sendmail[4416]: n2VGkXac004416: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:47:33 splunk3 sendmail[4653]: n2VGlXF9004653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:48:33 splunk3 sendmail[4889]: n2VGmXOW004889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:49:33 splunk3 sendmail[5172]: n2VGnX8q005172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:50:08 splunk3 sendmail[5313]: n2VGo8mw005313: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311650.n2VGo8PY026441@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:50:08 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53031
|
|
Mar 31 09:50:08 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:50:08 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:50:08 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:50:08 splunk3 spamd[26484]: spamd: processing message <200903311650.n2VGo8PY026441@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:50:10 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 31 09:50:10 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53031,mid=<200903311650.n2VGo8PY026441@virt2.int.splunk.com>,bayes=0.112739651888821,autolearn=no
|
|
Mar 31 09:50:10 splunk3 sendmail[5314]: n2VGo8mw005313: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:50:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:50:33 splunk3 sendmail[5433]: n2VGoXSo005433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:51:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:51:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:51:33 splunk3 sendmail[5680]: n2VGpXnJ005680: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:52:33 splunk3 sendmail[5914]: n2VGqXJJ005914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:53:33 splunk3 sendmail[6157]: n2VGrXCh006157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:54:33 splunk3 sendmail[6392]: n2VGsXYx006392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:55:09 splunk3 sendmail[6531]: n2VGt9Y8006531: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311655.n2VGt8LA027050@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 09:55:09 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53087
|
|
Mar 31 09:55:09 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 09:55:09 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 09:55:09 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 09:55:09 splunk3 spamd[26484]: spamd: processing message <200903311655.n2VGt8LA027050@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 09:55:11 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 31 09:55:11 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53087,mid=<200903311655.n2VGt8LA027050@virt2.int.splunk.com>,bayes=0.112739651888821,autolearn=no
|
|
Mar 31 09:55:11 splunk3 sendmail[6532]: n2VGt9Y8006531: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 09:55:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 09:55:33 splunk3 sendmail[6644]: n2VGtXqS006644: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:56:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 09:56:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 09:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 09:56:33 splunk3 sendmail[6889]: n2VGuXxg006889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:57:33 splunk3 sendmail[7130]: n2VGvX66007130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:58:33 splunk3 sendmail[7363]: n2VGwXl8007363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 09:59:33 splunk3 sendmail[7611]: n2VGxXTd007611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:00:04 splunk3 sendmail[7790]: n2VH04aZ007790: from=root, size=291, class=0, nrcpts=1, msgid=<200903311700.n2VH04aZ007790@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 10:00:04 splunk3 sendmail[7794]: n2VH04dj007794: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311700.n2VH04aZ007790@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 10:00:04 splunk3 sendmail[7790]: n2VH04aZ007790: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VH04dj007794 Message accepted for delivery)
|
|
Mar 31 10:00:05 splunk3 sendmail[7795]: n2VH04dj007794: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:00:09 splunk3 sendmail[7819]: n2VH09Bg007819: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311700.n2VH09kc027688@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:00:09 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53144
|
|
Mar 31 10:00:09 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:00:09 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 10:00:09 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 10:00:09 splunk3 sendmail[7820]: n2VH09Bg007819: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:00:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:00:10 splunk3 sendmail[7838]: n2VH0Asv007838: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903311700.n2VH0Asv007838@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 10:00:10 splunk3 sendmail[7840]: n2VH0Asv007838: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 10:00:10 splunk3 sendmail[7840]: n2VH0Asv007838: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 31 10:00:10 splunk3 sendmail[7840]: n2VH0Asv007838: n2VH0Asv007840: postmaster notify: User unknown
|
|
Mar 31 10:00:12 splunk3 sendmail[7840]: n2VH0Asv007840: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:00:33 splunk3 sendmail[7950]: n2VH0Xmx007950: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:01:02 splunk3 sendmail[8055]: n2VH11MU008055: from=root, size=443, class=0, nrcpts=1, msgid=<200903311701.n2VH11MU008055@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 10:01:02 splunk3 sendmail[8075]: n2VH12CD008075: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311701.n2VH11MU008055@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 10:01:02 splunk3 sendmail[8055]: n2VH11MU008055: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VH12CD008075 Message accepted for delivery)
|
|
Mar 31 10:01:04 splunk3 sendmail[8076]: n2VH12CD008075: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:01:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:01:20 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:01:33 splunk3 sendmail[8208]: n2VH1XYE008208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:02:33 splunk3 sendmail[8441]: n2VH2XdV008441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:02:34 splunk3 sendmail[8440]: n2VH2XN9008440: from=<spamme@splunkit.com>, size=1994, class=0, nrcpts=1, msgid=<200903311702.n2VH2XN9008440@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=[202.179.75.23]
|
|
Mar 31 10:02:34 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53185
|
|
Mar 31 10:02:34 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:02:34 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 10:02:34 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 10:02:34 splunk3 sendmail[8442]: n2VH2XN9008440: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:01, xdelay=00:00:00, mailer=local, pri=32284, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:02:34 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:03:33 splunk3 sendmail[8686]: n2VH3X7E008686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:04:33 splunk3 sendmail[8922]: n2VH4XZO008922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:05:10 splunk3 sendmail[9060]: n2VH5AsN009060: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311705.n2VH59ob028377@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:05:10 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53209
|
|
Mar 31 10:05:10 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:05:10 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 10:05:10 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 10:05:10 splunk3 sendmail[9061]: n2VH5AsN009060: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:05:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:05:33 splunk3 sendmail[9173]: n2VH5XSG009173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:06:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:06:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:06:33 splunk3 sendmail[9417]: n2VH6Xe2009417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:07:33 splunk3 sendmail[9666]: n2VH7Xxp009666: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:08:33 splunk3 sendmail[9902]: n2VH8XnY009902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:09:33 splunk3 sendmail[10141]: n2VH9XGf010141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:10:03 splunk3 sendmail[10358]: n2VHA3CE010358: from=root, size=292, class=0, nrcpts=1, msgid=<200903311710.n2VHA3CE010358@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 10:10:03 splunk3 sendmail[10363]: n2VHA3F1010363: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311710.n2VHA3CE010358@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 10:10:03 splunk3 sendmail[10358]: n2VHA3CE010358: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VHA3F1010363 Message accepted for delivery)
|
|
Mar 31 10:10:04 splunk3 sendmail[10364]: n2VHA3F1010363: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:10:10 splunk3 sendmail[10388]: n2VHAAE6010388: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311710.n2VHAAH3028991@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:10:10 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53266
|
|
Mar 31 10:10:10 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:10:10 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:10:10 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:10:10 splunk3 spamd[26484]: spamd: processing message <200903311710.n2VHAAH3028991@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:10:12 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 10:10:12 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53266,mid=<200903311710.n2VHAAH3028991@virt2.int.splunk.com>,bayes=0.112739651888821,autolearn=no
|
|
Mar 31 10:10:12 splunk3 sendmail[10389]: n2VHAAE6010388: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:10:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:10:33 splunk3 sendmail[10501]: n2VHAXBP010501: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:11:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:11:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 10:11:33 splunk3 sendmail[10751]: n2VHBXnp010751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:12:33 splunk3 sendmail[10985]: n2VHCXgu010985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:13:33 splunk3 sendmail[11226]: n2VHDX0i011226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:14:33 splunk3 sendmail[11462]: n2VHEX9A011462: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:15:11 splunk3 sendmail[11598]: n2VHFBfV011598: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311715.n2VHFA7F029790@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:15:11 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53322
|
|
Mar 31 10:15:11 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:15:11 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:15:11 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:15:11 splunk3 spamd[26484]: spamd: processing message <200903311715.n2VHFA7F029790@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:15:13 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1311 bytes.
|
|
Mar 31 10:15:13 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53322,mid=<200903311715.n2VHFA7F029790@virt2.int.splunk.com>,bayes=0.112739651888821,autolearn=no
|
|
Mar 31 10:15:13 splunk3 sendmail[11599]: n2VHFBfV011598: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:15:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:15:34 splunk3 sendmail[11715]: n2VHFXLZ011715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:16:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:16:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:16:34 splunk3 sendmail[11955]: n2VHGYhJ011955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:17:34 splunk3 sendmail[12196]: n2VHHYY0012196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:18:34 splunk3 sendmail[12433]: n2VHIYLI012433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:19:34 splunk3 sendmail[12668]: n2VHJYZH012668: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:20:12 splunk3 sendmail[12827]: n2VHKC70012827: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311720.n2VHKBb2030420@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:20:12 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53378
|
|
Mar 31 10:20:12 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:20:12 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:20:12 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:20:12 splunk3 spamd[26484]: spamd: processing message <200903311720.n2VHKBb2030420@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:20:14 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 10:20:14 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53378,mid=<200903311720.n2VHKBb2030420@virt2.int.splunk.com>,bayes=0.112739651888821,autolearn=no
|
|
Mar 31 10:20:14 splunk3 sendmail[12828]: n2VHKC70012827: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:20:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:20:34 splunk3 sendmail[12924]: n2VHKYan012924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:21:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:21:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:21:34 splunk3 sendmail[13172]: n2VHLY0s013172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:22:34 splunk3 sendmail[13445]: n2VHMYIh013445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:23:34 splunk3 sendmail[13686]: n2VHNYVk013686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:24:34 splunk3 sendmail[13922]: n2VHOYns013922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:25:13 splunk3 sendmail[14080]: n2VHPDGm014080: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311725.n2VHPCS7031027@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:25:13 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53440
|
|
Mar 31 10:25:13 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:25:13 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:25:13 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:25:13 splunk3 spamd[26484]: spamd: processing message <200903311725.n2VHPCS7031027@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:25:15 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 10:25:15 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53440,mid=<200903311725.n2VHPCS7031027@virt2.int.splunk.com>,bayes=0.112739651888821,autolearn=no
|
|
Mar 31 10:25:15 splunk3 sendmail[14087]: n2VHPDGm014080: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:25:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:25:34 splunk3 sendmail[14177]: n2VHPYpq014177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:26:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:26:14 splunk3 sendmail[14316]: n2VHQBwt014316: from=<spamme@splunkit.com>, size=2757, class=0, nrcpts=1, msgid=<200903311726.n2VHQBwt014316@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=cb1-v-3-203.static.adsl.vol.cz [62.177.90.203]
|
|
Mar 31 10:26:14 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53453
|
|
Mar 31 10:26:14 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:26:14 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:26:14 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:26:14 splunk3 spamd[26484]: spamd: processing message <200903311726.n2VHQBwt014316@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 10:26:17 splunk3 spamd[26484]: spamd: identified spam (30.9/5.0) for spamme:501 in 2.4 seconds, 3171 bytes.
|
|
Mar 31 10:26:17 splunk3 spamd[26484]: spamd: result: Y 30 - AWL,BAYES_99,HELO_DYNAMIC_HCC,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL scantime=2.4,size=3171,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53453,mid=<200903311726.n2VHQBwt014316@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 31 10:26:17 splunk3 sendmail[14339]: n2VHQBwt014316: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:03, mailer=local, pri=33093, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:26:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:26:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 10:26:34 splunk3 sendmail[14426]: n2VHQYuJ014426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:27:34 splunk3 sendmail[14667]: n2VHRYx7014667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:28:34 splunk3 sendmail[14903]: n2VHSYYJ014903: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:29:34 splunk3 sendmail[15140]: n2VHTYaY015140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:30:14 splunk3 sendmail[15309]: n2VHUEDF015309: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311730.n2VHUD2X031646@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:30:14 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53499
|
|
Mar 31 10:30:14 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:30:14 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:30:14 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:30:14 splunk3 spamd[26484]: spamd: processing message <200903311730.n2VHUD2X031646@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:30:16 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 31 10:30:16 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53499,mid=<200903311730.n2VHUD2X031646@virt2.int.splunk.com>,bayes=0.112732177243456,autolearn=no
|
|
Mar 31 10:30:16 splunk3 sendmail[15310]: n2VHUEDF015309: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:30:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:30:34 splunk3 sendmail[15394]: n2VHUYEL015394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:31:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:31:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:31:34 splunk3 sendmail[15642]: n2VHVYaP015642: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:32:34 splunk3 sendmail[15880]: n2VHWY2o015880: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:33:34 splunk3 sendmail[16119]: n2VHXYGs016119: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:34:34 splunk3 sendmail[16354]: n2VHYYbI016354: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:35:15 splunk3 sendmail[16524]: n2VHZFGu016524: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311735.n2VHZEUZ032392@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:35:15 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53554
|
|
Mar 31 10:35:15 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:35:15 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:35:15 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:35:15 splunk3 spamd[26484]: spamd: processing message <200903311735.n2VHZEUZ032392@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:35:17 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 10:35:17 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53554,mid=<200903311735.n2VHZEUZ032392@virt2.int.splunk.com>,bayes=0.112732177243456,autolearn=no
|
|
Mar 31 10:35:17 splunk3 sendmail[16525]: n2VHZFGu016524: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:35:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:35:34 splunk3 sendmail[16608]: n2VHZYSJ016608: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:36:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:36:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:36:34 splunk3 sendmail[16849]: n2VHaYRA016849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:37:34 splunk3 sendmail[17085]: n2VHbYjj017085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:38:34 splunk3 sendmail[17322]: n2VHcYEu017322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:39:34 splunk3 sendmail[17564]: n2VHdYMC017564: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:40:15 splunk3 sendmail[17736]: n2VHeFRG017736: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903311740.n2VHeFv9000555@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:40:15 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53610
|
|
Mar 31 10:40:15 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:40:15 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:40:15 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:40:15 splunk3 spamd[26484]: spamd: processing message <200903311740.n2VHeFv9000555@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:40:17 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Mar 31 10:40:17 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53610,mid=<200903311740.n2VHeFv9000555@virt2.int.splunk.com>,bayes=0.0666703949466161,autolearn=no
|
|
Mar 31 10:40:17 splunk3 sendmail[17737]: n2VHeFRG017736: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:40:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:40:34 splunk3 sendmail[17818]: n2VHeYaV017818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:41:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:41:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 10:41:34 splunk3 sendmail[18068]: n2VHfY5V018068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:42:34 splunk3 sendmail[18305]: n2VHgYl8018305: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:43:34 splunk3 sendmail[18542]: n2VHhYhf018542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:44:34 splunk3 sendmail[18774]: n2VHiYen018774: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:45:16 splunk3 sendmail[18944]: n2VHjGs9018944: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311745.n2VHjFQ6001177@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:45:16 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53667
|
|
Mar 31 10:45:16 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:45:16 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:45:16 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:45:16 splunk3 spamd[26484]: spamd: processing message <200903311745.n2VHjFQ6001177@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:45:19 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 31 10:45:19 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53667,mid=<200903311745.n2VHjFQ6001177@virt2.int.splunk.com>,bayes=0.169730850715127,autolearn=no
|
|
Mar 31 10:45:19 splunk3 sendmail[18945]: n2VHjGs9018944: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:45:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:45:34 splunk3 sendmail[19029]: n2VHjY6M019029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:46:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:46:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:46:34 splunk3 sendmail[19274]: n2VHkYRZ019274: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:47:34 splunk3 sendmail[19512]: n2VHlYwi019512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:48:34 splunk3 sendmail[19749]: n2VHmYc9019749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:49:34 splunk3 sendmail[19990]: n2VHnYHT019990: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:50:18 splunk3 sendmail[20178]: n2VHoIFW020178: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311750.n2VHoGvA001818@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:50:18 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53722
|
|
Mar 31 10:50:18 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:50:18 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:50:18 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:50:18 splunk3 spamd[26484]: spamd: processing message <200903311750.n2VHoGvA001818@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:50:21 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 31 10:50:21 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53722,mid=<200903311750.n2VHoGvA001818@virt2.int.splunk.com>,bayes=0.169730850715127,autolearn=no
|
|
Mar 31 10:50:21 splunk3 sendmail[20179]: n2VHoIFW020178: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:50:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:50:34 splunk3 sendmail[20244]: n2VHoYFr020244: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:51:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:51:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:51:34 splunk3 sendmail[20488]: n2VHpY2G020488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:52:34 splunk3 sendmail[20722]: n2VHqYBp020722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:53:34 splunk3 sendmail[20967]: n2VHrY0q020967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:54:16 splunk3 sendmail[21120]: n2VHsFaZ021120: from=<3x1jSSRQKBjwemmejcYjcprq-lmpcnjwemmejc.amkqnYkkcqnjsligr.amk@alerts.bounces.google.com>, size=2801, class=0, nrcpts=1, msgid=<0016361e8144291ca304666de35e@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 31 10:54:16 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53762
|
|
Mar 31 10:54:16 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:54:16 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:54:16 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:54:16 splunk3 spamd[26484]: spamd: processing message <0016361e8144291ca304666de35e@google.com> for spamme:501
|
|
Mar 31 10:54:18 splunk3 spamd[26484]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.8 seconds, 3236 bytes.
|
|
Mar 31 10:54:18 splunk3 spamd[26484]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.8,size=3236,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53762,mid=<0016361e8144291ca304666de35e@google.com>,bayes=0,autolearn=ham
|
|
Mar 31 10:54:18 splunk3 sendmail[21124]: n2VHsFaZ021120: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33017, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:54:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:54:34 splunk3 sendmail[21206]: n2VHsYmP021206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:55:19 splunk3 sendmail[21394]: n2VHtJE8021394: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311755.n2VHtJX2002445@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 10:55:19 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53779
|
|
Mar 31 10:55:19 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:55:19 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:55:19 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:55:19 splunk3 spamd[26484]: spamd: processing message <200903311755.n2VHtJX2002445@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 10:55:21 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 10:55:21 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53779,mid=<200903311755.n2VHtJX2002445@virt2.int.splunk.com>,bayes=0.169768948538076,autolearn=no
|
|
Mar 31 10:55:21 splunk3 sendmail[21395]: n2VHtJE8021394: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:55:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:55:34 splunk3 sendmail[21460]: n2VHtYov021460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:55:44 splunk3 sendmail[21496]: n2VHtiAg021496: from=<3IFnSSRQKBpU5DD5A3zA3GIH-CDG3EAN5DD5A3.1DBHEzBB3HEAJC97I.1DB@alerts.bounces.google.com>, size=4664, class=0, nrcpts=1, msgid=<000e0ce0719c711b0504666de8e4@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.161]
|
|
Mar 31 10:55:44 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53783
|
|
Mar 31 10:55:44 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 10:55:44 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 10:55:44 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 10:55:44 splunk3 spamd[26484]: spamd: processing message <000e0ce0719c711b0504666de8e4@google.com> for spamme:501
|
|
Mar 31 10:55:46 splunk3 spamd[26484]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.4 seconds, 5094 bytes.
|
|
Mar 31 10:55:46 splunk3 spamd[26484]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.4,size=5094,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53783,mid=<000e0ce0719c711b0504666de8e4@google.com>,bayes=2.22044604925031e-16,autolearn=ham
|
|
Mar 31 10:55:47 splunk3 sendmail[21497]: n2VHtiAg021496: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=34875, dsn=2.0.0, stat=Sent
|
|
Mar 31 10:55:47 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 10:56:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 10:56:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 10:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 10:56:34 splunk3 sendmail[21711]: n2VHuYGw021711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:57:34 splunk3 sendmail[21952]: n2VHvY7p021952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:58:34 splunk3 sendmail[22183]: n2VHwYXr022183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 10:59:34 splunk3 sendmail[22421]: n2VHxYJk022421: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:00:05 splunk3 sendmail[22608]: n2VI05r5022608: from=root, size=291, class=0, nrcpts=1, msgid=<200903311800.n2VI05r5022608@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 11:00:05 splunk3 sendmail[22612]: n2VI05M3022612: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311800.n2VI05r5022608@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 11:00:05 splunk3 sendmail[22608]: n2VI05r5022608: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VI05M3022612 Message accepted for delivery)
|
|
Mar 31 11:00:06 splunk3 sendmail[22613]: n2VI05M3022612: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:00:16 splunk3 sendmail[22681]: n2VI0Gkt022681: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903311800.n2VI0Gkt022681@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 11:00:16 splunk3 sendmail[22683]: n2VI0Gkt022681: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 11:00:16 splunk3 sendmail[22683]: n2VI0Gkt022681: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 11:00:16 splunk3 sendmail[22683]: n2VI0Gkt022681: n2VI0Gkt022683: postmaster notify: User unknown
|
|
Mar 31 11:00:18 splunk3 sendmail[22683]: n2VI0Gkt022683: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:00:20 splunk3 sendmail[22698]: n2VI0K5V022698: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311800.n2VI0JbW003087@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:00:20 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53845
|
|
Mar 31 11:00:20 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:00:20 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 11:00:20 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 11:00:20 splunk3 sendmail[22699]: n2VI0K5V022698: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:00:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:00:34 splunk3 sendmail[22764]: n2VI0Yax022764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:01:02 splunk3 sendmail[22870]: n2VI119V022870: from=root, size=443, class=0, nrcpts=1, msgid=<200903311801.n2VI119V022870@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 11:01:02 splunk3 sendmail[22890]: n2VI1297022890: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311801.n2VI119V022870@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 11:01:02 splunk3 sendmail[22870]: n2VI119V022870: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VI1297022890 Message accepted for delivery)
|
|
Mar 31 11:01:04 splunk3 sendmail[22891]: n2VI1297022890: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:01:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:01:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:01:34 splunk3 sendmail[23023]: n2VI1YIe023023: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:02:34 splunk3 sendmail[23261]: n2VI2YxM023261: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:03:34 splunk3 sendmail[23502]: n2VI3YEd023502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:04:34 splunk3 sendmail[23735]: n2VI4Y5m023735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:05:21 splunk3 sendmail[23924]: n2VI5LSu023924: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311805.n2VI5KZZ003772@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:05:21 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53901
|
|
Mar 31 11:05:21 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:05:21 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 11:05:21 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 11:05:21 splunk3 sendmail[23925]: n2VI5LSu023924: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:05:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:05:34 splunk3 sendmail[23985]: n2VI5YfK023985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:06:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:06:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:06:34 splunk3 sendmail[24230]: n2VI6Yjn024230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:07:34 splunk3 sendmail[24471]: n2VI7YZI024471: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:08:34 splunk3 sendmail[24709]: n2VI8Y8t024709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:09:34 splunk3 sendmail[24952]: n2VI9YiX024952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:10:02 splunk3 sendmail[25164]: n2VIA2jv025164: from=root, size=292, class=0, nrcpts=1, msgid=<200903311810.n2VIA2jv025164@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 11:10:02 splunk3 sendmail[25169]: n2VIA2xJ025169: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311810.n2VIA2jv025164@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 11:10:02 splunk3 sendmail[25164]: n2VIA2jv025164: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VIA2xJ025169 Message accepted for delivery)
|
|
Mar 31 11:10:04 splunk3 sendmail[25170]: n2VIA2xJ025169: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:10:21 splunk3 sendmail[25260]: n2VIALCH025260: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311810.n2VIALCM004388@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:10:21 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53958
|
|
Mar 31 11:10:21 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:10:21 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:10:21 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:10:21 splunk3 spamd[26484]: spamd: processing message <200903311810.n2VIALCM004388@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:10:23 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 11:10:23 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53958,mid=<200903311810.n2VIALCM004388@virt2.int.splunk.com>,bayes=0.169807043140778,autolearn=no
|
|
Mar 31 11:10:24 splunk3 sendmail[25261]: n2VIALCH025260: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:10:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:10:34 splunk3 sendmail[25310]: n2VIAY05025310: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:11:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:11:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 11:11:34 splunk3 sendmail[25556]: n2VIBYFD025556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:12:34 splunk3 sendmail[25789]: n2VICYEX025789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:13:34 splunk3 sendmail[26028]: n2VIDYvm026028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:14:34 splunk3 sendmail[26264]: n2VIEY1v026264: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:15:22 splunk3 sendmail[26468]: n2VIFMp9026468: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311815.n2VIFLqG005179@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:15:22 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54014
|
|
Mar 31 11:15:22 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:15:22 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:15:22 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:15:22 splunk3 spamd[26484]: spamd: processing message <200903311815.n2VIFLqG005179@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:15:24 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 31 11:15:24 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54014,mid=<200903311815.n2VIFLqG005179@virt2.int.splunk.com>,bayes=0.169807043140778,autolearn=no
|
|
Mar 31 11:15:24 splunk3 sendmail[26469]: n2VIFMp9026468: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:15:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:15:34 splunk3 sendmail[26519]: n2VIFYW5026519: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:16:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:16:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:16:34 splunk3 sendmail[26763]: n2VIGYG5026763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:17:34 splunk3 sendmail[27003]: n2VIHYRw027003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:18:34 splunk3 sendmail[27240]: n2VIIYSe027240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:19:34 splunk3 sendmail[27474]: n2VIJYIt027474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:20:22 splunk3 sendmail[27685]: n2VIKMZn027685: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311820.n2VIKMeZ005824@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:20:22 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54070
|
|
Mar 31 11:20:22 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:20:22 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:20:22 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:20:22 splunk3 spamd[26484]: spamd: processing message <200903311820.n2VIKMeZ005824@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:20:24 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 31 11:20:24 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54070,mid=<200903311820.n2VIKMeZ005824@virt2.int.splunk.com>,bayes=0.169807043140778,autolearn=no
|
|
Mar 31 11:20:24 splunk3 sendmail[27686]: n2VIKMZn027685: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:20:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:20:34 splunk3 sendmail[27730]: n2VIKY2X027730: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:21:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:21:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:21:34 splunk3 sendmail[27979]: n2VILYcg027979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:22:34 splunk3 sendmail[28215]: n2VIMYhi028215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:23:34 splunk3 sendmail[28458]: n2VINYnS028458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:24:34 splunk3 sendmail[28695]: n2VIOYU5028695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:25:23 splunk3 sendmail[28896]: n2VIPNKh028896: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311825.n2VIPM8A006430@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:25:23 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54125
|
|
Mar 31 11:25:23 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:25:23 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:25:23 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:25:23 splunk3 spamd[26484]: spamd: processing message <200903311825.n2VIPM8A006430@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:25:25 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 31 11:25:25 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54125,mid=<200903311825.n2VIPM8A006430@virt2.int.splunk.com>,bayes=0.169807043140778,autolearn=no
|
|
Mar 31 11:25:25 splunk3 sendmail[28897]: n2VIPNKh028896: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:25:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:25:34 splunk3 sendmail[28947]: n2VIPYiR028947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:26:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:26:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 11:26:34 splunk3 sendmail[29186]: n2VIQYYb029186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:27:34 splunk3 sendmail[29426]: n2VIRY5w029426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:28:34 splunk3 sendmail[29661]: n2VISYiw029661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:29:34 splunk3 sendmail[29897]: n2VITYQI029897: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:30:23 splunk3 sendmail[30107]: n2VIUNKk030107: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311830.n2VIUNvl007058@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:30:23 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54182
|
|
Mar 31 11:30:23 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:30:23 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:30:23 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:30:23 splunk3 spamd[26484]: spamd: processing message <200903311830.n2VIUNvl007058@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:30:25 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Mar 31 11:30:25 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54182,mid=<200903311830.n2VIUNvl007058@virt2.int.splunk.com>,bayes=0.169807043140778,autolearn=no
|
|
Mar 31 11:30:25 splunk3 sendmail[30108]: n2VIUNKk030107: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:30:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:30:34 splunk3 sendmail[30156]: n2VIUYCA030156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:31:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:31:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:31:34 splunk3 sendmail[30403]: n2VIVYC7030403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:32:34 splunk3 sendmail[30638]: n2VIWYu4030638: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:33:34 splunk3 sendmail[30875]: n2VIXYL6030875: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:34:34 splunk3 sendmail[31109]: n2VIYYgX031109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:35:24 splunk3 sendmail[31317]: n2VIZNtO031317: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311835.n2VIZNrc007799@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:35:24 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54237
|
|
Mar 31 11:35:24 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:35:24 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:35:24 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:35:24 splunk3 spamd[26484]: spamd: processing message <200903311835.n2VIZNrc007799@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:35:26 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 31 11:35:26 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54237,mid=<200903311835.n2VIZNrc007799@virt2.int.splunk.com>,bayes=0.169807043140778,autolearn=no
|
|
Mar 31 11:35:26 splunk3 sendmail[31318]: n2VIZNtO031317: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:35:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:35:34 splunk3 sendmail[31364]: n2VIZYJF031364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:36:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:36:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:36:34 splunk3 sendmail[31607]: n2VIaYgc031607: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:37:34 splunk3 sendmail[31848]: n2VIbYuT031848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:38:34 splunk3 sendmail[32087]: n2VIcYJe032087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:39:34 splunk3 sendmail[32325]: n2VIdYQJ032325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:40:24 splunk3 sendmail[32532]: n2VIeOwQ032532: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311840.n2VIeO5V008442@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:40:24 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54293
|
|
Mar 31 11:40:24 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:40:24 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:40:24 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:40:24 splunk3 spamd[26484]: spamd: processing message <200903311840.n2VIeO5V008442@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:40:26 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 31 11:40:26 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54293,mid=<200903311840.n2VIeO5V008442@virt2.int.splunk.com>,bayes=0.169807043140778,autolearn=no
|
|
Mar 31 11:40:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:40:26 splunk3 sendmail[32533]: n2VIeOwQ032532: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:40:34 splunk3 sendmail[32579]: n2VIeYuf032579: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:41:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:41:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 11:41:34 splunk3 sendmail[359]: n2VIfYwO000359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:42:34 splunk3 sendmail[598]: n2VIgY0O000598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:43:34 splunk3 sendmail[836]: n2VIhYOd000836: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:44:34 splunk3 sendmail[1072]: n2VIiYR4001072: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:45:25 splunk3 sendmail[1278]: n2VIjPJJ001278: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311845.n2VIjOBh009049@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:45:25 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54350
|
|
Mar 31 11:45:25 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:45:25 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:45:25 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:45:25 splunk3 spamd[26484]: spamd: processing message <200903311845.n2VIjOBh009049@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:45:27 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 11:45:27 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54350,mid=<200903311845.n2VIjOBh009049@virt2.int.splunk.com>,bayes=0.169807043140778,autolearn=no
|
|
Mar 31 11:45:27 splunk3 sendmail[1279]: n2VIjPJJ001278: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:45:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:45:34 splunk3 sendmail[1327]: n2VIjYkL001327: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:46:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:46:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:46:34 splunk3 sendmail[1567]: n2VIkYFT001567: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:47:34 splunk3 sendmail[1807]: n2VIlYhr001807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:48:34 splunk3 sendmail[2044]: n2VImYU5002044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:49:34 splunk3 sendmail[2284]: n2VInYon002284: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:50:25 splunk3 sendmail[2492]: n2VIoPxp002492: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903311850.n2VIoPpB009665@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:50:26 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54405
|
|
Mar 31 11:50:26 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:50:26 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:50:26 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:50:26 splunk3 spamd[26484]: spamd: processing message <200903311850.n2VIoPpB009665@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:50:28 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 11:50:28 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54405,mid=<200903311850.n2VIoPpB009665@virt2.int.splunk.com>,bayes=0.169807043140778,autolearn=no
|
|
Mar 31 11:50:28 splunk3 sendmail[2497]: n2VIoPxp002492: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:50:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:50:34 splunk3 sendmail[2539]: n2VIoYaf002539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:51:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:51:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:51:34 splunk3 sendmail[2802]: n2VIpYZH002802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:52:34 splunk3 sendmail[3048]: n2VIqYYS003048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:53:34 splunk3 sendmail[3292]: n2VIrYSV003292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:54:34 splunk3 sendmail[3527]: n2VIsYKF003527: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:55:26 splunk3 sendmail[3784]: n2VItQ0k003784: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311855.n2VItQiR010267@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 11:55:27 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54461
|
|
Mar 31 11:55:27 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 11:55:27 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 11:55:27 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 11:55:27 splunk3 spamd[26484]: spamd: processing message <200903311855.n2VItQiR010267@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 11:55:29 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 11:55:29 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54461,mid=<200903311855.n2VItQiR010267@virt2.int.splunk.com>,bayes=0.112796854099493,autolearn=no
|
|
Mar 31 11:55:29 splunk3 sendmail[3785]: n2VItQ0k003784: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 11:55:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 11:55:34 splunk3 sendmail[3809]: n2VItYnH003809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:56:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 11:56:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 11:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 11:56:34 splunk3 sendmail[4067]: n2VIuYII004067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:57:34 splunk3 sendmail[4325]: n2VIvYwk004325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:58:34 splunk3 sendmail[4562]: n2VIwYVD004562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 11:59:34 splunk3 sendmail[4802]: n2VIxYdO004802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:00:04 splunk3 sendmail[4995]: n2VJ04ae004995: from=root, size=291, class=0, nrcpts=1, msgid=<200903311900.n2VJ04ae004995@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 12:00:04 splunk3 sendmail[4999]: n2VJ04fJ004999: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903311900.n2VJ04ae004995@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 12:00:04 splunk3 sendmail[4995]: n2VJ04ae004995: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VJ04fJ004999 Message accepted for delivery)
|
|
Mar 31 12:00:06 splunk3 sendmail[5000]: n2VJ04fJ004999: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:00:22 splunk3 sendmail[5087]: n2VJ0LCT005087: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903311900.n2VJ0LCT005087@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 12:00:22 splunk3 sendmail[5089]: n2VJ0LCT005087: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 12:00:22 splunk3 sendmail[5089]: n2VJ0LCT005087: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 31 12:00:22 splunk3 sendmail[5089]: n2VJ0LCT005087: n2VJ0MCT005089: postmaster notify: User unknown
|
|
Mar 31 12:00:23 splunk3 sendmail[5089]: n2VJ0MCT005089: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:00:27 splunk3 sendmail[5162]: n2VJ0RiV005162: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311900.n2VJ0RV6010906@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:00:27 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54525
|
|
Mar 31 12:00:27 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:00:27 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 12:00:27 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 12:00:27 splunk3 sendmail[5163]: n2VJ0RiV005162: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:00:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:00:34 splunk3 sendmail[5187]: n2VJ0Y9n005187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:01:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:01:15 splunk3 sendmail[5311]: n2VJ113X005311: from=root, size=443, class=0, nrcpts=1, msgid=<200903311901.n2VJ113X005311@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 12:01:15 splunk3 sendmail[5378]: n2VJ1F8w005378: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903311901.n2VJ113X005311@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 12:01:15 splunk3 sendmail[5311]: n2VJ113X005311: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VJ1F8w005378 Message accepted for delivery)
|
|
Mar 31 12:01:17 splunk3 sendmail[5379]: n2VJ1F8w005378: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:01:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:01:34 splunk3 sendmail[5449]: n2VJ1Y4B005449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:02:34 splunk3 sendmail[5685]: n2VJ2Ya8005685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:03:34 splunk3 sendmail[5926]: n2VJ3YrH005926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:04:31 splunk3 sendmail[6141]: n2VJ4S0r006141: from=<teillqueu@yahoo.fr>, size=926, class=0, nrcpts=1, msgid=<447533679.94805265700856@yahoo.fr>, proto=ESMTP, daemon=MTA, relay=[91.202.26.5]
|
|
Mar 31 12:04:32 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54567
|
|
Mar 31 12:04:32 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:04:32 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 12:04:32 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 12:04:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:04:32 splunk3 sendmail[6160]: n2VJ4S0r006141: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31106, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:04:34 splunk3 sendmail[6164]: n2VJ4YKP006164: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:05:28 splunk3 sendmail[6394]: n2VJ5SdX006394: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311905.n2VJ5RhY011609@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:05:28 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54583
|
|
Mar 31 12:05:28 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:05:28 splunk3 spamd[26484]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 12:05:28 splunk3 spamd[26484]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 12:05:28 splunk3 sendmail[6395]: n2VJ5SdX006394: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:05:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:05:34 splunk3 sendmail[6419]: n2VJ5YBO006419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:06:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:06:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:06:34 splunk3 sendmail[6662]: n2VJ6YXL006662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:07:34 splunk3 sendmail[6900]: n2VJ7Yii006900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:08:34 splunk3 sendmail[7138]: n2VJ8Yhb007138: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:09:34 splunk3 sendmail[7380]: n2VJ9YSc007380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:10:02 splunk3 sendmail[7617]: n2VJA2Gl007617: from=root, size=292, class=0, nrcpts=1, msgid=<200903311910.n2VJA2Gl007617@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 12:10:02 splunk3 sendmail[7622]: n2VJA2xZ007622: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903311910.n2VJA2Gl007617@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 12:10:02 splunk3 sendmail[7617]: n2VJA2Gl007617: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VJA2xZ007622 Message accepted for delivery)
|
|
Mar 31 12:10:03 splunk3 sendmail[7623]: n2VJA2xZ007622: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:10:13 splunk3 sendmail[7259]: n2VJ93mp007259: from=<suzannej@shawcable.net>, size=5745, class=0, nrcpts=1, msgid=<28ae019dc381$ce566170$c4ec1cfb@shawcable.net>, proto=ESMTP, daemon=MTA, relay=94.96.46.157.dynamic.saudi.net.sa [94.96.46.157] (may be forged)
|
|
Mar 31 12:10:13 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54630
|
|
Mar 31 12:10:13 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:10:13 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:10:13 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:10:13 splunk3 spamd[26484]: spamd: processing message <28ae019dc381$ce566170$c4ec1cfb@shawcable.net> for spamme:501
|
|
Mar 31 12:10:16 splunk3 spamd[26484]: spamd: identified spam (44.3/5.0) for spamme:501 in 2.8 seconds, 6093 bytes.
|
|
Mar 31 12:10:16 splunk3 spamd[26484]: spamd: result: Y 44 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_IPADDR2,HELO_DYNAMIC_SPLIT_IP,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,RCVD_NUMERIC_HELO,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.8,size=6093,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54630,mid=<28ae019dc381$ce566170$c4ec1cfb@shawcable.net>,bayes=1,autolearn=spam
|
|
Mar 31 12:10:16 splunk3 sendmail[7667]: n2VJ93mp007259: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:03, mailer=local, pri=35996, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:10:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:10:28 splunk3 sendmail[7743]: n2VJASPW007743: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311910.n2VJASUH012200@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:10:28 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54640
|
|
Mar 31 12:10:28 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:10:28 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:10:28 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:10:28 splunk3 spamd[26484]: spamd: processing message <200903311910.n2VJASUH012200@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:10:30 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 12:10:30 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54640,mid=<200903311910.n2VJASUH012200@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:10:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:10:30 splunk3 sendmail[7744]: n2VJASPW007743: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:10:34 splunk3 sendmail[7768]: n2VJAYST007768: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:11:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:11:22 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 12:11:34 splunk3 sendmail[8014]: n2VJBYM8008014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:12:34 splunk3 sendmail[8253]: n2VJCY0n008253: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:13:34 splunk3 sendmail[8492]: n2VJDYmn008492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:14:34 splunk3 sendmail[8724]: n2VJEYod008724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:15:29 splunk3 sendmail[8953]: n2VJFT6v008953: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311915.n2VJFSDj013030@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:15:29 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54697
|
|
Mar 31 12:15:29 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:15:29 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:15:29 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:15:29 splunk3 spamd[26484]: spamd: processing message <200903311915.n2VJFSDj013030@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:15:31 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 31 12:15:31 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54697,mid=<200903311915.n2VJFSDj013030@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:15:31 splunk3 sendmail[8954]: n2VJFT6v008953: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:15:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:15:34 splunk3 sendmail[8977]: n2VJFYna008977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:16:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:16:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:16:34 splunk3 sendmail[9219]: n2VJGYPm009219: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:17:34 splunk3 sendmail[9460]: n2VJHYPF009460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:18:34 splunk3 sendmail[9705]: n2VJIYmM009705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:19:02 splunk3 sendmail[9824]: n2VJJ1v1009824: from=<brett@oval6.com>, size=10123, class=0, nrcpts=1, msgid=<49D26CA6.2000105@oval6.com>, proto=SMTP, daemon=MTA, relay=smtpauth20.prod.mesa1.secureserver.net [64.202.165.36]
|
|
Mar 31 12:19:02 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54732
|
|
Mar 31 12:19:02 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:19:02 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:19:02 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:19:02 splunk3 spamd[26484]: spamd: processing message <49D26CA6.2000105@oval6.com> for spamme:501
|
|
Mar 31 12:19:04 splunk3 spamd[26484]: spamd: identified spam (5.7/5.0) for spamme:501 in 2.1 seconds, 10442 bytes.
|
|
Mar 31 12:19:04 splunk3 spamd[26484]: spamd: result: Y 5 - BAYES_80,HTML_90_100,HTML_IMAGE_ONLY_04,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.1,size=10442,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54732,mid=<49D26CA6.2000105@oval6.com>,bayes=0.913164678111829,autolearn=no
|
|
Mar 31 12:19:04 splunk3 sendmail[9825]: n2VJJ1v1009824: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=40367, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:19:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:19:34 splunk3 sendmail[9951]: n2VJJYoV009951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:20:29 splunk3 sendmail[10181]: n2VJKTFX010181: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311920.n2VJKTdf013641@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:20:29 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54753
|
|
Mar 31 12:20:29 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:20:29 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:20:29 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:20:29 splunk3 spamd[26484]: spamd: processing message <200903311920.n2VJKTdf013641@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:20:31 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 12:20:31 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54753,mid=<200903311920.n2VJKTdf013641@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:20:31 splunk3 sendmail[10182]: n2VJKTFX010181: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:20:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:20:34 splunk3 sendmail[10208]: n2VJKY9V010208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:21:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:21:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:21:34 splunk3 sendmail[10454]: n2VJLYKs010454: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:22:34 splunk3 sendmail[10690]: n2VJMYPM010690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:23:34 splunk3 sendmail[10932]: n2VJNY4L010932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:24:34 splunk3 sendmail[11168]: n2VJOYP5011168: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:25:30 splunk3 sendmail[11398]: n2VJPU1V011398: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311925.n2VJPTtp014274@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:25:30 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54809
|
|
Mar 31 12:25:30 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:25:30 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:25:30 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:25:30 splunk3 spamd[26484]: spamd: processing message <200903311925.n2VJPTtp014274@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:25:32 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 12:25:32 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54809,mid=<200903311925.n2VJPTtp014274@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:25:32 splunk3 sendmail[11399]: n2VJPU1V011398: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:25:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:25:34 splunk3 sendmail[11421]: n2VJPYhU011421: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:26:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:26:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:26:24 splunk3 sendmail[11619]: n2VJQOBo011619: from=<info@atm.org>, size=1201, class=0, nrcpts=1, msgid=<1677.41.205.173.10.1238527227.squirrel@webmail.abtbanmai.go.th>, proto=ESMTP, daemon=MTA, relay=cat50.thaihostserver.com [61.19.246.222]
|
|
Mar 31 12:26:25 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54820
|
|
Mar 31 12:26:25 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:26:25 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:26:25 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:26:25 splunk3 spamd[26484]: spamd: processing message <1677.41.205.173.10.1238527227.squirrel@webmail.abtbanmai.go.th> for spamme:501
|
|
Mar 31 12:26:27 splunk3 spamd[26484]: spamd: clean message (2.1/5.0) for spamme:501 in 2.1 seconds, 1484 bytes.
|
|
Mar 31 12:26:27 splunk3 spamd[26484]: spamd: result: . 2 - BAYES_80,TO_CC_NONE scantime=2.1,size=1484,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54820,mid=<1677.41.205.173.10.1238527227.squirrel@webmail.abtbanmai.go.th>,bayes=0.862362177913794,autolearn=no
|
|
Mar 31 12:26:28 splunk3 sendmail[11623]: n2VJQOBo011619: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31414, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:26:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 12:26:34 splunk3 sendmail[11672]: n2VJQYLu011672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:27:34 splunk3 sendmail[11914]: n2VJRYN3011914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:28:34 splunk3 sendmail[12145]: n2VJSY97012145: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:29:35 splunk3 sendmail[12381]: n2VJTYf9012381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:30:00 splunk3 sendmail[12496]: n2VJU07m012496: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311930.n2VJU0Yt014792@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:30:01 splunk3 spamd[26484]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54855
|
|
Mar 31 12:30:01 splunk3 spamd[26484]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:30:01 splunk3 spamd[26484]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:30:01 splunk3 spamd[26484]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:30:01 splunk3 spamd[26484]: spamd: processing message <200903311930.n2VJU0Yt014792@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:30:03 splunk3 spamd[26484]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 31 12:30:03 splunk3 spamd[26484]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54855,mid=<200903311930.n2VJU0Yt014792@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:30:03 splunk3 sendmail[12497]: n2VJU07m012496: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:30:03 splunk3 spamd[3033]: prefork: child states: BI
|
|
Mar 31 12:30:03 splunk3 spamd[3033]: spamd: handled cleanup of child pid 26484 due to SIGCHLD
|
|
Mar 31 12:30:03 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 12510
|
|
Mar 31 12:30:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:30:35 splunk3 sendmail[12638]: n2VJUZqi012638: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:31:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:31:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:31:35 splunk3 sendmail[12885]: n2VJVZU0012885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:32:35 splunk3 sendmail[13119]: n2VJWZMI013119: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:33:35 splunk3 sendmail[13398]: n2VJXZcB013398: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:34:35 splunk3 sendmail[13632]: n2VJYZtX013632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:35:01 splunk3 sendmail[13750]: n2VJZ1ad013750: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311935.n2VJZ1QK015543@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:35:01 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54910
|
|
Mar 31 12:35:01 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:35:01 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:35:01 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:35:01 splunk3 spamd[12510]: spamd: processing message <200903311935.n2VJZ1QK015543@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:35:03 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 12:35:03 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54910,mid=<200903311935.n2VJZ1QK015543@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:35:03 splunk3 sendmail[13751]: n2VJZ1ad013750: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:35:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:35:35 splunk3 sendmail[13885]: n2VJZZ0J013885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:36:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:36:19 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:36:35 splunk3 sendmail[14128]: n2VJaZgE014128: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:37:35 splunk3 sendmail[14367]: n2VJbZPS014367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:38:35 splunk3 sendmail[14606]: n2VJcZao014606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:39:35 splunk3 sendmail[14845]: n2VJdZZ3014845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:40:02 splunk3 sendmail[14966]: n2VJe20u014966: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311940.n2VJe1WK016177@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:40:02 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54966
|
|
Mar 31 12:40:02 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:40:02 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:40:02 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:40:02 splunk3 spamd[12510]: spamd: processing message <200903311940.n2VJe1WK016177@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:40:04 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 31 12:40:04 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54966,mid=<200903311940.n2VJe1WK016177@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:40:04 splunk3 sendmail[14967]: n2VJe20u014966: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:40:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:40:35 splunk3 sendmail[15102]: n2VJeZ2c015102: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:41:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:41:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 12:41:35 splunk3 sendmail[15351]: n2VJfZkA015351: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:42:35 splunk3 sendmail[15586]: n2VJgZZA015586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:43:35 splunk3 sendmail[15824]: n2VJhZxe015824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:44:35 splunk3 sendmail[16057]: n2VJiZMX016057: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:45:02 splunk3 sendmail[16177]: n2VJj2oh016177: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311945.n2VJj2pw016826@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:45:03 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55023
|
|
Mar 31 12:45:03 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:45:03 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:45:03 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:45:03 splunk3 spamd[12510]: spamd: processing message <200903311945.n2VJj2pw016826@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:45:05 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 12:45:05 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55023,mid=<200903311945.n2VJj2pw016826@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:45:05 splunk3 sendmail[16178]: n2VJj2oh016177: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:45:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:45:35 splunk3 sendmail[16311]: n2VJjZt3016311: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:46:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:46:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:46:35 splunk3 sendmail[16553]: n2VJkZhR016553: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:47:35 splunk3 sendmail[16794]: n2VJlZG6016794: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:48:35 splunk3 sendmail[17029]: n2VJmZxO017029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:49:35 splunk3 sendmail[17267]: n2VJnZsP017267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:50:03 splunk3 sendmail[17388]: n2VJo33T017388: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311950.n2VJo3JR017437@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:50:03 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55078
|
|
Mar 31 12:50:03 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:50:03 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:50:03 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:50:03 splunk3 spamd[12510]: spamd: processing message <200903311950.n2VJo3JR017437@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:50:05 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 31 12:50:05 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55078,mid=<200903311950.n2VJo3JR017437@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:50:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:50:05 splunk3 sendmail[17389]: n2VJo33T017388: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:50:35 splunk3 sendmail[17520]: n2VJoZgt017520: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:51:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:51:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:51:35 splunk3 sendmail[17767]: n2VJpZq7017767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:52:35 splunk3 sendmail[18003]: n2VJqZBH018003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:53:35 splunk3 sendmail[18246]: n2VJrZ5w018246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:54:35 splunk3 sendmail[18483]: n2VJsZ1E018483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:55:04 splunk3 sendmail[18602]: n2VJt4qQ018602: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903311955.n2VJt49M018052@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 12:55:04 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55134
|
|
Mar 31 12:55:04 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 12:55:04 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 12:55:04 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 12:55:04 splunk3 spamd[12510]: spamd: processing message <200903311955.n2VJt49M018052@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 12:55:06 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 12:55:06 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55134,mid=<200903311955.n2VJt49M018052@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 12:55:06 splunk3 sendmail[18603]: n2VJt4qQ018602: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 12:55:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 12:55:35 splunk3 sendmail[18736]: n2VJtZxc018736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:56:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 12:56:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 12:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 12:56:35 splunk3 sendmail[18981]: n2VJuZdp018981: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:57:35 splunk3 sendmail[19219]: n2VJvZ8J019219: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:58:35 splunk3 sendmail[19454]: n2VJwZ7m019454: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 12:59:35 splunk3 sendmail[19693]: n2VJxZ3s019693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:00:04 splunk3 sendmail[19873]: n2VK04VN019873: from=root, size=291, class=0, nrcpts=1, msgid=<200903312000.n2VK04VN019873@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 13:00:04 splunk3 sendmail[19877]: n2VK043q019877: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903312000.n2VK04VN019873@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 13:00:04 splunk3 sendmail[19873]: n2VK04VN019873: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VK043q019877 Message accepted for delivery)
|
|
Mar 31 13:00:05 splunk3 sendmail[19884]: n2VK05iR019884: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312000.n2VK045v018692@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:00:05 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55191
|
|
Mar 31 13:00:05 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:00:05 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 13:00:05 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 13:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:00:05 splunk3 sendmail[19885]: n2VK05iR019884: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:00:05 splunk3 sendmail[19878]: n2VK043q019877: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:00:27 splunk3 sendmail[19997]: n2VK0R4E019997: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903312000.n2VK0R4E019997@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 13:00:27 splunk3 sendmail[19999]: n2VK0R4E019997: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 13:00:27 splunk3 sendmail[19999]: n2VK0R4E019997: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 13:00:27 splunk3 sendmail[19999]: n2VK0R4E019997: n2VK0R4E019999: postmaster notify: User unknown
|
|
Mar 31 13:00:28 splunk3 sendmail[19999]: n2VK0R4E019999: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:00:35 splunk3 sendmail[20031]: n2VK0ZVw020031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:01:05 splunk3 sendmail[20156]: n2VK11N0020156: from=root, size=443, class=0, nrcpts=1, msgid=<200903312001.n2VK11N0020156@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 13:01:05 splunk3 sendmail[20174]: n2VK15tm020174: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903312001.n2VK11N0020156@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 13:01:05 splunk3 sendmail[20156]: n2VK11N0020156: to=root, ctladdr=root (0/0), delay=00:00:04, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VK15tm020174 Message accepted for delivery)
|
|
Mar 31 13:01:06 splunk3 sendmail[20175]: n2VK15tm020174: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:01:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:01:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:01:35 splunk3 sendmail[20293]: n2VK1Zf4020293: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:02:35 splunk3 sendmail[20529]: n2VK2Zqs020529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:03:35 splunk3 sendmail[20768]: n2VK3Zga020768: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:04:35 splunk3 sendmail[21015]: n2VK4Zhh021015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:05:05 splunk3 sendmail[21137]: n2VK55Ou021137: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312005.n2VK55M0019375@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:05:05 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55255
|
|
Mar 31 13:05:05 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:05:05 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 13:05:05 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 13:05:05 splunk3 sendmail[21138]: n2VK55Ou021137: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:05:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:05:35 splunk3 sendmail[21267]: n2VK5ZHl021267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:06:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:06:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:06:35 splunk3 sendmail[21511]: n2VK6ZTF021511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:07:35 splunk3 sendmail[21750]: n2VK7ZlU021750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:08:35 splunk3 sendmail[21991]: n2VK8ZsM021991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:09:35 splunk3 sendmail[22233]: n2VK9ZAA022233: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:10:02 splunk3 sendmail[22430]: n2VKA2Bf022430: from=root, size=292, class=0, nrcpts=1, msgid=<200903312010.n2VKA2Bf022430@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 13:10:03 splunk3 sendmail[22435]: n2VKA2Gn022435: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903312010.n2VKA2Bf022430@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 13:10:03 splunk3 sendmail[22430]: n2VKA2Bf022430: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VKA2Gn022435 Message accepted for delivery)
|
|
Mar 31 13:10:04 splunk3 sendmail[22436]: n2VKA2Gn022435: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:10:06 splunk3 sendmail[22458]: n2VKA6uK022458: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312010.n2VKA5dw019986@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:10:06 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55311
|
|
Mar 31 13:10:06 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:10:06 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:10:06 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:10:06 splunk3 spamd[12510]: spamd: processing message <200903312010.n2VKA5dw019986@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:10:08 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 13:10:08 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55311,mid=<200903312010.n2VKA5dw019986@virt2.int.splunk.com>,bayes=0.112792371395232,autolearn=no
|
|
Mar 31 13:10:08 splunk3 sendmail[22459]: n2VKA6uK022458: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:10:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:10:35 splunk3 sendmail[22589]: n2VKAZ9Y022589: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:11:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:11:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 13:11:35 splunk3 sendmail[22838]: n2VKBZBE022838: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:12:35 splunk3 sendmail[23075]: n2VKCZxn023075: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:13:35 splunk3 sendmail[23315]: n2VKDZcL023315: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:14:34 splunk3 sendmail[23515]: n2VKEVnE023515: from=<spamme@splunkit.com>, size=2728, class=0, nrcpts=1, msgid=<200903312014.n2VKEVnE023515@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=89-139-202-122.bb.netvision.net.il [89.139.202.122]
|
|
Mar 31 13:14:34 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55364
|
|
Mar 31 13:14:34 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:14:34 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:14:34 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:14:34 splunk3 spamd[12510]: spamd: processing message <200903312014.n2VKEVnE023515@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 13:14:35 splunk3 sendmail[23554]: n2VKEZuw023554: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:14:36 splunk3 spamd[12510]: spamd: identified spam (38.4/5.0) for spamme:501 in 2.2 seconds, 3153 bytes.
|
|
Mar 31 13:14:36 splunk3 spamd[12510]: spamd: result: Y 38 - AWL,BAYES_99,FORGED_RCVD_HELO,HELO_DYNAMIC_IPADDR2,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RCVD_NUMERIC_HELO,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.2,size=3153,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55364,mid=<200903312014.n2VKEVnE023515@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 31 13:14:36 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:14:36 splunk3 sendmail[23533]: n2VKEVnE023515: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33075, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:15:07 splunk3 sendmail[23674]: n2VKF7UC023674: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312015.n2VKF637020787@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:15:07 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55369
|
|
Mar 31 13:15:07 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:15:07 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:15:07 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:15:07 splunk3 spamd[12510]: spamd: processing message <200903312015.n2VKF637020787@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:15:09 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 31 13:15:09 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55369,mid=<200903312015.n2VKF637020787@virt2.int.splunk.com>,bayes=0.112784895541897,autolearn=no
|
|
Mar 31 13:15:09 splunk3 sendmail[23675]: n2VKF7UC023674: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:15:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:15:35 splunk3 sendmail[23810]: n2VKFZaK023810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:16:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:16:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:16:35 splunk3 sendmail[24052]: n2VKGZTo024052: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:16:45 splunk3 sendmail[23890]: n2VKFwnP023890: from=<televendas.luciano@equagril.com.br>, size=64629, class=0, nrcpts=1, msgid=<01c9b213$9c1c6880$cd7d0652@televendas.luciano>, proto=ESMTP, daemon=MTA, relay=cpc4-stme1-0-0-cust460.cdif.cable.ntl.com [82.6.125.205]
|
|
Mar 31 13:16:45 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55393
|
|
Mar 31 13:16:45 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:16:45 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:16:45 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:16:45 splunk3 spamd[12510]: spamd: processing message <01c9b213$9c1c6880$cd7d0652@televendas.luciano> for spamme:501
|
|
Mar 31 13:16:47 splunk3 spamd[12510]: spamd: identified spam (11.4/5.0) for spamme:501 in 2.3 seconds, 64965 bytes.
|
|
Mar 31 13:16:47 splunk3 spamd[12510]: spamd: result: Y 11 - BAYES_99,EXTRA_MPART_TYPE,HTML_30_40,HTML_IMAGE_ONLY_16,HTML_MESSAGE,RCVD_IN_SORBS_DUL,RCVD_IN_XBL scantime=2.3,size=64965,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55393,mid=<01c9b213$9c1c6880$cd7d0652@televendas.luciano>,bayes=0.990120324393028,autolearn=no
|
|
Mar 31 13:16:47 splunk3 sendmail[24091]: n2VKFwnP023890: to=<spamme@splunkit.com>, delay=00:00:42, xdelay=00:00:02, mailer=local, pri=94853, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:16:47 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:17:35 splunk3 sendmail[24296]: n2VKHZ23024296: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:18:35 splunk3 sendmail[24532]: n2VKIZvi024532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:19:35 splunk3 sendmail[24771]: n2VKJZNV024771: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:20:07 splunk3 sendmail[24897]: n2VKK75w024897: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312020.n2VKK7Xw021423@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:20:07 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55426
|
|
Mar 31 13:20:07 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:20:07 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:20:07 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:20:07 splunk3 spamd[12510]: spamd: processing message <200903312020.n2VKK7Xw021423@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:20:09 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1311 bytes.
|
|
Mar 31 13:20:09 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55426,mid=<200903312020.n2VKK7Xw021423@virt2.int.splunk.com>,bayes=0.112784895541897,autolearn=no
|
|
Mar 31 13:20:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:20:09 splunk3 sendmail[24898]: n2VKK75w024897: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:20:35 splunk3 sendmail[25028]: n2VKKZlS025028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:21:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:21:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:21:35 splunk3 sendmail[25274]: n2VKLZ7w025274: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:22:35 splunk3 sendmail[25511]: n2VKMZAC025511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:23:35 splunk3 sendmail[25752]: n2VKNZ5I025752: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:24:35 splunk3 sendmail[25986]: n2VKOZnc025986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:25:08 splunk3 sendmail[26110]: n2VKP8b8026110: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312025.n2VKP7b8022029@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:25:08 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55481
|
|
Mar 31 13:25:08 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:25:08 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:25:08 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:25:08 splunk3 spamd[12510]: spamd: processing message <200903312025.n2VKP7b8022029@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:25:10 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 13:25:10 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55481,mid=<200903312025.n2VKP7b8022029@virt2.int.splunk.com>,bayes=0.112784895541897,autolearn=no
|
|
Mar 31 13:25:10 splunk3 sendmail[26111]: n2VKP8b8026110: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:25:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:25:35 splunk3 sendmail[26241]: n2VKPZi4026241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:26:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:26:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 13:26:35 splunk3 sendmail[26485]: n2VKQZWF026485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:27:35 splunk3 sendmail[26727]: n2VKRZ6h026727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:28:35 splunk3 sendmail[26962]: n2VKSZ91026962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:29:35 splunk3 sendmail[27202]: n2VKTZo2027202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:30:08 splunk3 sendmail[27336]: n2VKU8Zw027336: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312030.n2VKU8M1022645@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:30:08 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55546
|
|
Mar 31 13:30:08 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:30:08 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:30:08 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:30:08 splunk3 spamd[12510]: spamd: processing message <200903312030.n2VKU8M1022645@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:30:10 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 13:30:10 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55546,mid=<200903312030.n2VKU8M1022645@virt2.int.splunk.com>,bayes=0.112784895541897,autolearn=no
|
|
Mar 31 13:30:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:30:10 splunk3 sendmail[27337]: n2VKU8Zw027336: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:30:35 splunk3 sendmail[27457]: n2VKUZuV027457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:31:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:31:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:31:35 splunk3 sendmail[27702]: n2VKVZUG027702: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:32:35 splunk3 sendmail[27938]: n2VKWZW0027938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:33:35 splunk3 sendmail[28179]: n2VKXZDK028179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:34:35 splunk3 sendmail[28413]: n2VKYZQb028413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:35:09 splunk3 sendmail[28547]: n2VKZ9fZ028547: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312035.n2VKZ8BV023392@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:35:09 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55601
|
|
Mar 31 13:35:09 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:35:09 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:35:09 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:35:09 splunk3 spamd[12510]: spamd: processing message <200903312035.n2VKZ8BV023392@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:35:11 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 13:35:11 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55601,mid=<200903312035.n2VKZ8BV023392@virt2.int.splunk.com>,bayes=0.112784895541897,autolearn=no
|
|
Mar 31 13:35:11 splunk3 sendmail[28548]: n2VKZ9fZ028547: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:35:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:35:35 splunk3 sendmail[28665]: n2VKZZAR028665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:36:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:36:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:36:35 splunk3 sendmail[28910]: n2VKaZCI028910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:37:35 splunk3 sendmail[29148]: n2VKbZ5m029148: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:38:35 splunk3 sendmail[29385]: n2VKcZxf029385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:39:35 splunk3 sendmail[29625]: n2VKdZ9H029625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:40:10 splunk3 sendmail[29779]: n2VKeAa0029779: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312040.n2VKe9Ch024055@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:40:10 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55657
|
|
Mar 31 13:40:10 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:40:10 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:40:10 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:40:10 splunk3 spamd[12510]: spamd: processing message <200903312040.n2VKe9Ch024055@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:40:14 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1311 bytes.
|
|
Mar 31 13:40:14 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55657,mid=<200903312040.n2VKe9Ch024055@virt2.int.splunk.com>,bayes=0.112784895541897,autolearn=no
|
|
Mar 31 13:40:14 splunk3 sendmail[29780]: n2VKeAa0029779: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:40:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:40:35 splunk3 sendmail[29881]: n2VKeZLr029881: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:41:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:41:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 13:41:35 splunk3 sendmail[30130]: n2VKfZiY030130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:42:35 splunk3 sendmail[30366]: n2VKgZph030366: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:43:35 splunk3 sendmail[30606]: n2VKhZNv030606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:44:35 splunk3 sendmail[30839]: n2VKiZSA030839: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:45:10 splunk3 sendmail[30990]: n2VKjAFE030990: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312045.n2VKjAKG024673@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:45:10 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55713
|
|
Mar 31 13:45:10 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:45:10 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:45:10 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:45:10 splunk3 spamd[12510]: spamd: processing message <200903312045.n2VKjAKG024673@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:45:12 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 13:45:12 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55713,mid=<200903312045.n2VKjAKG024673@virt2.int.splunk.com>,bayes=0.112784895541897,autolearn=no
|
|
Mar 31 13:45:12 splunk3 sendmail[30991]: n2VKjAFE030990: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:45:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:45:35 splunk3 sendmail[31092]: n2VKjZTt031092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:46:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:46:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:46:35 splunk3 sendmail[31336]: n2VKkZFc031336: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:47:35 splunk3 sendmail[31577]: n2VKlZNC031577: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:48:35 splunk3 sendmail[31813]: n2VKmZPx031813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:49:16 splunk3 sendmail[31974]: n2VKnG6m031974: from=<3y4HSSRQKBmkNVVNSLHSLYaZ-UVYLWSfNVVNSL.JVTZWHTTLZWSbURPa.JVT@alerts.bounces.google.com>, size=3400, class=0, nrcpts=1, msgid=<0016e64135bc086f0c04667055bb@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.164]
|
|
Mar 31 13:49:16 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55754
|
|
Mar 31 13:49:16 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:49:16 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:49:16 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:49:16 splunk3 spamd[12510]: spamd: processing message <0016e64135bc086f0c04667055bb@google.com> for spamme:501
|
|
Mar 31 13:49:19 splunk3 spamd[12510]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.5 seconds, 3830 bytes.
|
|
Mar 31 13:49:19 splunk3 spamd[12510]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.5,size=3830,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55754,mid=<0016e64135bc086f0c04667055bb@google.com>,bayes=0,autolearn=ham
|
|
Mar 31 13:49:19 splunk3 sendmail[31975]: n2VKnG6m031974: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=33611, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:49:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:49:35 splunk3 sendmail[32056]: n2VKnZwh032056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:50:11 splunk3 sendmail[32210]: n2VKoA37032210: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312050.n2VKoA3l025283@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:50:11 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55770
|
|
Mar 31 13:50:11 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:50:11 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:50:11 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:50:11 splunk3 spamd[12510]: spamd: processing message <200903312050.n2VKoA3l025283@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:50:13 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 13:50:13 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55770,mid=<200903312050.n2VKoA3l025283@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 13:50:13 splunk3 sendmail[32211]: n2VKoA37032210: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:50:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:50:35 splunk3 sendmail[32313]: n2VKoZor032313: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:51:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:51:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:51:35 splunk3 sendmail[32559]: n2VKpZUw032559: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:52:35 splunk3 sendmail[328]: n2VKqZ9p000328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:53:35 splunk3 sendmail[570]: n2VKrZxs000570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:54:35 splunk3 sendmail[805]: n2VKsZ6q000805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:55:11 splunk3 sendmail[955]: n2VKtBVf000955: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312055.n2VKtBrJ025888@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 13:55:11 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55825
|
|
Mar 31 13:55:11 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 13:55:11 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 13:55:11 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 13:55:11 splunk3 spamd[12510]: spamd: processing message <200903312055.n2VKtBrJ025888@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 13:55:13 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 13:55:13 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55825,mid=<200903312055.n2VKtBrJ025888@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 13:55:13 splunk3 sendmail[956]: n2VKtBVf000955: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 13:55:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 13:55:35 splunk3 sendmail[1058]: n2VKtZgH001058: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:56:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 13:56:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 13:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 13:56:35 splunk3 sendmail[1300]: n2VKuZb8001300: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:57:35 splunk3 sendmail[1542]: n2VKvZ3g001542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:58:35 splunk3 sendmail[1777]: n2VKwZfT001777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 13:59:35 splunk3 sendmail[2016]: n2VKxZ3j002016: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:00:03 splunk3 sendmail[2186]: n2VL02V9002186: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200903312100.n2VL02V9002186@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 14:00:03 splunk3 sendmail[2188]: n2VL02V9002186: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 14:00:03 splunk3 sendmail[2188]: n2VL02V9002186: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 31 14:00:03 splunk3 sendmail[2188]: n2VL02V9002186: n2VL03V9002188: postmaster notify: User unknown
|
|
Mar 31 14:00:04 splunk3 sendmail[2188]: n2VL03V9002188: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:00:04 splunk3 sendmail[2227]: n2VL04dD002227: from=root, size=291, class=0, nrcpts=1, msgid=<200903312100.n2VL04dD002227@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 14:00:04 splunk3 sendmail[2231]: n2VL04bm002231: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903312100.n2VL04dD002227@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 14:00:04 splunk3 sendmail[2227]: n2VL04dD002227: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VL04bm002231 Message accepted for delivery)
|
|
Mar 31 14:00:06 splunk3 sendmail[2232]: n2VL04bm002231: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:00:12 splunk3 sendmail[2256]: n2VL0B1u002256: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312100.n2VL0BSQ026526@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:00:12 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55889
|
|
Mar 31 14:00:12 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:00:12 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 14:00:12 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 14:00:12 splunk3 sendmail[2257]: n2VL0B1u002256: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:00:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:00:35 splunk3 sendmail[2356]: n2VL0Zav002356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:01:04 splunk3 sendmail[2465]: n2VL11Up002465: from=root, size=443, class=0, nrcpts=1, msgid=<200903312101.n2VL11Up002465@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 14:01:04 splunk3 sendmail[2471]: n2VL14NL002471: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903312101.n2VL11Up002465@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 14:01:04 splunk3 sendmail[2465]: n2VL11Up002465: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VL14NL002471 Message accepted for delivery)
|
|
Mar 31 14:01:05 splunk3 sendmail[2472]: n2VL14NL002471: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:01:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:01:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:01:35 splunk3 sendmail[2621]: n2VL1ZBD002621: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:02:35 splunk3 sendmail[2868]: n2VL2ZCw002868: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:03:35 splunk3 sendmail[3117]: n2VL3ZjF003117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:04:35 splunk3 sendmail[3356]: n2VL4Zfd003356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:05:12 splunk3 sendmail[3507]: n2VL5C4f003507: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312105.n2VL5ClR027211@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:05:12 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55945
|
|
Mar 31 14:05:12 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:05:12 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 14:05:12 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 14:05:12 splunk3 sendmail[3508]: n2VL5C4f003507: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:05:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:05:35 splunk3 sendmail[3627]: n2VL5Z9C003627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:06:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:06:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:06:35 splunk3 sendmail[3879]: n2VL6Z9n003879: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:07:35 splunk3 sendmail[4131]: n2VL7Z5l004131: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:08:35 splunk3 sendmail[4386]: n2VL8Zd7004386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:09:35 splunk3 sendmail[4627]: n2VL9ZBJ004627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:10:02 splunk3 sendmail[4822]: n2VLA2ja004822: from=root, size=292, class=0, nrcpts=1, msgid=<200903312110.n2VLA2ja004822@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 14:10:02 splunk3 sendmail[4827]: n2VLA2Ep004827: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903312110.n2VLA2ja004822@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 14:10:02 splunk3 sendmail[4822]: n2VLA2ja004822: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VLA2Ep004827 Message accepted for delivery)
|
|
Mar 31 14:10:03 splunk3 sendmail[4828]: n2VLA2Ep004827: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:10:13 splunk3 sendmail[4887]: n2VLAD56004887: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312110.n2VLACWn027819@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:10:13 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56002
|
|
Mar 31 14:10:13 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:10:13 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:10:13 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:10:13 splunk3 spamd[12510]: spamd: processing message <200903312110.n2VLACWn027819@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:10:15 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 14:10:15 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56002,mid=<200903312110.n2VLACWn027819@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 14:10:15 splunk3 sendmail[4888]: n2VLAD56004887: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:10:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:10:35 splunk3 sendmail[4994]: n2VLAZ3x004994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:11:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:11:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 14:11:35 splunk3 sendmail[5277]: n2VLBZDY005277: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:12:35 splunk3 sendmail[5517]: n2VLCZs5005517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:13:35 splunk3 sendmail[5753]: n2VLDZsq005753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:14:35 splunk3 sendmail[5988]: n2VLEZiW005988: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:15:13 splunk3 sendmail[6142]: n2VLFD3u006142: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312115.n2VLFDJn028623@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:15:13 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56059
|
|
Mar 31 14:15:13 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:15:13 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:15:13 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:15:13 splunk3 spamd[12510]: spamd: processing message <200903312115.n2VLFDJn028623@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:15:16 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 31 14:15:16 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56059,mid=<200903312115.n2VLFDJn028623@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 14:15:16 splunk3 sendmail[6143]: n2VLFD3u006142: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:15:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:15:35 splunk3 sendmail[6244]: n2VLFZec006244: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:16:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:16:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:16:35 splunk3 sendmail[6487]: n2VLGZpO006487: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:17:35 splunk3 sendmail[6726]: n2VLHZLU006726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:18:35 splunk3 sendmail[6963]: n2VLIZMt006963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:19:35 splunk3 sendmail[7201]: n2VLJZSX007201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:20:14 splunk3 sendmail[7354]: n2VLKEPC007354: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312120.n2VLKDxA029252@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:20:14 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56114
|
|
Mar 31 14:20:14 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:20:14 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:20:14 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:20:14 splunk3 spamd[12510]: spamd: processing message <200903312120.n2VLKDxA029252@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:20:16 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 14:20:16 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56114,mid=<200903312120.n2VLKDxA029252@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 14:20:16 splunk3 sendmail[7371]: n2VLKEPC007354: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:20:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:20:35 splunk3 sendmail[7454]: n2VLKZoH007454: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:21:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:21:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:21:35 splunk3 sendmail[7712]: n2VLLZIA007712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:22:35 splunk3 sendmail[7950]: n2VLMZuL007950: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:23:35 splunk3 sendmail[8191]: n2VLNZS5008191: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:24:35 splunk3 sendmail[8424]: n2VLOZK6008424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:25:14 splunk3 sendmail[8593]: n2VLPEXI008593: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312125.n2VLPEO1029857@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:25:14 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56170
|
|
Mar 31 14:25:14 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:25:14 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:25:14 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:25:14 splunk3 spamd[12510]: spamd: processing message <200903312125.n2VLPEO1029857@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:25:16 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 14:25:16 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56170,mid=<200903312125.n2VLPEO1029857@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 14:25:16 splunk3 sendmail[8594]: n2VLPEXI008593: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:25:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:25:35 splunk3 sendmail[8678]: n2VLPZpR008678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:26:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:26:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 14:26:35 splunk3 sendmail[8921]: n2VLQZHB008921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:27:35 splunk3 sendmail[9158]: n2VLRZW8009158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:28:35 splunk3 sendmail[9392]: n2VLSZag009392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:29:35 splunk3 sendmail[9641]: n2VLTZwo009641: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:30:15 splunk3 sendmail[9811]: n2VLUEan009811: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312130.n2VLUE4H030473@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:30:15 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56226
|
|
Mar 31 14:30:15 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:30:15 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:30:15 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:30:15 splunk3 spamd[12510]: spamd: processing message <200903312130.n2VLUE4H030473@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:30:17 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1311 bytes.
|
|
Mar 31 14:30:17 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56226,mid=<200903312130.n2VLUE4H030473@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 14:30:17 splunk3 sendmail[9812]: n2VLUEan009811: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:30:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:30:35 splunk3 sendmail[9897]: n2VLUZjs009897: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:31:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:31:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:31:35 splunk3 sendmail[10144]: n2VLVZsV010144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:32:35 splunk3 sendmail[10381]: n2VLWZSS010381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:33:35 splunk3 sendmail[10620]: n2VLXZAr010620: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:34:35 splunk3 sendmail[10852]: n2VLYZ5o010852: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:35:15 splunk3 sendmail[11022]: n2VLZFhK011022: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312135.n2VLZFG9031225@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:35:15 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56282
|
|
Mar 31 14:35:15 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:35:15 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:35:15 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:35:15 splunk3 spamd[12510]: spamd: processing message <200903312135.n2VLZFG9031225@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:35:17 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1311 bytes.
|
|
Mar 31 14:35:17 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56282,mid=<200903312135.n2VLZFG9031225@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 14:35:17 splunk3 sendmail[11023]: n2VLZFhK011022: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:35:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:35:35 splunk3 sendmail[11106]: n2VLZZ1p011106: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:36:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:36:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:36:35 splunk3 sendmail[11351]: n2VLaZ9o011351: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:37:35 splunk3 sendmail[11591]: n2VLbZus011591: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:38:35 splunk3 sendmail[11829]: n2VLcZfm011829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:39:36 splunk3 sendmail[12071]: n2VLdaoY012071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:40:16 splunk3 sendmail[12240]: n2VLeGfR012240: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312140.n2VLeFrR031857@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:40:16 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56337
|
|
Mar 31 14:40:16 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:40:16 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:40:16 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:40:16 splunk3 spamd[12510]: spamd: processing message <200903312140.n2VLeFrR031857@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:40:18 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 14:40:18 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56337,mid=<200903312140.n2VLeFrR031857@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 14:40:18 splunk3 sendmail[12241]: n2VLeGfR012240: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:40:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:40:36 splunk3 sendmail[12324]: n2VLeajj012324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:41:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:41:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 14:41:36 splunk3 sendmail[12570]: n2VLfaVD012570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:42:36 splunk3 sendmail[12807]: n2VLgaWp012807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:43:36 splunk3 sendmail[13046]: n2VLha7F013046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:44:36 splunk3 sendmail[13308]: n2VLiae0013308: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:45:16 splunk3 sendmail[13489]: n2VLjGlG013489: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312145.n2VLjGYY032469@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:45:16 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56394
|
|
Mar 31 14:45:16 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:45:16 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:45:16 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:45:16 splunk3 spamd[12510]: spamd: processing message <200903312145.n2VLjGYY032469@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:45:18 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 14:45:18 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56394,mid=<200903312145.n2VLjGYY032469@virt2.int.splunk.com>,bayes=0.112817231288007,autolearn=no
|
|
Mar 31 14:45:18 splunk3 sendmail[13490]: n2VLjGlG013489: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:45:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:45:36 splunk3 sendmail[13574]: n2VLjaIJ013574: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:46:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:46:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:46:36 splunk3 sendmail[13818]: n2VLkaG9013818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:47:36 splunk3 sendmail[14056]: n2VLla5R014056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:48:36 splunk3 sendmail[14289]: n2VLma0W014289: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:49:36 splunk3 sendmail[14528]: n2VLnaiF014528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:50:17 splunk3 sendmail[14701]: n2VLoGPX014701: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200903312150.n2VLoGTs000623@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:50:17 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56449
|
|
Mar 31 14:50:17 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:50:17 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:50:17 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:50:17 splunk3 spamd[12510]: spamd: processing message <200903312150.n2VLoGTs000623@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:50:19 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1305 bytes.
|
|
Mar 31 14:50:19 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56449,mid=<200903312150.n2VLoGTs000623@virt2.int.splunk.com>,bayes=0.0667265220452132,autolearn=no
|
|
Mar 31 14:50:19 splunk3 sendmail[14702]: n2VLoGPX014701: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:50:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:50:36 splunk3 sendmail[14785]: n2VLoaXo014785: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:51:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:51:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:51:36 splunk3 sendmail[15033]: n2VLpaLY015033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:52:36 splunk3 sendmail[15268]: n2VLqaSb015268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:53:36 splunk3 sendmail[15512]: n2VLrapp015512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:54:36 splunk3 sendmail[15747]: n2VLsawG015747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:55:17 splunk3 sendmail[15918]: n2VLtHDJ015918: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312155.n2VLtHX9001237@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 14:55:17 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56505
|
|
Mar 31 14:55:17 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 14:55:17 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 14:55:17 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 14:55:17 splunk3 spamd[12510]: spamd: processing message <200903312155.n2VLtHX9001237@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 14:55:19 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 31 14:55:19 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56505,mid=<200903312155.n2VLtHX9001237@virt2.int.splunk.com>,bayes=0.169830906147112,autolearn=no
|
|
Mar 31 14:55:19 splunk3 sendmail[15919]: n2VLtHDJ015918: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 14:55:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 14:55:36 splunk3 sendmail[15998]: n2VLtaEW015998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:56:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 14:56:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 14:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 14:56:36 splunk3 sendmail[16242]: n2VLuaU2016242: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:57:36 splunk3 sendmail[16484]: n2VLva7p016484: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:58:36 splunk3 sendmail[16718]: n2VLwah1016718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 14:59:36 splunk3 sendmail[16955]: n2VLxaQl016955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:00:04 splunk3 sendmail[17137]: n2VM04cv017137: from=root, size=291, class=0, nrcpts=1, msgid=<200903312200.n2VM04cv017137@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 15:00:04 splunk3 sendmail[17141]: n2VM04xX017141: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903312200.n2VM04cv017137@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 15:00:04 splunk3 sendmail[17137]: n2VM04cv017137: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VM04xX017141 Message accepted for delivery)
|
|
Mar 31 15:00:05 splunk3 sendmail[17142]: n2VM04xX017141: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:00:08 splunk3 sendmail[17159]: n2VM08QL017159: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903312200.n2VM08QL017159@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 15:00:08 splunk3 sendmail[17161]: n2VM08QL017159: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 15:00:08 splunk3 sendmail[17161]: n2VM08QL017159: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 15:00:08 splunk3 sendmail[17161]: n2VM08QL017159: n2VM08QL017161: postmaster notify: User unknown
|
|
Mar 31 15:00:10 splunk3 sendmail[17161]: n2VM08QL017161: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:00:18 splunk3 sendmail[17213]: n2VM0IEU017213: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312200.n2VM0HGI001904@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:00:18 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56570
|
|
Mar 31 15:00:18 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:00:18 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 15:00:18 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 15:00:18 splunk3 sendmail[17214]: n2VM0IEU017213: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:00:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:00:36 splunk3 sendmail[17298]: n2VM0a9N017298: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:01:01 splunk3 sendmail[17402]: n2VM11Jw017402: from=root, size=443, class=0, nrcpts=1, msgid=<200903312201.n2VM11Jw017402@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 15:01:01 splunk3 sendmail[17406]: n2VM11NF017406: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903312201.n2VM11Jw017402@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 15:01:01 splunk3 sendmail[17402]: n2VM11Jw017402: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VM11NF017406 Message accepted for delivery)
|
|
Mar 31 15:01:05 splunk3 sendmail[17407]: n2VM11NF017406: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:04, xdelay=00:00:04, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:01:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:01:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:01:36 splunk3 sendmail[17557]: n2VM1auI017557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:02:36 splunk3 sendmail[17789]: n2VM2ajo017789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:03:36 splunk3 sendmail[18029]: n2VM3a4g018029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:04:36 splunk3 sendmail[18265]: n2VM4aRt018265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:05:18 splunk3 sendmail[18452]: n2VM5I2t018452: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312205.n2VM5I4n002599@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:05:18 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56626
|
|
Mar 31 15:05:18 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:05:18 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 15:05:18 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 15:05:18 splunk3 sendmail[18453]: n2VM5I2t018452: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:05:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:05:36 splunk3 sendmail[18518]: n2VM5aNQ018518: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:06:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:06:18 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:06:36 splunk3 sendmail[18761]: n2VM6aL2018761: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:07:36 splunk3 sendmail[19002]: n2VM7aSl019002: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:08:36 splunk3 sendmail[19240]: n2VM8aAg019240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:09:36 splunk3 sendmail[19480]: n2VM9adL019480: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:10:02 splunk3 sendmail[19679]: n2VMA2f1019679: from=root, size=292, class=0, nrcpts=1, msgid=<200903312210.n2VMA2f1019679@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 15:10:02 splunk3 sendmail[19684]: n2VMA2iv019684: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903312210.n2VMA2f1019679@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 15:10:02 splunk3 sendmail[19679]: n2VMA2f1019679: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VMA2iv019684 Message accepted for delivery)
|
|
Mar 31 15:10:03 splunk3 sendmail[19685]: n2VMA2iv019684: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:10:21 splunk3 sendmail[19777]: n2VMALG9019777: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312210.n2VMAJjL003216@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:10:21 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56683
|
|
Mar 31 15:10:21 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:10:21 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:10:21 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:10:21 splunk3 spamd[12510]: spamd: processing message <200903312210.n2VMAJjL003216@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:10:24 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 15:10:24 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56683,mid=<200903312210.n2VMAJjL003216@virt2.int.splunk.com>,bayes=0.169830906147112,autolearn=no
|
|
Mar 31 15:10:24 splunk3 sendmail[19778]: n2VMALG9019777: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:10:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:10:36 splunk3 sendmail[19840]: n2VMAadr019840: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:11:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:11:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 15:11:36 splunk3 sendmail[20089]: n2VMBaTC020089: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:12:36 splunk3 sendmail[20326]: n2VMCaRZ020326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:13:36 splunk3 sendmail[20569]: n2VMDaxa020569: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:14:36 splunk3 sendmail[20805]: n2VMEaok020805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:15:22 splunk3 sendmail[20992]: n2VMFMg4020992: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312215.n2VMFLmc004022@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:15:22 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56739
|
|
Mar 31 15:15:22 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:15:22 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:15:22 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:15:22 splunk3 spamd[12510]: spamd: processing message <200903312215.n2VMFLmc004022@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:15:24 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Mar 31 15:15:24 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56739,mid=<200903312215.n2VMFLmc004022@virt2.int.splunk.com>,bayes=0.169830906147112,autolearn=no
|
|
Mar 31 15:15:24 splunk3 sendmail[20993]: n2VMFMg4020992: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:15:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:15:36 splunk3 sendmail[21060]: n2VMFapR021060: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:16:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:16:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:16:36 splunk3 sendmail[21300]: n2VMGaYs021300: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:17:36 splunk3 sendmail[21540]: n2VMHatN021540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:18:36 splunk3 sendmail[21776]: n2VMIapp021776: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:19:36 splunk3 sendmail[22015]: n2VMJaom022015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:20:23 splunk3 sendmail[22204]: n2VMKN3E022204: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312220.n2VMKMgd004660@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:20:23 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56795
|
|
Mar 31 15:20:23 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:20:23 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:20:23 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:20:23 splunk3 spamd[12510]: spamd: processing message <200903312220.n2VMKMgd004660@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:20:25 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 15:20:25 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56795,mid=<200903312220.n2VMKMgd004660@virt2.int.splunk.com>,bayes=0.169830906147112,autolearn=no
|
|
Mar 31 15:20:25 splunk3 sendmail[22205]: n2VMKN3E022204: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:20:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:20:36 splunk3 sendmail[22269]: n2VMKaYq022269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:21:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:21:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:21:36 splunk3 sendmail[22517]: n2VMLa3R022517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:22:36 splunk3 sendmail[22751]: n2VMMa2m022751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:23:36 splunk3 sendmail[22992]: n2VMNa1D022992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:24:36 splunk3 sendmail[23228]: n2VMOaHv023228: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:25:24 splunk3 sendmail[23439]: n2VMPOw3023439: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312225.n2VMPN4m005268@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:25:24 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56851
|
|
Mar 31 15:25:24 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:25:24 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:25:24 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:25:24 splunk3 spamd[12510]: spamd: processing message <200903312225.n2VMPN4m005268@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:25:26 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 15:25:26 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56851,mid=<200903312225.n2VMPN4m005268@virt2.int.splunk.com>,bayes=0.169830906147112,autolearn=no
|
|
Mar 31 15:25:26 splunk3 sendmail[23440]: n2VMPOw3023439: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:25:36 splunk3 sendmail[23482]: n2VMPaOT023482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:26:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:26:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 15:26:36 splunk3 sendmail[23726]: n2VMQaEF023726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:27:36 splunk3 sendmail[23965]: n2VMRaTj023965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:28:36 splunk3 sendmail[24201]: n2VMSaF3024201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:29:36 splunk3 sendmail[24439]: n2VMTagB024439: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:30:24 splunk3 sendmail[24649]: n2VMUOWe024649: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312230.n2VMUOw1005894@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:30:24 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56907
|
|
Mar 31 15:30:24 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:30:24 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:30:24 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:30:24 splunk3 spamd[12510]: spamd: processing message <200903312230.n2VMUOw1005894@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:30:26 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Mar 31 15:30:26 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56907,mid=<200903312230.n2VMUOw1005894@virt2.int.splunk.com>,bayes=0.169830906147112,autolearn=no
|
|
Mar 31 15:30:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:30:26 splunk3 sendmail[24650]: n2VMUOWe024649: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:30:36 splunk3 sendmail[24692]: n2VMUacT024692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:31:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:31:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:31:36 splunk3 sendmail[24939]: n2VMVa3D024939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:32:36 splunk3 sendmail[25175]: n2VMWa1S025175: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:33:36 splunk3 sendmail[25414]: n2VMXanC025414: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:33:50 splunk3 sendmail[25469]: n2VMXoSR025469: from=<3TprSSRQKBgUlttlqjfqjwyx-stwjuq3lttlqj.htrxufrrjxuqzspny.htr@alerts.bounces.google.com>, size=2742, class=0, nrcpts=1, msgid=<0016369fa25102a979046671cb06@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 31 15:33:50 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56941
|
|
Mar 31 15:33:50 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:33:50 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:33:50 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:33:50 splunk3 spamd[12510]: spamd: processing message <0016369fa25102a979046671cb06@google.com> for spamme:501
|
|
Mar 31 15:33:53 splunk3 spamd[12510]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.4 seconds, 3177 bytes.
|
|
Mar 31 15:33:53 splunk3 spamd[12510]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.4,size=3177,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56941,mid=<0016369fa25102a979046671cb06@google.com>,bayes=0,autolearn=ham
|
|
Mar 31 15:33:53 splunk3 sendmail[25471]: n2VMXoSR025469: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=32958, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:33:53 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:34:11 splunk3 sendmail[25553]: n2VMYAkP025553: from=<spammatidate@ciccio.it>, size=11758, class=0, nrcpts=1, msgid=<20090331-33409.11112.qmail@amerblind.outbound.ed10.com>, proto=SMTP, daemon=MTA, relay=[209.111.85.162]
|
|
Mar 31 15:34:11 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56947
|
|
Mar 31 15:34:11 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:34:11 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:34:11 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:34:11 splunk3 spamd[12510]: spamd: processing message <20090331-33409.11112.qmail@amerblind.outbound.ed10.com> for spamme:501
|
|
Mar 31 15:34:13 splunk3 spamd[12510]: spamd: identified spam (24.6/5.0) for spamme:501 in 2.0 seconds, 12044 bytes.
|
|
Mar 31 15:34:13 splunk3 spamd[12510]: spamd: result: Y 24 - BAYES_95,DATE_IN_PAST_06_12,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_TAGS,HTML_90_100,HTML_MESSAGE,RCVD_IN_XBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL scantime=2.0,size=12044,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56947,mid=<20090331-33409.11112.qmail@amerblind.outbound.ed10.com>,bayes=0.987945506842758,autolearn=spam
|
|
Mar 31 15:34:13 splunk3 sendmail[25556]: n2VMYAkP025553: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=41954, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:34:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:34:36 splunk3 sendmail[25659]: n2VMYapD025659: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:35:25 splunk3 sendmail[25868]: n2VMZPsC025868: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312235.n2VMZPYT006638@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:35:25 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56965
|
|
Mar 31 15:35:25 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:35:25 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:35:25 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:35:25 splunk3 spamd[12510]: spamd: processing message <200903312235.n2VMZPYT006638@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:35:27 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 31 15:35:27 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56965,mid=<200903312235.n2VMZPYT006638@virt2.int.splunk.com>,bayes=0.169863621943467,autolearn=no
|
|
Mar 31 15:35:27 splunk3 sendmail[25869]: n2VMZPsC025868: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:35:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:35:36 splunk3 sendmail[25913]: n2VMZa1T025913: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:36:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:36:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:36:36 splunk3 sendmail[26156]: n2VMaa4e026156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:37:36 splunk3 sendmail[26392]: n2VMbarm026392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:38:36 splunk3 sendmail[26632]: n2VMcac7026632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:38:53 splunk3 sendmail[26692]: n2VMcrki026692: from=<3fZvSSRQKBjUXffXcVRcVikj-efiVgcpXffXcV.TfdjgRddVjgclebZk.Tfd@alerts.bounces.google.com>, size=12174, class=0, nrcpts=1, msgid=<00163698966f10f903046671ddf6@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Mar 31 15:38:53 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56999
|
|
Mar 31 15:38:53 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:38:53 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:38:53 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:38:53 splunk3 spamd[12510]: spamd: processing message <00163698966f10f903046671ddf6@google.com> for spamme:501
|
|
Mar 31 15:38:55 splunk3 spamd[12510]: spamd: clean message (-1.3/5.0) for spamme:501 in 2.0 seconds, 12609 bytes.
|
|
Mar 31 15:38:55 splunk3 spamd[12510]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=2.0,size=12609,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56999,mid=<00163698966f10f903046671ddf6@google.com>,bayes=0,autolearn=no
|
|
Mar 31 15:38:55 splunk3 sendmail[26713]: n2VMcrki026692: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=42390, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:38:55 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:39:36 splunk3 sendmail[26879]: n2VMdaV7026879: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:40:26 splunk3 sendmail[27091]: n2VMePD1027091: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312240.n2VMePCe007274@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:40:26 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57021
|
|
Mar 31 15:40:26 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:40:26 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:40:26 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:40:26 splunk3 spamd[12510]: spamd: processing message <200903312240.n2VMePCe007274@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:40:28 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 15:40:28 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57021,mid=<200903312240.n2VMePCe007274@virt2.int.splunk.com>,bayes=0.169863621943467,autolearn=no
|
|
Mar 31 15:40:28 splunk3 sendmail[27092]: n2VMePD1027091: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:40:36 splunk3 sendmail[27136]: n2VMeag8027136: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:41:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:41:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 15:41:36 splunk3 sendmail[27383]: n2VMfaMx027383: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:42:36 splunk3 sendmail[27621]: n2VMganf027621: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:43:36 splunk3 sendmail[27860]: n2VMhahh027860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:43:39 splunk3 sendmail[27839]: n2VMhZjM027839: from=<spamme@splunkit.com>, size=2750, class=0, nrcpts=1, msgid=<200903312243.n2VMhZjM027839@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=20129191224.user.veloxzone.com.br [201.29.191.224] (may be forged)
|
|
Mar 31 15:43:39 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57055
|
|
Mar 31 15:43:39 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:43:39 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:43:39 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:43:39 splunk3 spamd[12510]: spamd: processing message <200903312243.n2VMhZjM027839@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 15:43:41 splunk3 spamd[12510]: spamd: identified spam (25.0/5.0) for spamme:501 in 1.8 seconds, 3170 bytes.
|
|
Mar 31 15:43:41 splunk3 spamd[12510]: spamd: result: Y 24 - AWL,BAYES_99,FORGED_RCVD_HELO,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.8,size=3170,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57055,mid=<200903312243.n2VMhZjM027839@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 31 15:43:41 splunk3 sendmail[27879]: n2VMhZjM027839: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33092, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:43:41 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:44:36 splunk3 sendmail[28096]: n2VMiar8028096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:45:28 splunk3 sendmail[28325]: n2VMjSY2028325: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312245.n2VMjQbx007883@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:45:28 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57079
|
|
Mar 31 15:45:28 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:45:28 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:45:28 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:45:28 splunk3 spamd[12510]: spamd: processing message <200903312245.n2VMjQbx007883@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:45:30 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 31 15:45:30 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57079,mid=<200903312245.n2VMjQbx007883@virt2.int.splunk.com>,bayes=0.169854765386539,autolearn=no
|
|
Mar 31 15:45:30 splunk3 sendmail[28326]: n2VMjSY2028325: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:45:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:45:36 splunk3 sendmail[28350]: n2VMjaiv028350: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:46:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:46:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:46:36 splunk3 sendmail[28594]: n2VMkaB5028594: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:47:36 splunk3 sendmail[28834]: n2VMlaHw028834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:48:36 splunk3 sendmail[29068]: n2VMmatI029068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:49:36 splunk3 sendmail[29306]: n2VMnaBC029306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:50:29 splunk3 sendmail[29535]: n2VMoTlh029535: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312250.n2VMoTba008501@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:50:29 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57135
|
|
Mar 31 15:50:29 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:50:29 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:50:29 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:50:29 splunk3 spamd[12510]: spamd: processing message <200903312250.n2VMoTba008501@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:50:31 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 31 15:50:31 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57135,mid=<200903312250.n2VMoTba008501@virt2.int.splunk.com>,bayes=0.169854765386539,autolearn=no
|
|
Mar 31 15:50:31 splunk3 sendmail[29536]: n2VMoTlh029535: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:50:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:50:36 splunk3 sendmail[29562]: n2VMoaAL029562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:51:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:51:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:51:36 splunk3 sendmail[29807]: n2VMpadF029807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:52:36 splunk3 sendmail[30042]: n2VMqaKO030042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:53:36 splunk3 sendmail[30286]: n2VMraYh030286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:54:36 splunk3 sendmail[30522]: n2VMsaSL030522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:55:30 splunk3 sendmail[30751]: n2VMtU7i030751: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312255.n2VMtTkd009129@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 15:55:30 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57190
|
|
Mar 31 15:55:30 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:55:30 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:55:30 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:55:30 splunk3 spamd[12510]: spamd: processing message <200903312255.n2VMtTkd009129@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 15:55:32 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Mar 31 15:55:32 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57190,mid=<200903312255.n2VMtTkd009129@virt2.int.splunk.com>,bayes=0.169854765386539,autolearn=no
|
|
Mar 31 15:55:32 splunk3 sendmail[30752]: n2VMtU7i030751: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:55:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:55:36 splunk3 sendmail[30775]: n2VMtaNt030775: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:56:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 15:56:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 15:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 15:56:36 splunk3 sendmail[31020]: n2VMuaum031020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:57:36 splunk3 sendmail[31259]: n2VMvas9031259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:58:07 splunk3 sendmail[31373]: n2VMw610031373: from=<explorationlotto@aim.com>, size=2063, class=0, nrcpts=1, msgid=<20090331231040.75095B9BF@gate1.novo-farm.com.ua>, proto=ESMTP, daemon=MTA, relay=relay01.kiev.sovam.com [62.64.120.200]
|
|
Mar 31 15:58:07 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57217
|
|
Mar 31 15:58:07 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 15:58:07 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 15:58:07 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 15:58:07 splunk3 spamd[12510]: spamd: processing message <20090331231040.75095B9BF@gate1.novo-farm.com.ua> for spamme:501
|
|
Mar 31 15:58:08 splunk3 spamd[12510]: spamd: identified spam (14.1/5.0) for spamme:501 in 1.5 seconds, 2369 bytes.
|
|
Mar 31 15:58:08 splunk3 spamd[12510]: spamd: result: Y 14 - BAYES_99,FORGED_MUA_OUTLOOK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SBL,SUBJ_ALL_CAPS,UNDISC_RECIPS scantime=1.5,size=2369,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57217,mid=<20090331231040.75095B9BF@gate1.novo-farm.com.ua>,bayes=0.999677478253728,autolearn=no
|
|
Mar 31 15:58:08 splunk3 sendmail[31376]: n2VMw610031373: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:01, mailer=local, pri=32271, dsn=2.0.0, stat=Sent
|
|
Mar 31 15:58:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 15:58:36 splunk3 sendmail[31498]: n2VMwaaq031498: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 15:59:36 splunk3 sendmail[31737]: n2VMxatc031737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:00:00 splunk3 sendmail[31834]: n2VN005f031834: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200903312300.n2VN000x009649@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:00:00 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57236
|
|
Mar 31 16:00:00 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:00:00 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:00:00 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:00:00 splunk3 spamd[12510]: spamd: processing message <200903312300.n2VN000x009649@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:00:02 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 31 16:00:02 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57236,mid=<200903312300.n2VN000x009649@virt2.int.splunk.com>,bayes=0.169854765386539,autolearn=no
|
|
Mar 31 16:00:02 splunk3 sendmail[31835]: n2VN005f031834: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:00:04 splunk3 sendmail[31925]: n2VN0495031925: from=root, size=291, class=0, nrcpts=1, msgid=<200903312300.n2VN0495031925@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 16:00:04 splunk3 sendmail[31929]: n2VN04GX031929: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200903312300.n2VN0495031925@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 16:00:04 splunk3 sendmail[31925]: n2VN0495031925: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VN04GX031929 Message accepted for delivery)
|
|
Mar 31 16:00:05 splunk3 sendmail[31930]: n2VN04GX031929: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:00:14 splunk3 sendmail[31983]: n2VN0EXj031983: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200903312300.n2VN0EXj031983@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 16:00:14 splunk3 sendmail[31985]: n2VN0EXj031983: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 16:00:14 splunk3 sendmail[31985]: n2VN0EXj031983: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 16:00:14 splunk3 sendmail[31985]: n2VN0EXj031983: n2VN0EXj031985: postmaster notify: User unknown
|
|
Mar 31 16:00:15 splunk3 sendmail[31985]: n2VN0EXj031985: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:00:36 splunk3 sendmail[32078]: n2VN0aqP032078: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:01:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:01:14 splunk3 sendmail[32182]: n2VN11XP032182: from=root, size=443, class=0, nrcpts=1, msgid=<200903312301.n2VN11XP032182@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 16:01:14 splunk3 sendmail[32250]: n2VN1Ele032250: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200903312301.n2VN11XP032182@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 16:01:14 splunk3 sendmail[32182]: n2VN11XP032182: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VN1Ele032250 Message accepted for delivery)
|
|
Mar 31 16:01:16 splunk3 sendmail[32251]: n2VN1Ele032250: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:01:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:01:36 splunk3 sendmail[32338]: n2VN1aWc032338: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:02:36 splunk3 sendmail[32573]: n2VN2aYX032573: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:03:31 splunk3 sendmail[308]: n2VN3RuV000308: from=<ranaqdumm@bpay.com.au>, size=1006, class=0, nrcpts=1, msgid=<01c9b26e$0d890500$fb77635e@ranaqdumm>, proto=ESMTP, daemon=MTA, relay=94.99.119.251.dynamic.saudi.net.sa [94.99.119.251] (may be forged)
|
|
Mar 31 16:03:31 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57287
|
|
Mar 31 16:03:31 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:03:31 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 16:03:31 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 16:03:31 splunk3 sendmail[326]: n2VN3RuV000308: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31259, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:03:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:03:36 splunk3 sendmail[352]: n2VN3a8B000352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:04:36 splunk3 sendmail[584]: n2VN4a5m000584: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:05:00 splunk3 sendmail[686]: n2VN50eF000686: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312305.n2VN50xb010350@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:05:00 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57302
|
|
Mar 31 16:05:00 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:05:00 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 16:05:00 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 16:05:00 splunk3 sendmail[687]: n2VN50eF000686: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:05:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:05:36 splunk3 sendmail[833]: n2VN5a1J000833: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:06:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:06:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:06:36 splunk3 sendmail[1077]: n2VN6aPg001077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:07:36 splunk3 sendmail[1317]: n2VN7aB4001317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:08:36 splunk3 sendmail[1558]: n2VN8awG001558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:09:36 splunk3 sendmail[1800]: n2VN9ahe001800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:10:01 splunk3 sendmail[1986]: n2VNA16M001986: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312310.n2VNA1wA010963@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:10:01 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57357
|
|
Mar 31 16:10:01 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:10:01 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:10:01 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:10:01 splunk3 spamd[12510]: spamd: processing message <200903312310.n2VNA1wA010963@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:10:02 splunk3 sendmail[2005]: n2VNA2Qr002005: from=root, size=292, class=0, nrcpts=1, msgid=<200903312310.n2VNA2Qr002005@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 16:10:02 splunk3 sendmail[2010]: n2VNA2tK002010: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200903312310.n2VNA2Qr002005@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 16:10:02 splunk3 sendmail[2005]: n2VNA2Qr002005: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n2VNA2tK002010 Message accepted for delivery)
|
|
Mar 31 16:10:03 splunk3 sendmail[2011]: n2VNA2tK002010: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:10:03 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 16:10:03 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57357,mid=<200903312310.n2VNA1wA010963@virt2.int.splunk.com>,bayes=0.112837606237735,autolearn=no
|
|
Mar 31 16:10:03 splunk3 sendmail[1996]: n2VNA16M001986: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:10:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:10:36 splunk3 sendmail[2162]: n2VNAaHG002162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:11:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:11:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 16:11:36 splunk3 sendmail[2406]: n2VNBa2Z002406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:12:36 splunk3 sendmail[2648]: n2VNCaYa002648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:13:36 splunk3 sendmail[2898]: n2VNDaNW002898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:14:36 splunk3 sendmail[3142]: n2VNEabI003142: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:15:01 splunk3 sendmail[3245]: n2VNF1mn003245: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312315.n2VNF1Dg011766@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:15:01 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57415
|
|
Mar 31 16:15:01 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:15:01 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:15:01 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:15:01 splunk3 spamd[12510]: spamd: processing message <200903312315.n2VNF1Dg011766@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:15:03 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 16:15:03 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57415,mid=<200903312315.n2VNF1Dg011766@virt2.int.splunk.com>,bayes=0.112837606237735,autolearn=no
|
|
Mar 31 16:15:03 splunk3 sendmail[3246]: n2VNF1mn003245: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:15:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:15:36 splunk3 sendmail[3399]: n2VNFaVG003399: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:16:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:16:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:16:36 splunk3 sendmail[3662]: n2VNGal5003662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:17:36 splunk3 sendmail[3913]: n2VNHajb003913: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:18:36 splunk3 sendmail[4159]: n2VNIaPP004159: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:19:36 splunk3 sendmail[4413]: n2VNJam6004413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:20:02 splunk3 sendmail[4521]: n2VNK28L004521: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312320.n2VNK1Jr012401@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:20:02 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57470
|
|
Mar 31 16:20:02 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:20:02 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:20:02 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:20:02 splunk3 spamd[12510]: spamd: processing message <200903312320.n2VNK1Jr012401@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:20:04 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 16:20:04 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57470,mid=<200903312320.n2VNK1Jr012401@virt2.int.splunk.com>,bayes=0.112837606237735,autolearn=no
|
|
Mar 31 16:20:04 splunk3 sendmail[4522]: n2VNK28L004521: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:20:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:20:36 splunk3 sendmail[4671]: n2VNKa6t004671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:21:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:21:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:21:36 splunk3 sendmail[4928]: n2VNLarl004928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:22:36 splunk3 sendmail[5201]: n2VNMaOs005201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:23:36 splunk3 sendmail[5448]: n2VNNaQW005448: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:24:36 splunk3 sendmail[5684]: n2VNOaW4005684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:25:06 splunk3 sendmail[5802]: n2VNP6CZ005802: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312325.n2VNP2ln013050@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:25:06 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57526
|
|
Mar 31 16:25:06 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:25:06 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:25:06 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:25:06 splunk3 spamd[12510]: spamd: processing message <200903312325.n2VNP2ln013050@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:25:08 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 16:25:08 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57526,mid=<200903312325.n2VNP2ln013050@virt2.int.splunk.com>,bayes=0.112837606237735,autolearn=no
|
|
Mar 31 16:25:08 splunk3 sendmail[5803]: n2VNP6CZ005802: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:25:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:25:36 splunk3 sendmail[5934]: n2VNPaj2005934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:26:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:26:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 16:26:36 splunk3 sendmail[6179]: n2VNQaqU006179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:27:36 splunk3 sendmail[6419]: n2VNRasw006419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:28:36 splunk3 sendmail[6655]: n2VNSarD006655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:29:36 splunk3 sendmail[6895]: n2VNTaiA006895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:30:07 splunk3 sendmail[7015]: n2VNU7L5007015: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312330.n2VNU6qr013673@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:30:07 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57582
|
|
Mar 31 16:30:07 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:30:07 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:30:07 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:30:07 splunk3 spamd[12510]: spamd: processing message <200903312330.n2VNU6qr013673@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:30:09 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 16:30:09 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57582,mid=<200903312330.n2VNU6qr013673@virt2.int.splunk.com>,bayes=0.112837606237735,autolearn=no
|
|
Mar 31 16:30:09 splunk3 sendmail[7016]: n2VNU7L5007015: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:30:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:30:36 splunk3 sendmail[7151]: n2VNUasW007151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:31:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:31:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:31:36 splunk3 sendmail[7399]: n2VNVa9q007399: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:32:36 splunk3 sendmail[7640]: n2VNWaI1007640: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:33:36 splunk3 sendmail[7879]: n2VNXace007879: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:34:36 splunk3 sendmail[8114]: n2VNYadP008114: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:35:07 splunk3 sendmail[8253]: n2VNZ7AF008253: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312335.n2VNZ7YB014423@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:35:07 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57637
|
|
Mar 31 16:35:08 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:35:08 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:35:08 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:35:08 splunk3 spamd[12510]: spamd: processing message <200903312335.n2VNZ7YB014423@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:35:10 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 16:35:10 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57637,mid=<200903312335.n2VNZ7YB014423@virt2.int.splunk.com>,bayes=0.112837606237735,autolearn=no
|
|
Mar 31 16:35:10 splunk3 sendmail[8254]: n2VNZ7AF008253: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:35:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:35:36 splunk3 sendmail[8369]: n2VNZaY0008369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:36:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:36:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:36:36 splunk3 sendmail[8613]: n2VNaagX008613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:37:36 splunk3 sendmail[8850]: n2VNbaCp008850: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:38:36 splunk3 sendmail[9089]: n2VNcasS009089: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:39:36 splunk3 sendmail[9324]: n2VNda65009324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:40:08 splunk3 sendmail[9463]: n2VNe8o9009463: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312340.n2VNe8ZG015058@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:40:08 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57693
|
|
Mar 31 16:40:08 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:40:08 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:40:08 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:40:08 splunk3 spamd[12510]: spamd: processing message <200903312340.n2VNe8ZG015058@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:40:10 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 16:40:10 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57693,mid=<200903312340.n2VNe8ZG015058@virt2.int.splunk.com>,bayes=0.112837606237735,autolearn=no
|
|
Mar 31 16:40:10 splunk3 sendmail[9464]: n2VNe8o9009463: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:40:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:40:36 splunk3 sendmail[9589]: n2VNeahH009589: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:41:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:41:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 16:41:36 splunk3 sendmail[9837]: n2VNfabL009837: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:42:36 splunk3 sendmail[10071]: n2VNgabF010071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:43:36 splunk3 sendmail[10313]: n2VNhaEk010313: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:44:36 splunk3 sendmail[10547]: n2VNiamc010547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:45:09 splunk3 sendmail[10683]: n2VNj9BD010683: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312345.n2VNj8Ph015669@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:45:09 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57750
|
|
Mar 31 16:45:09 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:45:09 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:45:09 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:45:09 splunk3 spamd[12510]: spamd: processing message <200903312345.n2VNj8Ph015669@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:45:11 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 31 16:45:11 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57750,mid=<200903312345.n2VNj8Ph015669@virt2.int.splunk.com>,bayes=0.112837606237735,autolearn=no
|
|
Mar 31 16:45:11 splunk3 sendmail[10684]: n2VNj9BD010683: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:45:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:45:36 splunk3 sendmail[10803]: n2VNjaN8010803: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:46:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:46:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:46:30 splunk3 sendmail[11007]: n2VNkRtX011007: from=<spamme@splunkit.com>, size=2755, class=0, nrcpts=1, msgid=<200903312346.n2VNkRtX011007@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=ABTS-TN-dynamic-236.112.164.122.airtelbroadband.in [122.164.112.236] (may be forged)
|
|
Mar 31 16:46:30 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57772
|
|
Mar 31 16:46:30 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:46:30 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:46:30 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:46:30 splunk3 spamd[12510]: spamd: processing message <200903312346.n2VNkRtX011007@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 16:46:32 splunk3 spamd[12510]: spamd: identified spam (29.1/5.0) for spamme:501 in 1.8 seconds, 3188 bytes.
|
|
Mar 31 16:46:32 splunk3 spamd[12510]: spamd: result: Y 29 - AWL,BAYES_99,FORGED_RCVD_HELO,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.8,size=3188,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57772,mid=<200903312346.n2VNkRtX011007@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 31 16:46:32 splunk3 sendmail[11025]: n2VNkRtX011007: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33110, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:46:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:46:36 splunk3 sendmail[11048]: n2VNka50011048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:47:36 splunk3 sendmail[11287]: n2VNlam2011287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:48:36 splunk3 sendmail[11524]: n2VNmaM5011524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:49:36 splunk3 sendmail[11763]: n2VNnaMu011763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:50:10 splunk3 sendmail[11905]: n2VNoAkT011905: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312350.n2VNo9s1016278@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:50:10 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57806
|
|
Mar 31 16:50:10 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:50:10 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:50:10 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:50:10 splunk3 spamd[12510]: spamd: processing message <200903312350.n2VNo9s1016278@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:50:12 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 16:50:12 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57806,mid=<200903312350.n2VNo9s1016278@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 16:50:12 splunk3 sendmail[11906]: n2VNoAkT011905: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:50:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:50:36 splunk3 sendmail[12020]: n2VNoa77012020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:51:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:51:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:51:36 splunk3 sendmail[12266]: n2VNpaFQ012266: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:52:36 splunk3 sendmail[12502]: n2VNqaRK012502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:53:36 splunk3 sendmail[12741]: n2VNra0K012741: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:54:36 splunk3 sendmail[12977]: n2VNsaxa012977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:55:10 splunk3 sendmail[13117]: n2VNtAYH013117: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200903312355.n2VNtAKJ016890@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 16:55:10 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57862
|
|
Mar 31 16:55:10 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 16:55:10 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 16:55:10 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 16:55:10 splunk3 spamd[12510]: spamd: processing message <200903312355.n2VNtAKJ016890@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 16:55:12 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 16:55:12 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57862,mid=<200903312355.n2VNtAKJ016890@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 16:55:12 splunk3 sendmail[13118]: n2VNtAYH013117: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 16:55:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 16:55:36 splunk3 sendmail[13230]: n2VNtaei013230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:56:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 16:56:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 16:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 16:56:37 splunk3 sendmail[13513]: n2VNubtL013513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:57:37 splunk3 sendmail[13754]: n2VNvbqJ013754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:58:37 splunk3 sendmail[13989]: n2VNwb5G013989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 16:59:37 splunk3 sendmail[14230]: n2VNxbKc014230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:00:04 splunk3 sendmail[14409]: n31004Dg014409: from=root, size=291, class=0, nrcpts=1, msgid=<200904010000.n31004Dg014409@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 17:00:04 splunk3 sendmail[14413]: n310042Y014413: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200904010000.n31004Dg014409@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 17:00:04 splunk3 sendmail[14409]: n31004Dg014409: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n310042Y014413 Message accepted for delivery)
|
|
Mar 31 17:00:05 splunk3 sendmail[14414]: n310042Y014413: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:00:11 splunk3 sendmail[14435]: n3100BP8014435: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010000.n3100Ani017532@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:00:11 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57919
|
|
Mar 31 17:00:11 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:00:11 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 17:00:11 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 17:00:11 splunk3 sendmail[14437]: n3100BP8014435: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:00:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:00:19 splunk3 sendmail[14491]: n3100J3B014491: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904010000.n3100J3B014491@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 17:00:20 splunk3 sendmail[14493]: n3100J3B014491: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 17:00:20 splunk3 sendmail[14493]: n3100J3B014491: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 17:00:20 splunk3 sendmail[14493]: n3100J3B014491: n3100K3B014493: postmaster notify: User unknown
|
|
Mar 31 17:00:21 splunk3 sendmail[14493]: n3100K3B014493: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:00:37 splunk3 sendmail[14565]: n3100bFP014565: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:01:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:01:11 splunk3 sendmail[14674]: n31011cR014674: from=root, size=443, class=0, nrcpts=1, msgid=<200904010001.n31011cR014674@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 17:01:11 splunk3 sendmail[14718]: n3101BJb014718: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200904010001.n31011cR014674@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 17:01:11 splunk3 sendmail[14674]: n31011cR014674: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3101BJb014718 Message accepted for delivery)
|
|
Mar 31 17:01:12 splunk3 sendmail[14719]: n3101BJb014718: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:01:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:01:37 splunk3 sendmail[14826]: n3101b9G014826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:02:37 splunk3 sendmail[15061]: n3102bpR015061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:03:37 splunk3 sendmail[15302]: n3103bmk015302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:04:37 splunk3 sendmail[15537]: n3104bWT015537: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:05:15 splunk3 sendmail[15694]: n3105FEY015694: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010005.n3105BiA018213@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:05:15 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57983
|
|
Mar 31 17:05:15 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:05:15 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 17:05:15 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 17:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:05:15 splunk3 sendmail[15695]: n3105FEY015694: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:05:37 splunk3 sendmail[15790]: n3105b3X015790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:06:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:06:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:06:37 splunk3 sendmail[16036]: n3106bL7016036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:07:37 splunk3 sendmail[16270]: n3107bPl016270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:08:37 splunk3 sendmail[16510]: n3108bCX016510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:09:37 splunk3 sendmail[16751]: n3109bGe016751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:10:02 splunk3 sendmail[16962]: n310A2GY016962: from=root, size=292, class=0, nrcpts=1, msgid=<200904010010.n310A2GY016962@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 17:10:02 splunk3 sendmail[16967]: n310A2Gd016967: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200904010010.n310A2GY016962@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 17:10:02 splunk3 sendmail[16962]: n310A2GY016962: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n310A2Gd016967 Message accepted for delivery)
|
|
Mar 31 17:10:03 splunk3 sendmail[16968]: n310A2Gd016967: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:10:16 splunk3 sendmail[17014]: n310AGkR017014: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010010.n310AFaS018834@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:10:16 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58040
|
|
Mar 31 17:10:16 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:10:16 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:10:16 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:10:16 splunk3 spamd[12510]: spamd: processing message <200904010010.n310AFaS018834@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:10:18 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 17:10:18 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58040,mid=<200904010010.n310AFaS018834@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:10:18 splunk3 sendmail[17015]: n310AGkR017014: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:10:37 splunk3 sendmail[17109]: n310AbOb017109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:11:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:11:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 17:11:37 splunk3 sendmail[17357]: n310BbdZ017357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:12:37 splunk3 sendmail[17592]: n310CbIn017592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:13:37 splunk3 sendmail[17833]: n310DbHa017833: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:14:37 splunk3 sendmail[18064]: n310Ebes018064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:15:17 splunk3 sendmail[18236]: n310FHk9018236: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010015.n310FGT3019638@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:15:17 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58096
|
|
Mar 31 17:15:17 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:15:17 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:15:17 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:15:17 splunk3 spamd[12510]: spamd: processing message <200904010015.n310FGT3019638@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:15:19 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 17:15:19 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58096,mid=<200904010015.n310FGT3019638@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:15:19 splunk3 sendmail[18237]: n310FHk9018236: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:15:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:15:37 splunk3 sendmail[18318]: n310Fb3m018318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:16:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:16:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:16:37 splunk3 sendmail[18560]: n310GbeU018560: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:17:37 splunk3 sendmail[18799]: n310Hb6I018799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:18:37 splunk3 sendmail[19036]: n310IbUO019036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:19:37 splunk3 sendmail[19279]: n310JbLh019279: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:20:17 splunk3 sendmail[19452]: n310KHwb019452: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010020.n310KHIi020274@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:20:17 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58152
|
|
Mar 31 17:20:17 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:20:17 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:20:17 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:20:17 splunk3 spamd[12510]: spamd: processing message <200904010020.n310KHIi020274@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:20:19 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 17:20:19 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58152,mid=<200904010020.n310KHIi020274@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:20:19 splunk3 sendmail[19453]: n310KHwb019452: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:20:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:20:37 splunk3 sendmail[19544]: n310KbZe019544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:21:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:21:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:21:37 splunk3 sendmail[19795]: n310LbgL019795: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:22:37 splunk3 sendmail[20030]: n310Mbl4020030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:23:37 splunk3 sendmail[20274]: n310Nb0m020274: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:24:37 splunk3 sendmail[20510]: n310ObjW020510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:25:18 splunk3 sendmail[20668]: n310PI2T020668: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010025.n310PH6M020880@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:25:18 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58208
|
|
Mar 31 17:25:18 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:25:18 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:25:18 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:25:18 splunk3 spamd[12510]: spamd: processing message <200904010025.n310PH6M020880@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:25:20 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 17:25:20 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58208,mid=<200904010025.n310PH6M020880@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:25:20 splunk3 sendmail[20670]: n310PI2T020668: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:25:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:25:37 splunk3 sendmail[20764]: n310Pb6H020764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:26:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:26:17 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 17:26:37 splunk3 sendmail[21008]: n310Qbsm021008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:27:37 splunk3 sendmail[21249]: n310Rbdm021249: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:28:37 splunk3 sendmail[21481]: n310Sbt4021481: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:29:37 splunk3 sendmail[21719]: n310TbRH021719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:30:18 splunk3 sendmail[21879]: n310UIsM021879: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010030.n310UIm4021503@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:30:18 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58264
|
|
Mar 31 17:30:18 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:30:18 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:30:18 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:30:18 splunk3 spamd[12510]: spamd: processing message <200904010030.n310UIm4021503@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:30:20 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 17:30:20 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58264,mid=<200904010030.n310UIm4021503@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:30:20 splunk3 sendmail[21880]: n310UIsM021879: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:30:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:30:37 splunk3 sendmail[21976]: n310UbiT021976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:31:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:31:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:31:37 splunk3 sendmail[22224]: n310VbYG022224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:32:37 splunk3 sendmail[22459]: n310Wb61022459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:33:37 splunk3 sendmail[22700]: n310Xbgs022700: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:34:37 splunk3 sendmail[22936]: n310Ybou022936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:35:19 splunk3 sendmail[23094]: n310ZIMe023094: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010035.n310ZIZ2022246@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:35:19 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58320
|
|
Mar 31 17:35:19 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:35:19 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:35:19 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:35:19 splunk3 spamd[12510]: spamd: processing message <200904010035.n310ZIZ2022246@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:35:21 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1311 bytes.
|
|
Mar 31 17:35:21 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58320,mid=<200904010035.n310ZIZ2022246@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:35:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:35:21 splunk3 sendmail[23095]: n310ZIMe023094: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:35:37 splunk3 sendmail[23186]: n310ZbTL023186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:36:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:36:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:36:37 splunk3 sendmail[23430]: n310ab1P023430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:37:37 splunk3 sendmail[23670]: n310bbm8023670: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:38:37 splunk3 sendmail[23910]: n310cbmA023910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:39:37 splunk3 sendmail[24151]: n310dbJ1024151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:40:19 splunk3 sendmail[24312]: n310eJT2024312: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010040.n310eJv3022884@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:40:19 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58375
|
|
Mar 31 17:40:19 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:40:19 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:40:19 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:40:19 splunk3 spamd[12510]: spamd: processing message <200904010040.n310eJv3022884@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:40:23 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1311 bytes.
|
|
Mar 31 17:40:23 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58375,mid=<200904010040.n310eJv3022884@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:40:23 splunk3 sendmail[24313]: n310eJT2024312: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:40:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:40:37 splunk3 sendmail[24407]: n310ebKB024407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:41:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:41:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 17:41:37 splunk3 sendmail[24657]: n310fbMn024657: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:42:37 splunk3 sendmail[24888]: n310gbtO024888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:43:37 splunk3 sendmail[25127]: n310hbQU025127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:44:37 splunk3 sendmail[25360]: n310ibrD025360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:45:20 splunk3 sendmail[25518]: n310jKH8025518: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010045.n310jJXP023524@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:45:20 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58432
|
|
Mar 31 17:45:20 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:45:20 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:45:20 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:45:20 splunk3 spamd[12510]: spamd: processing message <200904010045.n310jJXP023524@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:45:22 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 17:45:22 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58432,mid=<200904010045.n310jJXP023524@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:45:22 splunk3 sendmail[25519]: n310jKH8025518: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:45:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:45:37 splunk3 sendmail[25615]: n310jbAx025615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:46:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:46:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:46:37 splunk3 sendmail[25858]: n310kbEj025858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:47:37 splunk3 sendmail[26095]: n310lbxT026095: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:48:37 splunk3 sendmail[26334]: n310mbw3026334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:49:37 splunk3 sendmail[26569]: n310nbFY026569: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:50:21 splunk3 sendmail[26731]: n310oKUs026731: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010050.n310oKNf024152@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:50:21 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58487
|
|
Mar 31 17:50:21 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:50:21 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:50:21 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:50:21 splunk3 spamd[12510]: spamd: processing message <200904010050.n310oKNf024152@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:50:23 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 17:50:23 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58487,mid=<200904010050.n310oKNf024152@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:50:23 splunk3 sendmail[26732]: n310oKUs026731: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:50:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:50:37 splunk3 sendmail[26825]: n310obkP026825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:51:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:51:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:51:37 splunk3 sendmail[27073]: n310pb7h027073: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:52:37 splunk3 sendmail[27307]: n310qbBY027307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:53:37 splunk3 sendmail[27552]: n310rbQD027552: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:54:37 splunk3 sendmail[27788]: n310sb2l027788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:55:21 splunk3 sendmail[27949]: n310tLOi027949: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010055.n310tLPY024753@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 17:55:21 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58543
|
|
Mar 31 17:55:21 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 17:55:21 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 17:55:21 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 17:55:21 splunk3 spamd[12510]: spamd: processing message <200904010055.n310tLPY024753@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 17:55:23 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 31 17:55:23 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58543,mid=<200904010055.n310tLPY024753@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 17:55:23 splunk3 sendmail[27950]: n310tLOi027949: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 17:55:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 17:55:37 splunk3 sendmail[28044]: n310tb6S028044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:56:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 17:56:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 17:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 17:56:37 splunk3 sendmail[28284]: n310ubX8028284: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:57:37 splunk3 sendmail[28523]: n310vbx0028523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:58:37 splunk3 sendmail[28758]: n310wbCT028758: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 17:59:37 splunk3 sendmail[28996]: n310xbG2028996: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:00:04 splunk3 sendmail[29161]: n311045F029161: from=root, size=291, class=0, nrcpts=1, msgid=<200904010100.n311045F029161@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 18:00:04 splunk3 sendmail[29165]: n31104Zn029165: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200904010100.n311045F029161@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 18:00:04 splunk3 sendmail[29161]: n311045F029161: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31104Zn029165 Message accepted for delivery)
|
|
Mar 31 18:00:05 splunk3 sendmail[29166]: n31104Zn029165: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:00:21 splunk3 sendmail[29247]: n3110LL2029247: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010100.n3110LO5025395@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:00:21 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58600
|
|
Mar 31 18:00:21 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:00:21 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 18:00:21 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 18:00:21 splunk3 sendmail[29248]: n3110LL2029247: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:00:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:00:25 splunk3 sendmail[29266]: n3110PVG029266: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904010100.n3110PVG029266@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 18:00:25 splunk3 sendmail[29268]: n3110PVG029266: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 18:00:25 splunk3 sendmail[29268]: n3110PVG029266: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 18:00:25 splunk3 sendmail[29268]: n3110PVG029266: n3110PVG029268: postmaster notify: User unknown
|
|
Mar 31 18:00:27 splunk3 sendmail[29268]: n3110PVG029268: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:00:37 splunk3 sendmail[29337]: n3110bbE029337: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:01:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:01:09 splunk3 sendmail[29444]: n31111KD029444: from=root, size=443, class=0, nrcpts=1, msgid=<200904010101.n31111KD029444@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 18:01:09 splunk3 sendmail[29470]: n31119t2029470: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200904010101.n31111KD029444@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 18:01:09 splunk3 sendmail[29444]: n31111KD029444: to=root, ctladdr=root (0/0), delay=00:00:08, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31119t2029470 Message accepted for delivery)
|
|
Mar 31 18:01:11 splunk3 sendmail[29471]: n31119t2029470: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:01:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:01:37 splunk3 sendmail[29596]: n3111b5I029596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:02:37 splunk3 sendmail[29832]: n3112buG029832: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:03:37 splunk3 sendmail[30069]: n3113b9u030069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:04:37 splunk3 sendmail[30304]: n3114bPU030304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:05:22 splunk3 sendmail[30483]: n3115M4v030483: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010105.n3115M7Y026072@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:05:22 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58664
|
|
Mar 31 18:05:22 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:05:22 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 18:05:22 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 18:05:22 splunk3 sendmail[30484]: n3115M4v030483: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:05:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:05:37 splunk3 sendmail[30557]: n3115b5K030557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:06:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:06:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:06:37 splunk3 sendmail[30801]: n3116bbq030801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:07:37 splunk3 sendmail[31040]: n3117bi3031040: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:08:37 splunk3 sendmail[31279]: n3118b8K031279: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:09:37 splunk3 sendmail[31519]: n3119bYh031519: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:10:03 splunk3 sendmail[31719]: n311A2ef031719: from=root, size=292, class=0, nrcpts=1, msgid=<200904010110.n311A2ef031719@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 18:10:03 splunk3 sendmail[31724]: n311A3wm031724: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200904010110.n311A2ef031719@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 18:10:03 splunk3 sendmail[31719]: n311A2ef031719: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n311A3wm031724 Message accepted for delivery)
|
|
Mar 31 18:10:04 splunk3 sendmail[31725]: n311A3wm031724: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:10:22 splunk3 sendmail[31806]: n311AMrg031806: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010110.n311AM03026699@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:10:22 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58721
|
|
Mar 31 18:10:22 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:10:22 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:10:22 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:10:22 splunk3 spamd[12510]: spamd: processing message <200904010110.n311AM03026699@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:10:24 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 18:10:24 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58721,mid=<200904010110.n311AM03026699@virt2.int.splunk.com>,bayes=0.112830130000609,autolearn=no
|
|
Mar 31 18:10:24 splunk3 sendmail[31807]: n311AMrg031806: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:10:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:10:37 splunk3 sendmail[31878]: n311AbWl031878: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:10:55 splunk3 sendmail[31939]: n311Ar0E031939: from=<spamme@splunkit.com>, size=1977, class=0, nrcpts=1, msgid=<200904010110.n311Ar0E031939@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=adsl53-11.lsf.forthnet.gr [79.103.180.11]
|
|
Mar 31 18:10:55 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58734
|
|
Mar 31 18:10:55 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:10:55 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:10:55 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:10:55 splunk3 spamd[12510]: spamd: processing message <200904010110.n311Ar0E031939@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 18:11:01 splunk3 spamd[12510]: spamd: identified spam (28.4/5.0) for spamme:501 in 6.5 seconds, 2380 bytes.
|
|
Mar 31 18:11:01 splunk3 spamd[12510]: spamd: result: Y 28 - BAYES_60,HELO_DYNAMIC_DHCP,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL,URI_NOVOWEL scantime=6.5,size=2380,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58734,mid=<200904010110.n311Ar0E031939@splunk3.splunkit.com>,bayes=0.749880947475992,autolearn=spam
|
|
Mar 31 18:11:01 splunk3 sendmail[31942]: n311Ar0E031939: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:07, xdelay=00:00:06, mailer=local, pri=32303, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:11:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:11:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:11:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 18:11:37 splunk3 sendmail[32132]: n311BbOa032132: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:12:37 splunk3 sendmail[32369]: n311CbJC032369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:13:37 splunk3 sendmail[32609]: n311Db7w032609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:14:37 splunk3 sendmail[378]: n311EbaA000378: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:15:23 splunk3 sendmail[558]: n311FNVH000558: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010115.n311FNMc027493@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:15:23 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58778
|
|
Mar 31 18:15:23 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:15:23 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:15:23 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:15:23 splunk3 spamd[12510]: spamd: processing message <200904010115.n311FNMc027493@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:15:25 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.9 seconds, 1311 bytes.
|
|
Mar 31 18:15:25 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.9,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58778,mid=<200904010115.n311FNMc027493@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 18:15:25 splunk3 sendmail[559]: n311FNVH000558: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:15:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:15:37 splunk3 sendmail[632]: n311FbAj000632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:16:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:16:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:16:37 splunk3 sendmail[876]: n311Gb0s000876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:17:37 splunk3 sendmail[1112]: n311Hbbj001112: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:18:37 splunk3 sendmail[1351]: n311IbTk001351: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:19:37 splunk3 sendmail[1589]: n311Jbxt001589: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:20:23 splunk3 sendmail[1770]: n311KNa7001770: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010120.n311KNjX028130@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:20:23 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58834
|
|
Mar 31 18:20:23 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:20:23 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:20:23 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:20:23 splunk3 spamd[12510]: spamd: processing message <200904010120.n311KNjX028130@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:20:25 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1311 bytes.
|
|
Mar 31 18:20:25 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58834,mid=<200904010120.n311KNjX028130@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 18:20:25 splunk3 sendmail[1772]: n311KNa7001770: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:20:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:20:37 splunk3 sendmail[1844]: n311Kbjm001844: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:21:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:21:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:21:37 splunk3 sendmail[2094]: n311LbZi002094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:22:37 splunk3 sendmail[2328]: n311Mbh1002328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:23:37 splunk3 sendmail[2575]: n311NbH4002575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:24:37 splunk3 sendmail[2820]: n311Obwo002820: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:25:24 splunk3 sendmail[3010]: n311POc3003010: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010125.n311PONV028733@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:25:24 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58889
|
|
Mar 31 18:25:24 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:25:24 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:25:24 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:25:24 splunk3 spamd[12510]: spamd: processing message <200904010125.n311PONV028733@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:25:26 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 18:25:26 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58889,mid=<200904010125.n311PONV028733@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 18:25:26 splunk3 sendmail[3011]: n311POc3003010: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:25:37 splunk3 sendmail[3085]: n311PbMN003085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:26:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:26:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 18:26:37 splunk3 sendmail[3331]: n311Qbew003331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:27:37 splunk3 sendmail[3589]: n311Rblx003589: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:28:37 splunk3 sendmail[3836]: n311SbXj003836: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:29:37 splunk3 sendmail[4086]: n311Tbju004086: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:30:25 splunk3 sendmail[4280]: n311UPdB004280: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010130.n311UPt9029360@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:30:25 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58946
|
|
Mar 31 18:30:25 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:30:25 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:30:25 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:30:25 splunk3 spamd[12510]: spamd: processing message <200904010130.n311UPt9029360@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:30:27 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 18:30:27 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58946,mid=<200904010130.n311UPt9029360@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 18:30:27 splunk3 sendmail[4281]: n311UPdB004280: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:30:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:30:37 splunk3 sendmail[4364]: n311UbvT004364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:31:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:31:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:31:37 splunk3 sendmail[4609]: n311VbFp004609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:32:37 splunk3 sendmail[4842]: n311WblW004842: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:33:37 splunk3 sendmail[5094]: n311XbWC005094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:34:37 splunk3 sendmail[5367]: n311YbEd005367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:35:25 splunk3 sendmail[5548]: n311ZPfE005548: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010135.n311ZPkW030109@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:35:26 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59001
|
|
Mar 31 18:35:26 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:35:26 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:35:26 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:35:26 splunk3 spamd[12510]: spamd: processing message <200904010135.n311ZPkW030109@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:35:28 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 18:35:28 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59001,mid=<200904010135.n311ZPkW030109@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 18:35:28 splunk3 sendmail[5549]: n311ZPfE005548: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:35:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:35:37 splunk3 sendmail[5622]: n311Zb4x005622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:36:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:36:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:36:37 splunk3 sendmail[5865]: n311abEs005865: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:37:37 splunk3 sendmail[6105]: n311bbpg006105: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:38:37 splunk3 sendmail[6342]: n311cbA3006342: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:39:37 splunk3 sendmail[6582]: n311dbMq006582: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:40:26 splunk3 sendmail[6784]: n311eQRq006784: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010140.n311eQ91030742@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:40:26 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59057
|
|
Mar 31 18:40:26 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:40:26 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:40:26 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:40:26 splunk3 spamd[12510]: spamd: processing message <200904010140.n311eQ91030742@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:40:28 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 18:40:28 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59057,mid=<200904010140.n311eQ91030742@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 18:40:28 splunk3 sendmail[6785]: n311eQRq006784: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:40:37 splunk3 sendmail[6838]: n311ebfL006838: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:41:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:41:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 18:41:37 splunk3 sendmail[7085]: n311fbJT007085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:42:37 splunk3 sendmail[7322]: n311gbEd007322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:43:37 splunk3 sendmail[7570]: n311hb4w007570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:44:37 splunk3 sendmail[7806]: n311ibnF007806: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:45:27 splunk3 sendmail[8004]: n311jREY008004: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010145.n311jQdB031350@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:45:27 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59112
|
|
Mar 31 18:45:27 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:45:27 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:45:27 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:45:27 splunk3 spamd[12510]: spamd: processing message <200904010145.n311jQdB031350@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:45:29 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 18:45:29 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59112,mid=<200904010145.n311jQdB031350@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 18:45:29 splunk3 sendmail[8005]: n311jREY008004: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:45:37 splunk3 sendmail[8058]: n311jbQv008058: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:46:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:46:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:46:37 splunk3 sendmail[8301]: n311kbKu008301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:47:37 splunk3 sendmail[8539]: n311lbaA008539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:48:37 splunk3 sendmail[8776]: n311mb9w008776: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:49:37 splunk3 sendmail[9015]: n311nbNq009015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:50:27 splunk3 sendmail[9226]: n311oRKq009226: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010150.n311oRk6031963@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:50:27 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59176
|
|
Mar 31 18:50:27 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:50:27 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:50:27 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:50:27 splunk3 spamd[12510]: spamd: processing message <200904010150.n311oRk6031963@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:50:29 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 18:50:29 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59176,mid=<200904010150.n311oRk6031963@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 18:50:29 splunk3 sendmail[9227]: n311oRKq009226: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:50:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:50:37 splunk3 sendmail[9270]: n311obXr009270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:51:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:51:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:51:37 splunk3 sendmail[9517]: n311pbkF009517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:52:37 splunk3 sendmail[9760]: n311qb1p009760: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:53:37 splunk3 sendmail[10004]: n311rbLq010004: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:54:37 splunk3 sendmail[10238]: n311sb5q010238: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:55:28 splunk3 sendmail[10447]: n311tSXd010447: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010155.n311tRSs032598@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 18:55:28 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59232
|
|
Mar 31 18:55:28 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 18:55:28 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 18:55:28 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 18:55:28 splunk3 spamd[12510]: spamd: processing message <200904010155.n311tRSs032598@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 18:55:30 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 18:55:30 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59232,mid=<200904010155.n311tRSs032598@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 18:55:30 splunk3 sendmail[10448]: n311tSXd010447: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 18:55:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 18:55:37 splunk3 sendmail[10492]: n311tbku010492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:56:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 18:56:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 18:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 18:56:37 splunk3 sendmail[10737]: n311ub3L010737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:57:37 splunk3 sendmail[10976]: n311vbnU010976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:58:37 splunk3 sendmail[11212]: n311wbKK011212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 18:59:37 splunk3 sendmail[11449]: n311xbZY011449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:00:01 splunk3 sendmail[11557]: n3120149011557: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904010200.n3120149011557@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 19:00:01 splunk3 sendmail[11559]: n3120149011557: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 19:00:01 splunk3 sendmail[11559]: n3120149011557: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 19:00:01 splunk3 sendmail[11559]: n3120149011557: n3120149011559: postmaster notify: User unknown
|
|
Mar 31 19:00:02 splunk3 sendmail[11559]: n3120149011559: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:00:04 splunk3 sendmail[11644]: n31204gI011644: from=root, size=291, class=0, nrcpts=1, msgid=<200904010200.n31204gI011644@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 19:00:05 splunk3 sendmail[11648]: n31204lQ011648: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200904010200.n31204gI011644@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 19:00:05 splunk3 sendmail[11644]: n31204gI011644: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31204lQ011648 Message accepted for delivery)
|
|
Mar 31 19:00:06 splunk3 sendmail[11649]: n31204lQ011648: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:00:28 splunk3 sendmail[11751]: n3120SQP011751: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200904010200.n3120SR0000762@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:00:28 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59296
|
|
Mar 31 19:00:28 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:00:28 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 19:00:28 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 19:00:28 splunk3 sendmail[11752]: n3120SQP011751: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:00:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:00:37 splunk3 sendmail[11790]: n3120bJ3011790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:01:07 splunk3 sendmail[11895]: n31211LL011895: from=root, size=443, class=0, nrcpts=1, msgid=<200904010201.n31211LL011895@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 19:01:07 splunk3 sendmail[11927]: n31217d8011927: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200904010201.n31211LL011895@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 19:01:07 splunk3 sendmail[11895]: n31211LL011895: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31217d8011927 Message accepted for delivery)
|
|
Mar 31 19:01:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:01:08 splunk3 sendmail[11928]: n31217d8011927: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:01:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:01:37 splunk3 sendmail[12050]: n3121baT012050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:02:37 splunk3 sendmail[12285]: n3122bRl012285: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:03:37 splunk3 sendmail[12528]: n3123bqq012528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:04:37 splunk3 sendmail[12761]: n3124b3g012761: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:05:29 splunk3 sendmail[12970]: n3125TX9012970: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010205.n3125Sd0001478@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:05:29 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59353
|
|
Mar 31 19:05:29 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:05:29 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 19:05:29 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 19:05:29 splunk3 sendmail[12971]: n3125TX9012970: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:05:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:05:37 splunk3 sendmail[13012]: n3125b7V013012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:06:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:06:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:06:38 splunk3 sendmail[13258]: n3126c8e013258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:07:38 splunk3 sendmail[13530]: n3127cMO013530: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:08:38 splunk3 sendmail[13771]: n3128cLU013771: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:08:40 splunk3 sendmail[13769]: n3128bM5013769: from=<spamme@splunkit.com>, size=2756, class=0, nrcpts=1, msgid=<200904010208.n3128bM5013769@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=[190.66.160.92]
|
|
Mar 31 19:08:40 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59384
|
|
Mar 31 19:08:40 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:08:40 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 19:08:40 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 19:08:40 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:08:40 splunk3 sendmail[13774]: n3128bM5013769: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:02, xdelay=00:00:00, mailer=local, pri=33054, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:09:38 splunk3 sendmail[14017]: n3129cTC014017: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:10:02 splunk3 sendmail[14224]: n312A2ai014224: from=root, size=292, class=0, nrcpts=1, msgid=<200904010210.n312A2ai014224@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 19:10:02 splunk3 sendmail[14229]: n312A2i7014229: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200904010210.n312A2ai014224@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 19:10:02 splunk3 sendmail[14224]: n312A2ai014224: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n312A2i7014229 Message accepted for delivery)
|
|
Mar 31 19:10:03 splunk3 sendmail[14231]: n312A2i7014229: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:10:29 splunk3 sendmail[14331]: n312ATVS014331: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010210.n312ATmw002090@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:10:29 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59410
|
|
Mar 31 19:10:29 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:10:29 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:10:29 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:10:29 splunk3 spamd[12510]: spamd: processing message <200904010210.n312ATmw002090@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:10:31 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Mar 31 19:10:31 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59410,mid=<200904010210.n312ATmw002090@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:10:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:10:31 splunk3 sendmail[14332]: n312ATVS014331: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:10:38 splunk3 sendmail[14376]: n312Acr5014376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:11:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:11:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 19:11:38 splunk3 sendmail[14623]: n312Bc50014623: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:12:38 splunk3 sendmail[14858]: n312Cc5M014858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:13:38 splunk3 sendmail[15096]: n312DcPC015096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:14:38 splunk3 sendmail[15331]: n312Ecqh015331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:15:30 splunk3 sendmail[15547]: n312FUD6015547: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010215.n312FT2H002919@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:15:30 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59467
|
|
Mar 31 19:15:30 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:15:30 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:15:30 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:15:30 splunk3 spamd[12510]: spamd: processing message <200904010215.n312FT2H002919@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:15:32 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 19:15:32 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59467,mid=<200904010215.n312FT2H002919@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:15:32 splunk3 sendmail[15548]: n312FUD6015547: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:15:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:15:38 splunk3 sendmail[15586]: n312FcV5015586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:16:08 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:16:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:16:38 splunk3 sendmail[15829]: n312GcQM015829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:16:46 splunk3 sendmail[15865]: n312Gkjs015865: from=<3js7SSRQKBnkdlldibXiboqp-klobmivdlldib.ZljpmXjjbpmirkhfq.Zlj@alerts.bounces.google.com>, size=9494, class=0, nrcpts=1, msgid=<00151750e18449b8c7046674e803@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.160]
|
|
Mar 31 19:16:46 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59480
|
|
Mar 31 19:16:46 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:16:46 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:16:46 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:16:46 splunk3 spamd[12510]: spamd: processing message <00151750e18449b8c7046674e803@google.com> for spamme:501
|
|
Mar 31 19:16:48 splunk3 spamd[12510]: spamd: clean message (-1.1/5.0) for spamme:501 in 1.5 seconds, 9924 bytes.
|
|
Mar 31 19:16:48 splunk3 spamd[12510]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=1.5,size=9924,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59480,mid=<00151750e18449b8c7046674e803@google.com>,bayes=0,autolearn=no
|
|
Mar 31 19:16:48 splunk3 sendmail[15866]: n312Gkjs015865: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=39705, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:16:48 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:17:38 splunk3 sendmail[16075]: n312HcKI016075: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:18:38 splunk3 sendmail[16312]: n312IcFq016312: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:19:38 splunk3 sendmail[16549]: n312Jc6E016549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:20:00 splunk3 sendmail[16629]: n312K0fi016629: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010220.n312K04h003434@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:20:00 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59512
|
|
Mar 31 19:20:00 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:20:00 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:20:00 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:20:00 splunk3 spamd[12510]: spamd: processing message <200904010220.n312K04h003434@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:20:02 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 31 19:20:02 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59512,mid=<200904010220.n312K04h003434@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:20:02 splunk3 sendmail[16630]: n312K0fi016629: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:20:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:20:38 splunk3 sendmail[16803]: n312KcK1016803: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:21:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:21:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:21:38 splunk3 sendmail[17051]: n312Lcre017051: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:22:38 splunk3 sendmail[17285]: n312Mc8A017285: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:23:38 splunk3 sendmail[17530]: n312NcOv017530: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:24:38 splunk3 sendmail[17766]: n312OcIe017766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:25:01 splunk3 sendmail[17865]: n312P1UV017865: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010225.n312P1Sp004064@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:25:01 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59567
|
|
Mar 31 19:25:01 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:25:01 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:25:01 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:25:01 splunk3 spamd[12510]: spamd: processing message <200904010225.n312P1Sp004064@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:25:03 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 31 19:25:03 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59567,mid=<200904010225.n312P1Sp004064@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:25:03 splunk3 sendmail[17866]: n312P1UV017865: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:25:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:25:38 splunk3 sendmail[18019]: n312Pcca018019: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:26:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:26:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 19:26:38 splunk3 sendmail[18260]: n312QcBX018260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:27:38 splunk3 sendmail[18499]: n312RcK5018499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:28:38 splunk3 sendmail[18735]: n312ScBj018735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:29:38 splunk3 sendmail[18974]: n312TcJ4018974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:30:02 splunk3 sendmail[19077]: n312U2Eb019077: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010230.n312U18S004691@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:30:02 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59624
|
|
Mar 31 19:30:02 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:30:02 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:30:02 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:30:02 splunk3 spamd[12510]: spamd: processing message <200904010230.n312U18S004691@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:30:04 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 31 19:30:04 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59624,mid=<200904010230.n312U18S004691@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:30:04 splunk3 sendmail[19078]: n312U2Eb019077: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:30:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:30:38 splunk3 sendmail[19231]: n312UcK2019231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:31:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:31:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:31:38 splunk3 sendmail[19479]: n312VcR2019479: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:32:38 splunk3 sendmail[19713]: n312Wca7019713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:33:38 splunk3 sendmail[19953]: n312XcnE019953: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:34:38 splunk3 sendmail[20187]: n312YcB9020187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:35:02 splunk3 sendmail[20289]: n312Z27a020289: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010235.n312Z2eJ005468@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:35:02 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59679
|
|
Mar 31 19:35:02 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:35:02 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:35:02 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:35:02 splunk3 spamd[12510]: spamd: processing message <200904010235.n312Z2eJ005468@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:35:05 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 19:35:05 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59679,mid=<200904010235.n312Z2eJ005468@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:35:05 splunk3 sendmail[20291]: n312Z27a020289: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:35:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:35:38 splunk3 sendmail[20441]: n312ZcgJ020441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:36:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:36:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:36:38 splunk3 sendmail[20684]: n312ac21020684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:37:38 splunk3 sendmail[20921]: n312bcwo020921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:38:38 splunk3 sendmail[21163]: n312cc7W021163: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:39:38 splunk3 sendmail[21402]: n312dcsi021402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:40:03 splunk3 sendmail[21504]: n312e3vm021504: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010240.n312e3D1006099@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:40:03 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59735
|
|
Mar 31 19:40:03 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:40:03 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:40:03 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:40:03 splunk3 spamd[12510]: spamd: processing message <200904010240.n312e3D1006099@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:40:05 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 19:40:05 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59735,mid=<200904010240.n312e3D1006099@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:40:05 splunk3 sendmail[21505]: n312e3vm021504: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:40:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:40:38 splunk3 sendmail[21654]: n312ecOT021654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:41:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:41:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 19:41:38 splunk3 sendmail[21900]: n312fcL6021900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:42:38 splunk3 sendmail[22137]: n312gchh022137: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:43:38 splunk3 sendmail[22375]: n312hcil022375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:44:38 splunk3 sendmail[22610]: n312icMo022610: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:45:04 splunk3 sendmail[22711]: n312j4nv022711: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010245.n312j3iu006715@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:45:04 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59791
|
|
Mar 31 19:45:04 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:45:04 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:45:04 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:45:04 splunk3 spamd[12510]: spamd: processing message <200904010245.n312j3iu006715@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:45:06 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 31 19:45:06 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59791,mid=<200904010245.n312j3iu006715@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:45:06 splunk3 sendmail[22712]: n312j4nv022711: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:45:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:45:38 splunk3 sendmail[22866]: n312jcCO022866: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:46:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:46:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:46:38 splunk3 sendmail[23107]: n312kcgq023107: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:47:38 splunk3 sendmail[23345]: n312lcTU023345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:48:38 splunk3 sendmail[23581]: n312mc6Q023581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:49:38 splunk3 sendmail[23820]: n312ncrf023820: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:50:04 splunk3 sendmail[23923]: n312o4mA023923: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010250.n312o4tE007331@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:50:04 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59847
|
|
Mar 31 19:50:04 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:50:04 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:50:04 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:50:04 splunk3 spamd[12510]: spamd: processing message <200904010250.n312o4tE007331@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:50:06 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Mar 31 19:50:06 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59847,mid=<200904010250.n312o4tE007331@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:50:06 splunk3 sendmail[23924]: n312o4mA023923: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:50:38 splunk3 sendmail[24076]: n312ocav024076: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:51:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:51:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:51:38 splunk3 sendmail[24324]: n312pcWH024324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:52:38 splunk3 sendmail[24559]: n312qcxh024559: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:53:38 splunk3 sendmail[24801]: n312rcv2024801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:54:38 splunk3 sendmail[25033]: n312scTt025033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:55:05 splunk3 sendmail[25153]: n312t5Im025153: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010255.n312t5Vj007938@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 19:55:06 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59903
|
|
Mar 31 19:55:06 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 19:55:06 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 19:55:06 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 19:55:06 splunk3 spamd[12510]: spamd: processing message <200904010255.n312t5Vj007938@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 19:55:08 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Mar 31 19:55:08 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59903,mid=<200904010255.n312t5Vj007938@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 19:55:08 splunk3 sendmail[25154]: n312t5Im025153: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 19:55:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 19:55:38 splunk3 sendmail[25285]: n312tcBd025285: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:56:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 19:56:16 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 19:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 19:56:38 splunk3 sendmail[25528]: n312ucnv025528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:57:38 splunk3 sendmail[25767]: n312vcVg025767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:58:38 splunk3 sendmail[26003]: n312wcll026003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 19:59:38 splunk3 sendmail[26243]: n312xcdB026243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:00:04 splunk3 sendmail[26406]: n31304VL026406: from=root, size=291, class=0, nrcpts=1, msgid=<200904010300.n31304VL026406@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 20:00:04 splunk3 sendmail[26410]: n31304Sh026410: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200904010300.n31304VL026406@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 20:00:04 splunk3 sendmail[26406]: n31304VL026406: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31304Sh026410 Message accepted for delivery)
|
|
Mar 31 20:00:05 splunk3 sendmail[26411]: n31304Sh026410: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:00:06 splunk3 sendmail[26432]: n31306fF026432: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010300.n31306bA008576@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:00:06 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59967
|
|
Mar 31 20:00:06 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:00:06 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 20:00:06 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 20:00:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:00:06 splunk3 sendmail[26439]: n31306fF026432: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:00:06 splunk3 sendmail[26449]: n313067N026449: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904010300.n313067N026449@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 20:00:06 splunk3 sendmail[26451]: n313067N026449: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 20:00:06 splunk3 sendmail[26451]: n313067N026449: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 20:00:06 splunk3 sendmail[26451]: n313067N026449: n313067N026451: postmaster notify: User unknown
|
|
Mar 31 20:00:08 splunk3 sendmail[26451]: n313067N026451: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:00:38 splunk3 sendmail[26582]: n3130cUj026582: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:01:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:01:11 splunk3 sendmail[26689]: n31311hG026689: from=root, size=443, class=0, nrcpts=1, msgid=<200904010301.n31311hG026689@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 20:01:11 splunk3 sendmail[26735]: n3131Be5026735: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200904010301.n31311hG026689@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 20:01:11 splunk3 sendmail[26689]: n31311hG026689: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3131Be5026735 Message accepted for delivery)
|
|
Mar 31 20:01:12 splunk3 sendmail[26736]: n3131Be5026735: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:01:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:01:38 splunk3 sendmail[26842]: n3131c0l026842: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:02:38 splunk3 sendmail[27075]: n3132cBL027075: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:03:38 splunk3 sendmail[27316]: n3133cbr027316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:04:38 splunk3 sendmail[27551]: n3134cB8027551: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:05:06 splunk3 sendmail[27669]: n31356IK027669: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010305.n31356hJ009262@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:05:07 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60024
|
|
Mar 31 20:05:07 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:05:07 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 20:05:07 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 20:05:07 splunk3 sendmail[27670]: n31356IK027669: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:05:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:05:38 splunk3 sendmail[27804]: n3135c7S027804: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:06:05 splunk3 sendmail[27901]: n31364fl027901: from=<lotonl@mail.ru>, size=3241, class=0, nrcpts=1, msgid=<20090401031847.BE553BC52@gate1.novo-farm.com.ua>, proto=ESMTP, daemon=MTA, relay=relay02.kiev.sovam.com [62.64.120.197]
|
|
Mar 31 20:06:05 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60041
|
|
Mar 31 20:06:05 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:06:05 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 20:06:05 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 20:06:05 splunk3 sendmail[27924]: n31364fl027901: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=33449, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:06:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:06:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:06:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:06:38 splunk3 sendmail[28054]: n3136cfA028054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:07:38 splunk3 sendmail[28291]: n3137cvQ028291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:08:38 splunk3 sendmail[28530]: n3138csB028530: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:09:38 splunk3 sendmail[28769]: n3139c9s028769: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:10:02 splunk3 sendmail[28965]: n313A29M028965: from=root, size=292, class=0, nrcpts=1, msgid=<200904010310.n313A29M028965@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 20:10:02 splunk3 sendmail[28970]: n313A2Cm028970: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200904010310.n313A29M028965@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 20:10:02 splunk3 sendmail[28965]: n313A29M028965: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n313A2Cm028970 Message accepted for delivery)
|
|
Mar 31 20:10:03 splunk3 sendmail[28971]: n313A2Cm028970: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:10:07 splunk3 sendmail[28995]: n313A70b028995: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010310.n313A7qe009876@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:10:07 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60081
|
|
Mar 31 20:10:07 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:10:07 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:10:07 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:10:07 splunk3 spamd[12510]: spamd: processing message <200904010310.n313A7qe009876@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:10:09 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Mar 31 20:10:09 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60081,mid=<200904010310.n313A7qe009876@virt2.int.splunk.com>,bayes=0.169837054707875,autolearn=no
|
|
Mar 31 20:10:09 splunk3 sendmail[28996]: n313A70b028995: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:10:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:10:38 splunk3 sendmail[29127]: n313AcnR029127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:11:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:11:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 20:11:38 splunk3 sendmail[29373]: n313Bc0w029373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:12:38 splunk3 sendmail[29607]: n313CcbY029607: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:13:38 splunk3 sendmail[29848]: n313Dc7b029848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:14:38 splunk3 sendmail[30081]: n313EckY030081: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:15:12 splunk3 sendmail[30231]: n313FCKS030231: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010315.n313F7YD010659@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:15:12 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60146
|
|
Mar 31 20:15:12 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:15:12 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:15:12 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:15:12 splunk3 spamd[12510]: spamd: processing message <200904010315.n313F7YD010659@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:15:14 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 31 20:15:14 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60146,mid=<200904010315.n313F7YD010659@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 20:15:14 splunk3 sendmail[30232]: n313FCKS030231: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:15:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:15:38 splunk3 sendmail[30335]: n313FcbW030335: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:16:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:16:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:16:38 splunk3 sendmail[30576]: n313GcpE030576: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:17:38 splunk3 sendmail[30817]: n313HcI0030817: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:18:38 splunk3 sendmail[31054]: n313IcRT031054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:19:38 splunk3 sendmail[31293]: n313JcMu031293: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:20:12 splunk3 sendmail[31444]: n313KCpd031444: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010320.n313KC2a011296@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:20:12 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60202
|
|
Mar 31 20:20:12 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:20:12 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:20:12 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:20:12 splunk3 spamd[12510]: spamd: processing message <200904010320.n313KC2a011296@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:20:14 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 20:20:14 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60202,mid=<200904010320.n313KC2a011296@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 20:20:14 splunk3 sendmail[31445]: n313KCpd031444: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:20:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:20:38 splunk3 sendmail[31551]: n313KcqW031551: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:21:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:21:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:21:38 splunk3 sendmail[31798]: n313Lcpd031798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:22:38 splunk3 sendmail[32032]: n313McWs032032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:23:38 splunk3 sendmail[32275]: n313Ncjl032275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:24:38 splunk3 sendmail[32511]: n313Oc8G032511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:25:13 splunk3 sendmail[32663]: n313PDwp032663: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010325.n313PDGL011904@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:25:13 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60257
|
|
Mar 31 20:25:13 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:25:13 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:25:13 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:25:13 splunk3 spamd[12510]: spamd: processing message <200904010325.n313PDGL011904@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:25:15 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 20:25:15 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60257,mid=<200904010325.n313PDGL011904@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 20:25:15 splunk3 sendmail[32664]: n313PDwp032663: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:25:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:25:38 splunk3 sendmail[32766]: n313PcWQ032766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:26:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:26:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 20:26:38 splunk3 sendmail[541]: n313QcJc000541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:27:38 splunk3 sendmail[780]: n313RcMa000780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:28:38 splunk3 sendmail[1015]: n313SchY001015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:29:38 splunk3 sendmail[1251]: n313Tcbw001251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:30:14 splunk3 sendmail[1405]: n313UEU5001405: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010330.n313UDjd012527@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:30:14 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60314
|
|
Mar 31 20:30:14 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:30:14 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:30:14 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:30:14 splunk3 spamd[12510]: spamd: processing message <200904010330.n313UDjd012527@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:30:16 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 31 20:30:16 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60314,mid=<200904010330.n313UDjd012527@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 20:30:16 splunk3 sendmail[1406]: n313UEU5001405: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:30:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:30:38 splunk3 sendmail[1507]: n313UcPM001507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:31:07 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:31:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:31:38 splunk3 sendmail[1755]: n313Vc50001755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:32:38 splunk3 sendmail[1991]: n313WcDN001991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:33:38 splunk3 sendmail[2231]: n313XcJX002231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:34:38 splunk3 sendmail[2468]: n313Yc0l002468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:35:15 splunk3 sendmail[2638]: n313ZFC3002638: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010335.n313ZEQg013276@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:35:15 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60370
|
|
Mar 31 20:35:15 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:35:15 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:35:15 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:35:15 splunk3 spamd[12510]: spamd: processing message <200904010335.n313ZEQg013276@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:35:17 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 20:35:17 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60370,mid=<200904010335.n313ZEQg013276@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 20:35:17 splunk3 sendmail[2639]: n313ZFC3002638: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:35:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:35:38 splunk3 sendmail[2728]: n313Zc63002728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:36:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:36:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:36:38 splunk3 sendmail[2981]: n313acoE002981: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:37:38 splunk3 sendmail[3228]: n313bcD1003228: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:38:38 splunk3 sendmail[3468]: n313cchb003468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:39:38 splunk3 sendmail[3737]: n313dcvp003737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:40:15 splunk3 sendmail[3909]: n313eFjR003909: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010340.n313eF9l013910@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:40:15 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60425
|
|
Mar 31 20:40:15 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:40:15 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:40:15 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:40:15 splunk3 spamd[12510]: spamd: processing message <200904010340.n313eF9l013910@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:40:17 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 20:40:17 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60425,mid=<200904010340.n313eF9l013910@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 20:40:17 splunk3 sendmail[3910]: n313eFjR003909: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:40:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:40:38 splunk3 sendmail[3998]: n313ecnw003998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:41:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:41:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 20:41:38 splunk3 sendmail[4259]: n313fcLF004259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:42:38 splunk3 sendmail[4505]: n313gcaf004505: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:43:38 splunk3 sendmail[4744]: n313hcro004744: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:44:38 splunk3 sendmail[4989]: n313icYa004989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:45:16 splunk3 sendmail[5195]: n313jGxb005195: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010345.n313jFVZ014518@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:45:16 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60482
|
|
Mar 31 20:45:16 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:45:16 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:45:16 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:45:16 splunk3 spamd[12510]: spamd: processing message <200904010345.n313jFVZ014518@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:45:18 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 20:45:18 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60482,mid=<200904010345.n313jFVZ014518@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 20:45:18 splunk3 sendmail[5196]: n313jGxb005195: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:45:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:45:38 splunk3 sendmail[5280]: n313jcjT005280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:46:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:46:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:46:38 splunk3 sendmail[5526]: n313kcD1005526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:47:38 splunk3 sendmail[5763]: n313lcpH005763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:48:38 splunk3 sendmail[6000]: n313mc4F006000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:49:38 splunk3 sendmail[6237]: n313ncwm006237: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:50:17 splunk3 sendmail[6406]: n313oHxX006406: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010350.n313oGZC015131@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:50:17 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60537
|
|
Mar 31 20:50:17 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:50:17 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:50:17 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:50:17 splunk3 spamd[12510]: spamd: processing message <200904010350.n313oGZC015131@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:50:19 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 31 20:50:19 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60537,mid=<200904010350.n313oGZC015131@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 20:50:19 splunk3 sendmail[6407]: n313oHxX006406: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:50:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:50:38 splunk3 sendmail[6491]: n313oc36006491: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:51:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:51:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:51:38 splunk3 sendmail[6739]: n313pcVF006739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:52:38 splunk3 sendmail[6975]: n313qc53006975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:53:38 splunk3 sendmail[7219]: n313rcBY007219: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:54:38 splunk3 sendmail[7455]: n313sc0f007455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:55:17 splunk3 sendmail[7634]: n313tHSr007634: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010355.n313tHtK015741@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 20:55:17 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60593
|
|
Mar 31 20:55:17 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 20:55:17 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 20:55:17 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 20:55:17 splunk3 spamd[12510]: spamd: processing message <200904010355.n313tHtK015741@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 20:55:19 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 20:55:19 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60593,mid=<200904010355.n313tHtK015741@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 20:55:19 splunk3 sendmail[7635]: n313tHSr007634: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 20:55:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 20:55:38 splunk3 sendmail[7719]: n313tcRV007719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:56:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 20:56:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 20:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 20:56:38 splunk3 sendmail[7961]: n313ucQ3007961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:57:38 splunk3 sendmail[8200]: n313vcXs008200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:58:38 splunk3 sendmail[8435]: n313wcQk008435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 20:59:38 splunk3 sendmail[8675]: n313xcVT008675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:00:04 splunk3 sendmail[8842]: n31404RJ008842: from=root, size=291, class=0, nrcpts=1, msgid=<200904010400.n31404RJ008842@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 21:00:04 splunk3 sendmail[8858]: n31404Yf008858: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200904010400.n31404RJ008842@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 21:00:04 splunk3 sendmail[8842]: n31404RJ008842: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31404Yf008858 Message accepted for delivery)
|
|
Mar 31 21:00:05 splunk3 sendmail[8859]: n31404Yf008858: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:00:12 splunk3 sendmail[8898]: n3140Ccn008898: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904010400.n3140Ccn008898@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 21:00:12 splunk3 sendmail[8900]: n3140Ccn008898: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 21:00:12 splunk3 sendmail[8900]: n3140Ccn008898: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 31 21:00:12 splunk3 sendmail[8900]: n3140Ccn008898: n3140Ccn008900: postmaster notify: User unknown
|
|
Mar 31 21:00:13 splunk3 sendmail[8900]: n3140Ccn008900: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:00:17 splunk3 sendmail[8930]: n3140HbW008930: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010400.n3140Ht6016375@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:00:17 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60657
|
|
Mar 31 21:00:17 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:00:17 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 21:00:17 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 21:00:17 splunk3 sendmail[8931]: n3140HbW008930: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:00:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:00:38 splunk3 sendmail[9015]: n3140cAl009015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:01:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:01:14 splunk3 sendmail[9119]: n31411cc009119: from=root, size=443, class=0, nrcpts=1, msgid=<200904010401.n31411cc009119@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 21:01:14 splunk3 sendmail[9186]: n3141Ebh009186: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200904010401.n31411cc009119@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 21:01:14 splunk3 sendmail[9119]: n31411cc009119: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3141Ebh009186 Message accepted for delivery)
|
|
Mar 31 21:01:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:01:16 splunk3 sendmail[9187]: n3141Ebh009186: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:01:38 splunk3 sendmail[9273]: n3141c71009273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:02:38 splunk3 sendmail[9512]: n3142cNA009512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:03:38 splunk3 sendmail[9758]: n3143cux009758: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:04:38 splunk3 sendmail[9988]: n3144cTs009988: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:05:18 splunk3 sendmail[10156]: n3145Ixq010156: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010405.n3145IUL017059@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:05:18 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60714
|
|
Mar 31 21:05:18 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:05:18 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 21:05:18 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 21:05:18 splunk3 sendmail[10157]: n3145Ixq010156: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:05:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:05:38 splunk3 sendmail[10239]: n3145con010239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:06:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:06:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:06:38 splunk3 sendmail[10483]: n3146c4V010483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:07:38 splunk3 sendmail[10722]: n3147cjL010722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:08:38 splunk3 sendmail[10963]: n3148cMA010963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:09:38 splunk3 sendmail[11205]: n3149cHW011205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:10:03 splunk3 sendmail[11399]: n314A30t011399: from=root, size=292, class=0, nrcpts=1, msgid=<200904010410.n314A30t011399@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 21:10:03 splunk3 sendmail[11404]: n314A3ac011404: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200904010410.n314A30t011399@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 21:10:03 splunk3 sendmail[11399]: n314A30t011399: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n314A3ac011404 Message accepted for delivery)
|
|
Mar 31 21:10:04 splunk3 sendmail[11405]: n314A3ac011404: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:10:18 splunk3 sendmail[11479]: n314AIQP011479: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010410.n314AIRi017678@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:10:18 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60770
|
|
Mar 31 21:10:18 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:10:18 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:10:18 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:10:18 splunk3 spamd[12510]: spamd: processing message <200904010410.n314AIRi017678@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:10:20 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 21:10:20 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60770,mid=<200904010410.n314AIRi017678@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 21:10:20 splunk3 sendmail[11480]: n314AIQP011479: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:10:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:10:39 splunk3 sendmail[11562]: n314Ad2C011562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:11:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:11:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 21:11:39 splunk3 sendmail[11810]: n314BdM4011810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:12:39 splunk3 sendmail[12045]: n314CdFN012045: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:13:39 splunk3 sendmail[12290]: n314DdJJ012290: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:14:39 splunk3 sendmail[12527]: n314EdR7012527: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:15:19 splunk3 sendmail[12698]: n314FJQw012698: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010415.n314FI47018456@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:15:19 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60827
|
|
Mar 31 21:15:19 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:15:19 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:15:19 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:15:19 splunk3 spamd[12510]: spamd: processing message <200904010415.n314FI47018456@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:15:21 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1311 bytes.
|
|
Mar 31 21:15:21 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60827,mid=<200904010415.n314FI47018456@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 21:15:21 splunk3 sendmail[12717]: n314FJQw012698: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:15:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:15:39 splunk3 sendmail[12781]: n314FdK1012781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:16:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:16:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:16:39 splunk3 sendmail[13026]: n314Gdfr013026: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:17:39 splunk3 sendmail[13268]: n314HdeL013268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:18:39 splunk3 sendmail[13535]: n314Idk4013535: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:19:39 splunk3 sendmail[13771]: n314JdFl013771: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:20:19 splunk3 sendmail[13963]: n314KJ78013963: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010420.n314KJ9W019086@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:20:19 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60883
|
|
Mar 31 21:20:19 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:20:19 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:20:19 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:20:19 splunk3 spamd[12510]: spamd: processing message <200904010420.n314KJ9W019086@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:20:21 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 31 21:20:21 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60883,mid=<200904010420.n314KJ9W019086@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 21:20:21 splunk3 sendmail[13964]: n314KJ78013963: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:20:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:20:39 splunk3 sendmail[14027]: n314KdHX014027: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:21:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:21:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:21:39 splunk3 sendmail[14274]: n314LdaK014274: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:22:39 splunk3 sendmail[14525]: n314MdVn014525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:23:39 splunk3 sendmail[14771]: n314Ndt5014771: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:24:39 splunk3 sendmail[15003]: n314Odl7015003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:25:01 splunk3 sendmail[9331]: n3141q8d009331: 118-165-90-184.dynamic.hinet.net [118.165.90.184] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:25:20 splunk3 sendmail[15177]: n314PJ9W015177: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010425.n314PJxg019694@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:25:20 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60938
|
|
Mar 31 21:25:20 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:25:20 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:25:20 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:25:20 splunk3 spamd[12510]: spamd: processing message <200904010425.n314PJxg019694@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:25:22 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1311 bytes.
|
|
Mar 31 21:25:22 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60938,mid=<200904010425.n314PJxg019694@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 21:25:22 splunk3 sendmail[15178]: n314PJ9W015177: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:25:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:25:39 splunk3 sendmail[15256]: n314Pdlx015256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:26:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:26:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 21:26:39 splunk3 sendmail[15501]: n314Qdfc015501: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:27:39 splunk3 sendmail[15740]: n314RdIZ015740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:28:39 splunk3 sendmail[15976]: n314Sdiw015976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:29:39 splunk3 sendmail[16216]: n314TdvP016216: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:30:20 splunk3 sendmail[16391]: n314UKIR016391: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010430.n314UKIs020315@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:30:20 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60995
|
|
Mar 31 21:30:20 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:30:20 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:30:20 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:30:20 splunk3 spamd[12510]: spamd: processing message <200904010430.n314UKIs020315@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:30:22 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 21:30:22 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60995,mid=<200904010430.n314UKIs020315@virt2.int.splunk.com>,bayes=0.112822654586039,autolearn=no
|
|
Mar 31 21:30:22 splunk3 sendmail[16392]: n314UKIR016391: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:30:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:30:39 splunk3 sendmail[16473]: n314UdLe016473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:31:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:31:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:31:34 splunk3 sendmail[16698]: n314VYlm016698: from=<3Je7SSRQKBjASaaSXQMXQdfe-ZadQbXkSaaSXQ.OaYebMYYQebXgZWUf.OaY@alerts.bounces.google.com>, size=3600, class=0, nrcpts=1, msgid=<0016e644cb285116d4046676caaf@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.162]
|
|
Mar 31 21:31:34 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32776
|
|
Mar 31 21:31:34 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:31:34 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:31:34 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:31:34 splunk3 spamd[12510]: spamd: processing message <0016e644cb285116d4046676caaf@google.com> for spamme:501
|
|
Mar 31 21:31:36 splunk3 spamd[12510]: spamd: clean message (-2.2/5.0) for spamme:501 in 1.8 seconds, 4030 bytes.
|
|
Mar 31 21:31:36 splunk3 spamd[12510]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.8,size=4030,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32776,mid=<0016e644cb285116d4046676caaf@google.com>,bayes=2.22044604925031e-16,autolearn=ham
|
|
Mar 31 21:31:36 splunk3 sendmail[16699]: n314VYlm016698: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33811, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:31:36 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:31:39 splunk3 sendmail[16723]: n314Vd3m016723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:32:39 splunk3 sendmail[16959]: n314WdTg016959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:33:39 splunk3 sendmail[17197]: n314Xd5K017197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:34:39 splunk3 sendmail[17433]: n314YdQJ017433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:35:21 splunk3 sendmail[17608]: n314ZLu8017608: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010435.n314ZKaW021056@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:35:21 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32820
|
|
Mar 31 21:35:21 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:35:21 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:35:21 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:35:21 splunk3 spamd[12510]: spamd: processing message <200904010435.n314ZKaW021056@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:35:23 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1311 bytes.
|
|
Mar 31 21:35:23 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32820,mid=<200904010435.n314ZKaW021056@virt2.int.splunk.com>,bayes=0.112854984777754,autolearn=no
|
|
Mar 31 21:35:23 splunk3 sendmail[17609]: n314ZLu8017608: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:35:39 splunk3 sendmail[17688]: n314ZdrO017688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:36:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:36:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:36:39 splunk3 sendmail[17930]: n314adYF017930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:37:39 splunk3 sendmail[18169]: n314bdBV018169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:38:39 splunk3 sendmail[18406]: n314cdCi018406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:39:39 splunk3 sendmail[18643]: n314ddlE018643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:40:21 splunk3 sendmail[18819]: n314eLOL018819: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010440.n314eLOY021698@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:40:21 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32876
|
|
Mar 31 21:40:21 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:40:21 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:40:21 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:40:21 splunk3 spamd[12510]: spamd: processing message <200904010440.n314eLOY021698@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:40:25 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1311 bytes.
|
|
Mar 31 21:40:25 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32876,mid=<200904010440.n314eLOY021698@virt2.int.splunk.com>,bayes=0.112854984777754,autolearn=no
|
|
Mar 31 21:40:25 splunk3 sendmail[18820]: n314eLOL018819: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:40:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:40:39 splunk3 sendmail[18898]: n314edWj018898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:41:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:41:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 21:41:39 splunk3 sendmail[19147]: n314fdT7019147: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:42:39 splunk3 sendmail[19381]: n314gdoZ019381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:43:39 splunk3 sendmail[19621]: n314hd4f019621: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:44:39 splunk3 sendmail[19859]: n314idis019859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:45:22 splunk3 sendmail[20032]: n314jMhZ020032: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010445.n314jL7q022304@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:45:22 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32932
|
|
Mar 31 21:45:22 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:45:22 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:45:22 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:45:22 splunk3 spamd[12510]: spamd: processing message <200904010445.n314jL7q022304@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:45:24 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 21:45:24 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32932,mid=<200904010445.n314jL7q022304@virt2.int.splunk.com>,bayes=0.112854984777754,autolearn=no
|
|
Mar 31 21:45:24 splunk3 sendmail[20033]: n314jMhZ020032: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:45:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:45:39 splunk3 sendmail[20111]: n314jd87020111: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:46:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:46:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:46:39 splunk3 sendmail[20353]: n314kd76020353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:47:39 splunk3 sendmail[20593]: n314ldFO020593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:48:39 splunk3 sendmail[20828]: n314mdn4020828: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:49:39 splunk3 sendmail[21068]: n314ndsE021068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:50:22 splunk3 sendmail[21246]: n314oMAn021246: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010450.n314oMOf022922@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:50:22 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32988
|
|
Mar 31 21:50:22 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:50:22 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:50:22 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:50:22 splunk3 spamd[12510]: spamd: processing message <200904010450.n314oMOf022922@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:50:24 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1311 bytes.
|
|
Mar 31 21:50:24 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32988,mid=<200904010450.n314oMOf022922@virt2.int.splunk.com>,bayes=0.112854984777754,autolearn=no
|
|
Mar 31 21:50:24 splunk3 sendmail[21247]: n314oMAn021246: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:50:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:50:39 splunk3 sendmail[21325]: n314odb3021325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:51:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:51:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:51:39 splunk3 sendmail[21573]: n314pdLi021573: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:52:39 splunk3 sendmail[21803]: n314qdTO021803: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:53:39 splunk3 sendmail[22046]: n314rd7s022046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:54:39 splunk3 sendmail[22281]: n314sdJ9022281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:55:23 splunk3 sendmail[22456]: n314tNXh022456: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010455.n314tNTH023552@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 21:55:23 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33043
|
|
Mar 31 21:55:23 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:55:23 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:55:23 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:55:23 splunk3 spamd[12510]: spamd: processing message <200904010455.n314tNTH023552@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 21:55:25 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1311 bytes.
|
|
Mar 31 21:55:25 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33043,mid=<200904010455.n314tNTH023552@virt2.int.splunk.com>,bayes=0.112854984777754,autolearn=no
|
|
Mar 31 21:55:25 splunk3 sendmail[22457]: n314tNXh022456: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:55:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:55:39 splunk3 sendmail[22535]: n314tdFQ022535: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:56:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 21:56:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 21:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 21:56:39 splunk3 sendmail[22779]: n314ud6v022779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:57:39 splunk3 sendmail[23019]: n314vdNN023019: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:58:39 splunk3 sendmail[23257]: n314wdw9023257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 21:58:41 splunk3 sendmail[23236]: n314wbj8023236: from=<kdjynawnv@bmaccountants.com>, size=998, class=0, nrcpts=1, msgid=<01c9b2c1$31c20180$6150093a@kdjynawnv>, proto=ESMTP, daemon=MTA, relay=ppp-58-9-80-97.revip2.asianet.co.th [58.9.80.97]
|
|
Mar 31 21:58:41 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33077
|
|
Mar 31 21:58:41 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 21:58:41 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 21:58:41 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 21:58:41 splunk3 spamd[12510]: spamd: processing message <01c9b2c1$31c20180$6150093a@kdjynawnv> for spamme:501
|
|
Mar 31 21:58:44 splunk3 spamd[12510]: spamd: identified spam (23.8/5.0) for spamme:501 in 2.8 seconds, 1312 bytes.
|
|
Mar 31 21:58:44 splunk3 spamd[12510]: spamd: result: Y 23 - BAYES_80,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_PH_SURBL,URIBL_WS_SURBL scantime=2.8,size=1312,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33077,mid=<01c9b2c1$31c20180$6150093a@kdjynawnv>,bayes=0.875685349300195,autolearn=spam
|
|
Mar 31 21:58:44 splunk3 sendmail[23258]: n314wbj8023236: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:03, mailer=local, pri=31213, dsn=2.0.0, stat=Sent
|
|
Mar 31 21:58:44 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 21:59:39 splunk3 sendmail[23499]: n314xdZY023499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:00:04 splunk3 sendmail[23665]: n31504S2023665: from=root, size=291, class=0, nrcpts=1, msgid=<200904010500.n31504S2023665@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 22:00:04 splunk3 sendmail[23669]: n31504fG023669: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200904010500.n31504S2023665@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 22:00:04 splunk3 sendmail[23665]: n31504S2023665: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31504fG023669 Message accepted for delivery)
|
|
Mar 31 22:00:08 splunk3 sendmail[23670]: n31504fG023669: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:04, xdelay=00:00:04, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:00:19 splunk3 sendmail[23743]: n3150JbQ023743: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904010500.n3150JbQ023743@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 22:00:19 splunk3 sendmail[23745]: n3150JbQ023743: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 22:00:19 splunk3 sendmail[23745]: n3150JbQ023743: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Mar 31 22:00:19 splunk3 sendmail[23745]: n3150JbQ023743: n3150JbQ023745: postmaster notify: User unknown
|
|
Mar 31 22:00:20 splunk3 sendmail[23745]: n3150JbQ023745: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32095, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:00:24 splunk3 sendmail[23780]: n3150O9n023780: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010500.n3150Nah024197@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:00:24 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33109
|
|
Mar 31 22:00:24 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:00:24 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 22:00:24 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 22:00:24 splunk3 sendmail[23781]: n3150O9n023780: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:00:39 splunk3 sendmail[23838]: n3150dce023838: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:01:06 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:01:09 splunk3 sendmail[23928]: n31512xH023928: from=root, size=443, class=0, nrcpts=1, msgid=<200904010501.n31512xH023928@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 22:01:09 splunk3 sendmail[23973]: n31519oA023973: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200904010501.n31512xH023928@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 22:01:09 splunk3 sendmail[23928]: n31512xH023928: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31519oA023973 Message accepted for delivery)
|
|
Mar 31 22:01:11 splunk3 sendmail[23974]: n31519oA023973: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:01:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:01:39 splunk3 sendmail[24098]: n3151dv4024098: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:02:39 splunk3 sendmail[24334]: n3152dmr024334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:03:39 splunk3 sendmail[24573]: n3153d8l024573: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:04:39 splunk3 sendmail[24810]: n3154dQB024810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:05:24 splunk3 sendmail[25001]: n3155OdS025001: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010505.n3155OX9024872@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:05:24 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33166
|
|
Mar 31 22:05:24 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:05:24 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 22:05:24 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 22:05:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:05:24 splunk3 sendmail[25002]: n3155OdS025001: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:05:39 splunk3 sendmail[25065]: n3155dxK025065: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:06:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:06:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:06:39 splunk3 sendmail[25305]: n3156duw025305: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:07:39 splunk3 sendmail[25542]: n3157dN3025542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:08:39 splunk3 sendmail[25781]: n3158d7R025781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:09:39 splunk3 sendmail[26022]: n3159dnu026022: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:10:02 splunk3 sendmail[26200]: n315A2Bj026200: from=root, size=292, class=0, nrcpts=1, msgid=<200904010510.n315A2Bj026200@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 22:10:02 splunk3 sendmail[26205]: n315A2OK026205: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200904010510.n315A2Bj026200@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 22:10:02 splunk3 sendmail[26200]: n315A2Bj026200: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n315A2OK026205 Message accepted for delivery)
|
|
Mar 31 22:10:03 splunk3 sendmail[26206]: n315A2OK026205: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:10:25 splunk3 sendmail[26319]: n315APgO026319: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010510.n315APtS025494@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:10:25 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33222
|
|
Mar 31 22:10:25 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:10:25 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:10:25 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:10:25 splunk3 spamd[12510]: spamd: processing message <200904010510.n315APtS025494@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:10:27 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 22:10:27 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33222,mid=<200904010510.n315APtS025494@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:10:27 splunk3 sendmail[26320]: n315APgO026319: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:10:39 splunk3 sendmail[26380]: n315AdU2026380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:11:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:11:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 22:11:39 splunk3 sendmail[26630]: n315BdZ9026630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:12:39 splunk3 sendmail[26866]: n315CdJR026866: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:13:39 splunk3 sendmail[27103]: n315Ddpl027103: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:14:39 splunk3 sendmail[27338]: n315EdoP027338: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:15:26 splunk3 sendmail[27533]: n315FQRL027533: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010515.n315FQni026267@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:15:26 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33279
|
|
Mar 31 22:15:26 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:15:26 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:15:26 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:15:26 splunk3 spamd[12510]: spamd: processing message <200904010515.n315FQni026267@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:15:28 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 22:15:28 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33279,mid=<200904010515.n315FQni026267@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:15:28 splunk3 sendmail[27534]: n315FQRL027533: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:15:39 splunk3 sendmail[27591]: n315FdAu027591: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:16:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:16:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:16:39 splunk3 sendmail[27836]: n315GdO8027836: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:17:39 splunk3 sendmail[28075]: n315Hdgl028075: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:18:39 splunk3 sendmail[28311]: n315Id3k028311: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:19:39 splunk3 sendmail[28552]: n315JdXN028552: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:20:27 splunk3 sendmail[28745]: n315KRRu028745: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010520.n315KQ3v026908@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:20:27 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33334
|
|
Mar 31 22:20:27 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:20:27 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:20:27 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:20:27 splunk3 spamd[12510]: spamd: processing message <200904010520.n315KQ3v026908@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:20:29 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 22:20:29 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33334,mid=<200904010520.n315KQ3v026908@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:20:29 splunk3 sendmail[28746]: n315KRRu028745: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:20:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:20:39 splunk3 sendmail[28806]: n315Kd1t028806: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:21:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:21:15 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:21:39 splunk3 sendmail[29053]: n315Ld8w029053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:22:39 splunk3 sendmail[29287]: n315Mdt4029287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:23:39 splunk3 sendmail[29532]: n315NddL029532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:24:39 splunk3 sendmail[29767]: n315OdIl029767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:25:27 splunk3 sendmail[29960]: n315PRXi029960: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010525.n315PRoh027536@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:25:27 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33390
|
|
Mar 31 22:25:27 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:25:27 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:25:27 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:25:27 splunk3 spamd[12510]: spamd: processing message <200904010525.n315PRoh027536@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:25:29 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 22:25:29 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33390,mid=<200904010525.n315PRoh027536@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:25:29 splunk3 sendmail[29961]: n315PRXi029960: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:25:39 splunk3 sendmail[30022]: n315PdFN030022: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:26:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:26:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 22:26:39 splunk3 sendmail[30267]: n315Qd1h030267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:27:39 splunk3 sendmail[30502]: n315RdMc030502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:28:39 splunk3 sendmail[30737]: n315SdA2030737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:29:39 splunk3 sendmail[30975]: n315TdDl030975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:30:28 splunk3 sendmail[31187]: n315USlw031187: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010530.n315US7L028131@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:30:28 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33445
|
|
Mar 31 22:30:28 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:30:28 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:30:28 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:30:28 splunk3 spamd[12510]: spamd: processing message <200904010530.n315US7L028131@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:30:30 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1311 bytes.
|
|
Mar 31 22:30:30 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33445,mid=<200904010530.n315US7L028131@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:30:30 splunk3 sendmail[31189]: n315USlw031187: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:30:39 splunk3 sendmail[31232]: n315Ud9N031232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:31:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:31:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:31:39 splunk3 sendmail[31478]: n315VdAj031478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:32:39 splunk3 sendmail[31715]: n315Wdus031715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:33:39 splunk3 sendmail[31955]: n315Xd2g031955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:34:39 splunk3 sendmail[32188]: n315YdkX032188: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:35:29 splunk3 sendmail[32399]: n315ZTLE032399: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010535.n315ZTf7028900@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:35:29 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33501
|
|
Mar 31 22:35:29 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:35:29 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:35:29 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:35:29 splunk3 spamd[12510]: spamd: processing message <200904010535.n315ZTf7028900@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:35:31 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1311 bytes.
|
|
Mar 31 22:35:31 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33501,mid=<200904010535.n315ZTf7028900@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:35:31 splunk3 sendmail[32400]: n315ZTLE032399: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:35:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:35:39 splunk3 sendmail[32443]: n315Zdj6032443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:36:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:36:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:36:39 splunk3 sendmail[32684]: n315adGa032684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:37:39 splunk3 sendmail[456]: n315bdgF000456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:38:39 splunk3 sendmail[695]: n315cdoQ000695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:39:39 splunk3 sendmail[934]: n315dd8N000934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:40:30 splunk3 sendmail[1146]: n315eTWe001146: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010540.n315eTY2029514@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:40:30 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33557
|
|
Mar 31 22:40:30 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:40:30 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:40:30 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:40:30 splunk3 spamd[12510]: spamd: processing message <200904010540.n315eTY2029514@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:40:32 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 22:40:32 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33557,mid=<200904010540.n315eTY2029514@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:40:32 splunk3 sendmail[1147]: n315eTWe001146: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:40:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:40:39 splunk3 sendmail[1192]: n315ed3d001192: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:41:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:41:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 22:41:39 splunk3 sendmail[1439]: n315fd5B001439: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:42:39 splunk3 sendmail[1674]: n315gdge001674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:43:39 splunk3 sendmail[1910]: n315hdkR001910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:44:39 splunk3 sendmail[2150]: n315id8v002150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:45:00 splunk3 sendmail[2233]: n315j01t002233: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010545.n315j001030052@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:45:00 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33601
|
|
Mar 31 22:45:00 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:45:00 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:45:00 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:45:00 splunk3 spamd[12510]: spamd: processing message <200904010545.n315j001030052@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:45:02 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1311 bytes.
|
|
Mar 31 22:45:02 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33601,mid=<200904010545.n315j001030052@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:45:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:45:02 splunk3 sendmail[2234]: n315j01t002233: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:45:39 splunk3 sendmail[2403]: n315jd0F002403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:46:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:46:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:46:39 splunk3 sendmail[2652]: n315kduj002652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:47:39 splunk3 sendmail[2904]: n315ldAr002904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:48:39 splunk3 sendmail[3145]: n315mdtJ003145: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:49:39 splunk3 sendmail[3386]: n315ndLw003386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:50:00 splunk3 sendmail[3466]: n315o0FX003466: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010550.n315o01C030663@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:50:00 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33657
|
|
Mar 31 22:50:00 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:50:00 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:50:00 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:50:00 splunk3 spamd[12510]: spamd: processing message <200904010550.n315o01C030663@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:50:02 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 22:50:02 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33657,mid=<200904010550.n315o01C030663@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:50:02 splunk3 sendmail[3467]: n315o0FX003466: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:50:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:50:39 splunk3 sendmail[3663]: n315odEu003663: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:51:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:51:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:51:39 splunk3 sendmail[3921]: n315pdNE003921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:52:39 splunk3 sendmail[4169]: n315qdHG004169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:53:39 splunk3 sendmail[4428]: n315rdNQ004428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:54:39 splunk3 sendmail[4667]: n315sdXG004667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:55:01 splunk3 sendmail[4749]: n315t0V3004749: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010555.n315t0MU031271@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 22:55:01 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33712
|
|
Mar 31 22:55:01 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 22:55:01 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 22:55:01 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 22:55:01 splunk3 spamd[12510]: spamd: processing message <200904010555.n315t0MU031271@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 22:55:03 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 22:55:03 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33712,mid=<200904010555.n315t0MU031271@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 22:55:03 splunk3 sendmail[4750]: n315t0V3004749: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 22:55:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 22:55:39 splunk3 sendmail[4926]: n315tdBO004926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:56:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 22:56:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 22:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 22:56:39 splunk3 sendmail[5209]: n315udSV005209: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:57:39 splunk3 sendmail[5450]: n315vdRe005450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:58:39 splunk3 sendmail[5684]: n315wd8I005684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 22:59:39 splunk3 sendmail[5922]: n315xdH6005922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:00:01 splunk3 sendmail[6002]: n31601EE006002: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010600.n316012E031892@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:00:01 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33769
|
|
Mar 31 23:00:01 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:00:01 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:00:01 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:00:01 splunk3 spamd[12510]: spamd: processing message <200904010600.n316012E031892@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:00:03 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1311 bytes.
|
|
Mar 31 23:00:03 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1311,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33769,mid=<200904010600.n316012E031892@virt2.int.splunk.com>,bayes=0.112847508814238,autolearn=no
|
|
Mar 31 23:00:03 splunk3 sendmail[6003]: n31601EE006002: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:00:04 splunk3 sendmail[6090]: n31604MM006090: from=root, size=291, class=0, nrcpts=1, msgid=<200904010600.n31604MM006090@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 23:00:04 splunk3 sendmail[6094]: n31604FO006094: from=<root@splunk3.splunkit.com>, size=566, class=0, nrcpts=1, msgid=<200904010600.n31604MM006090@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 23:00:04 splunk3 sendmail[6090]: n31604MM006090: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31604FO006094 Message accepted for delivery)
|
|
Mar 31 23:00:05 splunk3 sendmail[6095]: n31604FO006094: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30794, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:00:24 splunk3 sendmail[6190]: n3160O2C006190: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904010600.n3160O2C006190@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 23:00:24 splunk3 sendmail[6192]: n3160O2C006190: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Mar 31 23:00:24 splunk3 sendmail[6192]: n3160O2C006190: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Mar 31 23:00:24 splunk3 sendmail[6192]: n3160O2C006190: n3160O2C006192: postmaster notify: User unknown
|
|
Mar 31 23:00:26 splunk3 sendmail[6192]: n3160O2C006192: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32091, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:00:39 splunk3 sendmail[6259]: n3160dUo006259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:01:02 splunk3 sendmail[6349]: n31611fw006349: from=root, size=443, class=0, nrcpts=1, msgid=<200904010601.n31611fw006349@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 23:01:02 splunk3 sendmail[6352]: n31612vd006352: from=<root@splunk3.splunkit.com>, size=718, class=0, nrcpts=1, msgid=<200904010601.n31611fw006349@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 23:01:02 splunk3 sendmail[6349]: n31611fw006349: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31612vd006352 Message accepted for delivery)
|
|
Mar 31 23:01:03 splunk3 sendmail[6353]: n31612vd006352: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30946, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:01:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:01:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:01:39 splunk3 sendmail[6521]: n3161dcU006521: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:02:39 splunk3 sendmail[6754]: n3162dP5006754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:03:39 splunk3 sendmail[6993]: n3163dGB006993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:04:39 splunk3 sendmail[7227]: n3164dgA007227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:05:02 splunk3 sendmail[7313]: n31652UG007313: from=<spammer@spamdomain.com>, size=1034, class=0, nrcpts=1, msgid=<200904010605.n31651kq032640@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:05:02 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33833
|
|
Mar 31 23:05:02 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:05:02 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Mar 31 23:05:02 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Mar 31 23:05:02 splunk3 sendmail[7314]: n31652UG007313: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31227, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:05:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:05:39 splunk3 sendmail[7482]: n3165dih007482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:06:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:06:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:06:39 splunk3 sendmail[7733]: n3166dSb007733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:07:39 splunk3 sendmail[7972]: n3167dP6007972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:08:39 splunk3 sendmail[8210]: n3168dkd008210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:09:39 splunk3 sendmail[8452]: n3169dEi008452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:10:02 splunk3 sendmail[8631]: n316A2m8008631: from=root, size=292, class=0, nrcpts=1, msgid=<200904010610.n316A2m8008631@splunk3.splunkit.com>, relay=root@localhost
|
|
Mar 31 23:10:02 splunk3 sendmail[8636]: n316A27h008636: from=<root@splunk3.splunkit.com>, size=567, class=0, nrcpts=1, msgid=<200904010610.n316A2m8008631@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Mar 31 23:10:02 splunk3 sendmail[8631]: n316A2m8008631: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n316A27h008636 Message accepted for delivery)
|
|
Mar 31 23:10:02 splunk3 sendmail[8639]: n316A2hO008639: from=<spammer@spamdomain.com>, size=1028, class=0, nrcpts=1, msgid=<200904010610.n316A2nC000793@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:10:02 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33890
|
|
Mar 31 23:10:02 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:10:02 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:10:02 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:10:02 splunk3 spamd[12510]: spamd: processing message <200904010610.n316A2nC000793@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:10:04 splunk3 sendmail[8637]: n316A27h008636: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30795, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:10:04 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Mar 31 23:10:04 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33890,mid=<200904010610.n316A2nC000793@virt2.int.splunk.com>,bayes=0.0667487525183583,autolearn=no
|
|
Mar 31 23:10:04 splunk3 sendmail[8642]: n316A2hO008639: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:10:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:10:39 splunk3 sendmail[8811]: n316Adtt008811: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:11:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:11:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 23:11:39 splunk3 sendmail[9058]: n316BdTf009058: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:12:39 splunk3 sendmail[9294]: n316Cdwv009294: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:13:39 splunk3 sendmail[9533]: n316Dduh009533: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:14:39 splunk3 sendmail[9778]: n316Edcl009778: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:15:03 splunk3 sendmail[9879]: n316F226009879: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010615.n316F2C1001597@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:15:03 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33947
|
|
Mar 31 23:15:03 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:15:03 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:15:03 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:15:03 splunk3 spamd[12510]: spamd: processing message <200904010615.n316F2C1001597@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:15:05 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 23:15:05 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33947,mid=<200904010615.n316F2C1001597@virt2.int.splunk.com>,bayes=0.169866279498722,autolearn=no
|
|
Mar 31 23:15:05 splunk3 sendmail[9880]: n316F226009879: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:15:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:15:39 splunk3 sendmail[10032]: n316FdK9010032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:16:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:16:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:16:39 splunk3 sendmail[10273]: n316Gdvu010273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:17:39 splunk3 sendmail[10513]: n316HdJ1010513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:18:39 splunk3 sendmail[10746]: n316IdHQ010746: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:19:39 splunk3 sendmail[10986]: n316JdQR010986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:20:03 splunk3 sendmail[11088]: n316K3kg011088: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010620.n316K34J002249@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:20:03 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34002
|
|
Mar 31 23:20:03 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:20:03 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:20:03 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:20:03 splunk3 spamd[12510]: spamd: processing message <200904010620.n316K34J002249@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:20:05 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 23:20:05 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34002,mid=<200904010620.n316K34J002249@virt2.int.splunk.com>,bayes=0.169866279498722,autolearn=no
|
|
Mar 31 23:20:05 splunk3 sendmail[11089]: n316K3kg011088: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:20:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:20:39 splunk3 sendmail[11243]: n316KdBa011243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:21:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:21:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:21:39 splunk3 sendmail[11490]: n316LdTP011490: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:22:40 splunk3 sendmail[11724]: n316Mekm011724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:23:40 splunk3 sendmail[11968]: n316NeCr011968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:24:00 splunk3 sendmail[12047]: n316NwHU012047: from=<spamme@splunkit.com>, size=2742, class=0, nrcpts=1, msgid=<200904010623.n316NwHU012047@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=c-98-212-73-10.hsd1.in.comcast.net [98.212.73.10]
|
|
Mar 31 23:24:00 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34048
|
|
Mar 31 23:24:00 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:24:00 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:24:00 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:24:00 splunk3 spamd[12510]: spamd: processing message <200904010623.n316NwHU012047@splunk3.splunkit.com> for spamme:501
|
|
Mar 31 23:24:02 splunk3 spamd[12510]: spamd: identified spam (35.2/5.0) for spamme:501 in 1.7 seconds, 3163 bytes.
|
|
Mar 31 23:24:02 splunk3 spamd[12510]: spamd: result: Y 35 - BAYES_99,HELO_DYNAMIC_IPADDR,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.7,size=3163,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34048,mid=<200904010623.n316NwHU012047@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Mar 31 23:24:02 splunk3 sendmail[12049]: n316NwHU012047: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33085, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:24:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:24:40 splunk3 sendmail[12210]: n316Oe3U012210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:25:04 splunk3 sendmail[12309]: n316P4uO012309: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010625.n316P3AG002855@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:25:04 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34059
|
|
Mar 31 23:25:04 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:25:04 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:25:04 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:25:04 splunk3 spamd[12510]: spamd: processing message <200904010625.n316P3AG002855@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:25:06 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 23:25:06 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34059,mid=<200904010625.n316P3AG002855@virt2.int.splunk.com>,bayes=0.169857425254393,autolearn=no
|
|
Mar 31 23:25:06 splunk3 sendmail[12310]: n316P4uO012309: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:25:40 splunk3 sendmail[12461]: n316Peu0012461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:26:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:26:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 23:26:40 splunk3 sendmail[12708]: n316QeER012708: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:27:40 splunk3 sendmail[12944]: n316ReCa012944: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:28:40 splunk3 sendmail[13177]: n316SecA013177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:29:40 splunk3 sendmail[13455]: n316Teih013455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:30:04 splunk3 sendmail[13559]: n316U4hB013559: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010630.n316U4rD003474@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:30:04 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34115
|
|
Mar 31 23:30:04 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:30:04 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:30:04 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:30:04 splunk3 spamd[12510]: spamd: processing message <200904010630.n316U4rD003474@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:30:06 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 23:30:06 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34115,mid=<200904010630.n316U4rD003474@virt2.int.splunk.com>,bayes=0.169857425254393,autolearn=no
|
|
Mar 31 23:30:06 splunk3 sendmail[13560]: n316U4hB013559: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:30:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:30:40 splunk3 sendmail[13711]: n316Ueqd013711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:31:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:31:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:31:40 splunk3 sendmail[13958]: n316Vetf013958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:32:40 splunk3 sendmail[14192]: n316WeFg014192: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:33:40 splunk3 sendmail[14430]: n316XerF014430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:34:40 splunk3 sendmail[14666]: n316Ye3O014666: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:35:05 splunk3 sendmail[14768]: n316Z4x7014768: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010635.n316Z4xP004219@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:35:05 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34171
|
|
Mar 31 23:35:05 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:35:05 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:35:05 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:35:05 splunk3 spamd[12510]: spamd: processing message <200904010635.n316Z4xP004219@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:35:07 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 31 23:35:07 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34171,mid=<200904010635.n316Z4xP004219@virt2.int.splunk.com>,bayes=0.169857425254393,autolearn=no
|
|
Mar 31 23:35:07 splunk3 sendmail[14769]: n316Z4x7014768: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:35:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:35:40 splunk3 sendmail[14922]: n316ZenB014922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:36:05 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:36:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:36:40 splunk3 sendmail[15164]: n316aeIw015164: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:37:40 splunk3 sendmail[15404]: n316behu015404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:38:40 splunk3 sendmail[15644]: n316cejs015644: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:39:40 splunk3 sendmail[15883]: n316devj015883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:40:07 splunk3 sendmail[16003]: n316e7k2016003: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010640.n316e5eb004850@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:40:07 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34227
|
|
Mar 31 23:40:07 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:40:07 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:40:07 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:40:07 splunk3 spamd[12510]: spamd: processing message <200904010640.n316e5eb004850@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:40:09 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 23:40:09 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34227,mid=<200904010640.n316e5eb004850@virt2.int.splunk.com>,bayes=0.169857425254393,autolearn=no
|
|
Mar 31 23:40:09 splunk3 sendmail[16004]: n316e7k2016003: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:40:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:40:40 splunk3 sendmail[16139]: n316eepu016139: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:41:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:41:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 23:41:40 splunk3 sendmail[16387]: n316fetf016387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:42:40 splunk3 sendmail[16622]: n316geou016622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:43:40 splunk3 sendmail[16860]: n316hetE016860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:44:40 splunk3 sendmail[17096]: n316ie81017096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:45:08 splunk3 sendmail[17215]: n316j8bc017215: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010645.n316j76n005473@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:45:08 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34283
|
|
Mar 31 23:45:08 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:45:08 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:45:08 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:45:08 splunk3 spamd[12510]: spamd: processing message <200904010645.n316j76n005473@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:45:10 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Mar 31 23:45:10 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34283,mid=<200904010645.n316j76n005473@virt2.int.splunk.com>,bayes=0.169857425254393,autolearn=no
|
|
Mar 31 23:45:10 splunk3 sendmail[17216]: n316j8bc017215: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:45:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:45:40 splunk3 sendmail[17350]: n316jeqg017350: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:46:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:46:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:46:40 splunk3 sendmail[17590]: n316kebQ017590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:47:40 splunk3 sendmail[17830]: n316leAI017830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:48:40 splunk3 sendmail[18063]: n316me5Z018063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:49:40 splunk3 sendmail[18302]: n316nesu018302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:50:08 splunk3 sendmail[18424]: n316o8xe018424: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010650.n316o83X006089@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:50:08 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34339
|
|
Mar 31 23:50:08 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:50:08 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:50:08 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:50:08 splunk3 spamd[12510]: spamd: processing message <200904010650.n316o83X006089@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:50:10 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Mar 31 23:50:10 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34339,mid=<200904010650.n316o83X006089@virt2.int.splunk.com>,bayes=0.169857425254393,autolearn=no
|
|
Mar 31 23:50:10 splunk3 sendmail[18425]: n316o8xe018424: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:50:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:50:40 splunk3 sendmail[18558]: n316oe20018558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:51:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:51:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:51:40 splunk3 sendmail[18803]: n316pean018803: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:52:40 splunk3 sendmail[19039]: n316qeE7019039: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:53:40 splunk3 sendmail[19289]: n316re0S019289: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:54:40 splunk3 sendmail[19525]: n316seEx019525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:55:09 splunk3 sendmail[19644]: n316t9ig019644: from=<spammer@spamdomain.com>, size=1031, class=0, nrcpts=1, msgid=<200904010655.n316t8a1006696@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Mar 31 23:55:09 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34394
|
|
Mar 31 23:55:09 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Mar 31 23:55:09 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Mar 31 23:55:09 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Mar 31 23:55:09 splunk3 spamd[12510]: spamd: processing message <200904010655.n316t8a1006696@virt2.int.splunk.com> for spamme:501
|
|
Mar 31 23:55:11 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Mar 31 23:55:11 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34394,mid=<200904010655.n316t8a1006696@virt2.int.splunk.com>,bayes=0.169857425254393,autolearn=no
|
|
Mar 31 23:55:11 splunk3 sendmail[19645]: n316t9ig019644: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Mar 31 23:55:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Mar 31 23:55:40 splunk3 sendmail[19779]: n316teTV019779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:56:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Mar 31 23:56:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Mar 31 23:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Mar 31 23:56:40 splunk3 sendmail[20024]: n316ue7d020024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:57:40 splunk3 sendmail[20264]: n316veeO020264: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:58:40 splunk3 sendmail[20495]: n316wejE020495: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Mar 31 23:59:40 splunk3 sendmail[20736]: n316xe0s020736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:00:04 splunk3 sendmail[20904]: n31704tu020904: from=root, size=291, class=0, nrcpts=1, msgid=<200904010700.n31704tu020904@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 00:00:05 splunk3 sendmail[20908]: n31704Te020908: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904010700.n31704tu020904@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 00:00:05 splunk3 sendmail[20904]: n31704tu020904: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31704Te020908 Message accepted for delivery)
|
|
Apr 1 00:00:06 splunk3 sendmail[20909]: n31704Te020908: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:00:09 splunk3 sendmail[20934]: n31709UD020934: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904010700.n317096W007340@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:00:10 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34452
|
|
Apr 1 00:00:10 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:00:10 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 00:00:10 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 00:00:10 splunk3 sendmail[20935]: n31709UD020934: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:00:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:00:30 splunk3 sendmail[21030]: n3170UZv021030: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904010700.n3170UZv021030@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 00:00:30 splunk3 sendmail[21032]: n3170UZv021030: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 00:00:30 splunk3 sendmail[21032]: n3170UZv021030: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 00:00:30 splunk3 sendmail[21032]: n3170UZv021030: n3170UZv021032: postmaster notify: User unknown
|
|
Apr 1 00:00:31 splunk3 sendmail[21032]: n3170UZv021032: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:00:40 splunk3 sendmail[21080]: n3170emc021080: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:01:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:01:10 splunk3 sendmail[21172]: n31711rx021172: from=root, size=443, class=0, nrcpts=1, msgid=<200904010701.n31711rx021172@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 00:01:10 splunk3 sendmail[21220]: n3171A01021220: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904010701.n31711rx021172@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 00:01:10 splunk3 sendmail[21172]: n31711rx021172: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3171A01021220 Message accepted for delivery)
|
|
Apr 1 00:01:12 splunk3 sendmail[21221]: n3171A01021220: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:01:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:01:40 splunk3 sendmail[21341]: n3171e7i021341: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:02:40 splunk3 sendmail[21575]: n3172eWG021575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:03:40 splunk3 sendmail[21813]: n3173eVu021813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:04:40 splunk3 sendmail[22046]: n3174ejW022046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:05:10 splunk3 sendmail[22180]: n3175ADn022180: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904010705.n3175A8J008028@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:05:10 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34523
|
|
Apr 1 00:05:10 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:05:10 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 00:05:10 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 00:05:10 splunk3 sendmail[22181]: n3175ADn022180: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:05:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:05:40 splunk3 sendmail[22298]: n3175eMq022298: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:06:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:06:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:06:40 splunk3 sendmail[22541]: n3176eek022541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:07:40 splunk3 sendmail[22779]: n3177e7g022779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:08:40 splunk3 sendmail[23021]: n3178ekM023021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:09:40 splunk3 sendmail[23263]: n3179eJK023263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:10:02 splunk3 sendmail[23453]: n317A2oA023453: from=root, size=292, class=0, nrcpts=1, msgid=<200904010710.n317A2oA023453@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 00:10:02 splunk3 sendmail[23462]: n317A2V1023462: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904010710.n317A2oA023453@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 00:10:02 splunk3 sendmail[23453]: n317A2oA023453: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n317A2V1023462 Message accepted for delivery)
|
|
Apr 1 00:10:03 splunk3 sendmail[23474]: n317A2V1023462: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:10:11 splunk3 sendmail[23500]: n317ABue023500: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904010710.n317ABwQ008637@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:10:11 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34580
|
|
Apr 1 00:10:11 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:10:11 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:10:11 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:10:11 splunk3 spamd[12510]: spamd: processing message <200904010710.n317ABwQ008637@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:10:13 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 00:10:13 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34580,mid=<200904010710.n317ABwQ008637@virt2.int.splunk.com>,bayes=0.169857425254393,autolearn=no
|
|
Apr 1 00:10:13 splunk3 sendmail[23501]: n317ABue023500: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:10:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:10:40 splunk3 sendmail[23622]: n317AeOu023622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:11:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:11:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 00:11:40 splunk3 sendmail[23869]: n317BeBn023869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:12:40 splunk3 sendmail[24103]: n317CegC024103: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:13:40 splunk3 sendmail[24342]: n317DeCm024342: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:14:40 splunk3 sendmail[24579]: n317Eemc024579: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:15:12 splunk3 sendmail[24730]: n317FCuJ024730: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904010715.n317FCV6009396@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:15:12 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34637
|
|
Apr 1 00:15:12 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:15:12 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:15:12 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:15:12 splunk3 spamd[12510]: spamd: processing message <200904010715.n317FCV6009396@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:15:14 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 00:15:14 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34637,mid=<200904010715.n317FCV6009396@virt2.int.splunk.com>,bayes=0.169857425254393,autolearn=no
|
|
Apr 1 00:15:14 splunk3 sendmail[24731]: n317FCuJ024730: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:15:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:15:40 splunk3 sendmail[24834]: n317Fex8024834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:16:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:16:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:16:40 splunk3 sendmail[25077]: n317Ge3c025077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:17:40 splunk3 sendmail[25317]: n317Hef1025317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:18:40 splunk3 sendmail[25550]: n317IeSd025550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:19:40 splunk3 sendmail[25789]: n317Jev9025789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:20:13 splunk3 sendmail[25942]: n317KC7H025942: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010720.n317KCGB010075@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:20:13 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34692
|
|
Apr 1 00:20:13 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:20:13 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:20:13 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:20:13 splunk3 spamd[12510]: spamd: processing message <200904010720.n317KCGB010075@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:20:15 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 00:20:15 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34692,mid=<200904010720.n317KCGB010075@virt2.int.splunk.com>,bayes=0.112840033673104,autolearn=no
|
|
Apr 1 00:20:15 splunk3 sendmail[25943]: n317KC7H025942: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:20:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:20:40 splunk3 sendmail[26044]: n317Kexj026044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:21:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:21:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:21:40 splunk3 sendmail[26291]: n317Leht026291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:22:40 splunk3 sendmail[26526]: n317Meaw026526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:23:40 splunk3 sendmail[26770]: n317NeTw026770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:24:40 splunk3 sendmail[27005]: n317Oe5j027005: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:25:13 splunk3 sendmail[27154]: n317PDBS027154: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010725.n317PDN7010687@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:25:13 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34748
|
|
Apr 1 00:25:13 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:25:13 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:25:13 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:25:13 splunk3 spamd[12510]: spamd: processing message <200904010725.n317PDN7010687@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:25:15 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 00:25:15 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34748,mid=<200904010725.n317PDN7010687@virt2.int.splunk.com>,bayes=0.112840033673104,autolearn=no
|
|
Apr 1 00:25:15 splunk3 sendmail[27155]: n317PDBS027154: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:25:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:25:40 splunk3 sendmail[27258]: n317PeFq027258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:26:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:26:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 00:26:32 splunk3 sendmail[27481]: n317QVDT027481: from=<3JxfTSRQKBls9HH9E73E7KML-GHK7IER9HH9E7.5HFLI3FF7LIENGDBM.5HF@alerts.bounces.google.com>, size=3513, class=0, nrcpts=1, msgid=<000e0cd2e67c0ece950466793c84@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 1 00:26:32 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34763
|
|
Apr 1 00:26:32 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:26:32 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:26:32 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:26:32 splunk3 spamd[12510]: spamd: processing message <000e0cd2e67c0ece950466793c84@google.com> for spamme:501
|
|
Apr 1 00:26:34 splunk3 spamd[12510]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.4 seconds, 3947 bytes.
|
|
Apr 1 00:26:34 splunk3 spamd[12510]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.4,size=3947,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34763,mid=<000e0cd2e67c0ece950466793c84@google.com>,bayes=1.66533453693773e-16,autolearn=ham
|
|
Apr 1 00:26:34 splunk3 sendmail[27483]: n317QVDT027481: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33728, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:26:34 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:26:40 splunk3 sendmail[27508]: n317QeTa027508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:27:40 splunk3 sendmail[27748]: n317Relm027748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:28:40 splunk3 sendmail[27981]: n317Seir027981: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:29:40 splunk3 sendmail[28222]: n317TehQ028222: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:30:14 splunk3 sendmail[28375]: n317UEAe028375: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010730.n317UDkG011313@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:30:14 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34805
|
|
Apr 1 00:30:14 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:30:14 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:30:14 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:30:14 splunk3 spamd[12510]: spamd: processing message <200904010730.n317UDkG011313@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:30:16 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 00:30:16 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34805,mid=<200904010730.n317UDkG011313@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 00:30:16 splunk3 sendmail[28376]: n317UEAe028375: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:30:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:30:40 splunk3 sendmail[28478]: n317UeBV028478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:31:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:31:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:31:40 splunk3 sendmail[28725]: n317Vep8028725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:32:40 splunk3 sendmail[28959]: n317Wev2028959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:33:40 splunk3 sendmail[29197]: n317XeUp029197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:34:40 splunk3 sendmail[29432]: n317Ye81029432: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:35:14 splunk3 sendmail[29584]: n317ZErg029584: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010735.n317ZEck012059@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:35:14 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34861
|
|
Apr 1 00:35:14 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:35:14 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:35:14 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:35:14 splunk3 spamd[12510]: spamd: processing message <200904010735.n317ZEck012059@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:35:16 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 00:35:16 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34861,mid=<200904010735.n317ZEck012059@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 00:35:16 splunk3 sendmail[29585]: n317ZErg029584: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:35:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:35:40 splunk3 sendmail[29687]: n317Zefd029687: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:36:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:36:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:36:40 splunk3 sendmail[29929]: n317aeJp029929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:37:40 splunk3 sendmail[30167]: n317beLk030167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:38:40 splunk3 sendmail[30405]: n317cesR030405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:39:40 splunk3 sendmail[30645]: n317de8T030645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:40:15 splunk3 sendmail[30796]: n317eFI5030796: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010740.n317eEg9012690@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:40:15 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34916
|
|
Apr 1 00:40:15 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:40:15 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:40:15 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:40:15 splunk3 spamd[12510]: spamd: processing message <200904010740.n317eEg9012690@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:40:17 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 00:40:17 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34916,mid=<200904010740.n317eEg9012690@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 00:40:17 splunk3 sendmail[30797]: n317eFI5030796: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:40:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:40:40 splunk3 sendmail[30898]: n317eerZ030898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:41:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:41:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 00:41:40 splunk3 sendmail[31146]: n317fevx031146: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:42:40 splunk3 sendmail[31380]: n317geiw031380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:43:40 splunk3 sendmail[31621]: n317heMF031621: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:44:40 splunk3 sendmail[31858]: n317ief0031858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:45:15 splunk3 sendmail[32007]: n317jFc8032007: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010745.n317jFRa013301@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:45:15 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34973
|
|
Apr 1 00:45:15 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:45:15 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:45:15 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:45:15 splunk3 spamd[12510]: spamd: processing message <200904010745.n317jFRa013301@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:45:17 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Apr 1 00:45:17 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34973,mid=<200904010745.n317jFRa013301@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 00:45:17 splunk3 sendmail[32008]: n317jFc8032007: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:45:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:45:40 splunk3 sendmail[32113]: n317je7q032113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:46:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:46:14 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:46:40 splunk3 sendmail[32357]: n317keAm032357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:47:40 splunk3 sendmail[32593]: n317le0w032593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:48:40 splunk3 sendmail[361]: n317meNh000361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:49:40 splunk3 sendmail[600]: n317neGX000600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:50:16 splunk3 sendmail[755]: n317oGwI000755: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010750.n317oFSU013913@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:50:16 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35028
|
|
Apr 1 00:50:16 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:50:16 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:50:16 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:50:16 splunk3 spamd[12510]: spamd: processing message <200904010750.n317oFSU013913@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:50:18 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 00:50:18 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35028,mid=<200904010750.n317oFSU013913@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 00:50:18 splunk3 sendmail[756]: n317oGwI000755: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:50:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:50:40 splunk3 sendmail[858]: n317oedZ000858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:51:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:51:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:51:40 splunk3 sendmail[1105]: n317peFs001105: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:52:40 splunk3 sendmail[1340]: n317qeRt001340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:53:40 splunk3 sendmail[1583]: n317reRN001583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:54:40 splunk3 sendmail[1816]: n317se0l001816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:55:17 splunk3 sendmail[1990]: n317tHBL001990: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010755.n317tGk6014526@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 00:55:17 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35084
|
|
Apr 1 00:55:17 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 00:55:17 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 00:55:17 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 00:55:17 splunk3 spamd[12510]: spamd: processing message <200904010755.n317tGk6014526@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 00:55:19 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 00:55:19 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35084,mid=<200904010755.n317tGk6014526@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 00:55:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 00:55:19 splunk3 sendmail[1991]: n317tHBL001990: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 00:55:40 splunk3 sendmail[2070]: n317tec3002070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:56:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 00:56:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 00:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 00:56:40 splunk3 sendmail[2315]: n317uewA002315: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:57:40 splunk3 sendmail[2554]: n317vemL002554: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:58:40 splunk3 sendmail[2802]: n317weZ5002802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 00:59:40 splunk3 sendmail[3054]: n317xeT1003054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:00:04 splunk3 sendmail[3219]: n31804Rt003219: from=root, size=291, class=0, nrcpts=1, msgid=<200904010800.n31804Rt003219@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 01:00:06 splunk3 sendmail[3223]: n31804gF003223: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904010800.n31804Rt003219@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 01:00:06 splunk3 sendmail[3219]: n31804Rt003219: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:02, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31804gF003223 Message accepted for delivery)
|
|
Apr 1 01:00:07 splunk3 sendmail[3240]: n31804gF003223: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:00:08 splunk3 sendmail[3257]: n31808Ed003257: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904010800.n31808Ed003257@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 01:00:08 splunk3 sendmail[3259]: n31808Ed003257: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 01:00:08 splunk3 sendmail[3259]: n31808Ed003257: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 1 01:00:08 splunk3 sendmail[3259]: n31808Ed003257: n31808Ed003259: postmaster notify: User unknown
|
|
Apr 1 01:00:10 splunk3 sendmail[3259]: n31808Ed003259: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:00:18 splunk3 sendmail[3312]: n3180HAf003312: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010800.n3180H4B015165@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:00:18 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35149
|
|
Apr 1 01:00:18 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:00:18 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 01:00:18 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 01:00:18 splunk3 sendmail[3313]: n3180HAf003312: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:00:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:00:40 splunk3 sendmail[3394]: n3180e26003394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:01:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:01:08 splunk3 sendmail[3498]: n31811oi003498: from=root, size=443, class=0, nrcpts=1, msgid=<200904010801.n31811oi003498@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 01:01:08 splunk3 sendmail[3527]: n31818aP003527: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904010801.n31811oi003498@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 01:01:08 splunk3 sendmail[3498]: n31811oi003498: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31818aP003527 Message accepted for delivery)
|
|
Apr 1 01:01:10 splunk3 sendmail[3528]: n31818aP003527: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:01:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:01:40 splunk3 sendmail[3676]: n3181e58003676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:02:40 splunk3 sendmail[3921]: n3182euR003921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:03:40 splunk3 sendmail[4174]: n3183eeM004174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:04:40 splunk3 sendmail[4425]: n3184eia004425: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:05:18 splunk3 sendmail[4597]: n3185IeJ004597: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010805.n3185IZp015847@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:05:18 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35205
|
|
Apr 1 01:05:18 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:05:18 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 01:05:18 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 01:05:18 splunk3 sendmail[4598]: n3185IeJ004597: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:05:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:05:40 splunk3 sendmail[4680]: n3185ePK004680: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:06:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:06:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:06:40 splunk3 sendmail[4931]: n3186eqh004931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:07:40 splunk3 sendmail[5207]: n3187eLJ005207: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:08:40 splunk3 sendmail[5450]: n3188enK005450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:09:40 splunk3 sendmail[5691]: n3189e0Z005691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:10:03 splunk3 sendmail[5884]: n318A34U005884: from=root, size=292, class=0, nrcpts=1, msgid=<200904010810.n318A34U005884@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 01:10:03 splunk3 sendmail[5889]: n318A3Hx005889: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904010810.n318A34U005884@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 01:10:03 splunk3 sendmail[5884]: n318A34U005884: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n318A3Hx005889 Message accepted for delivery)
|
|
Apr 1 01:10:04 splunk3 sendmail[5890]: n318A3Hx005889: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:10:18 splunk3 sendmail[5969]: n318AIOI005969: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010810.n318AIRE016456@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:10:18 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35262
|
|
Apr 1 01:10:18 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:10:18 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:10:18 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:10:18 splunk3 spamd[12510]: spamd: processing message <200904010810.n318AIRE016456@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:10:20 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 01:10:20 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35262,mid=<200904010810.n318AIRE016456@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:10:20 splunk3 sendmail[5970]: n318AIOI005969: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:10:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:10:35 splunk3 sendmail[5929]: n318AVoI005929: <me@splunkit.com>... User unknown
|
|
Apr 1 01:10:40 splunk3 sendmail[6050]: n318AeKO006050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:11:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:11:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 01:11:40 splunk3 sendmail[6299]: n318Bemb006299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:12:40 splunk3 sendmail[6533]: n318Ce3r006533: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:13:40 splunk3 sendmail[6771]: n318DeaI006771: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:14:40 splunk3 sendmail[7007]: n318EeGW007007: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:15:19 splunk3 sendmail[7177]: n318FJVG007177: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010815.n318FJO5017251@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:15:19 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35318
|
|
Apr 1 01:15:19 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:15:19 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:15:19 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:15:19 splunk3 spamd[12510]: spamd: processing message <200904010815.n318FJO5017251@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:15:21 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 01:15:21 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35318,mid=<200904010815.n318FJO5017251@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:15:21 splunk3 sendmail[7178]: n318FJVG007177: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:15:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:15:40 splunk3 sendmail[7259]: n318FeMv007259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:16:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:16:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:16:40 splunk3 sendmail[7502]: n318GeDj007502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:17:40 splunk3 sendmail[7751]: n318HetB007751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:18:40 splunk3 sendmail[7986]: n318IeL7007986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:19:40 splunk3 sendmail[8227]: n318Jelw008227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:20:19 splunk3 sendmail[8402]: n318KJUG008402: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010820.n318KJLj017883@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:20:19 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35374
|
|
Apr 1 01:20:19 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:20:19 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:20:19 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:20:19 splunk3 spamd[12510]: spamd: processing message <200904010820.n318KJLj017883@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:20:21 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 01:20:21 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35374,mid=<200904010820.n318KJLj017883@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:20:21 splunk3 sendmail[8403]: n318KJUG008402: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:20:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:20:40 splunk3 sendmail[8500]: n318Kea1008500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:21:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:21:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:21:40 splunk3 sendmail[8745]: n318LeUD008745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:22:40 splunk3 sendmail[8978]: n318MeUl008978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:23:40 splunk3 sendmail[9222]: n318Nekg009222: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:24:40 splunk3 sendmail[9458]: n318OeIB009458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:25:20 splunk3 sendmail[9626]: n318PK7C009626: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010825.n318PKEI018494@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:25:20 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35429
|
|
Apr 1 01:25:20 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:25:20 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:25:20 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:25:20 splunk3 spamd[12510]: spamd: processing message <200904010825.n318PKEI018494@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:25:22 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 01:25:22 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35429,mid=<200904010825.n318PKEI018494@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:25:22 splunk3 sendmail[9627]: n318PK7C009626: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:25:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:25:40 splunk3 sendmail[9722]: n318Pebg009722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:26:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:26:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 01:26:40 splunk3 sendmail[9967]: n318QeEd009967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:27:40 splunk3 sendmail[10206]: n318RelY010206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:28:40 splunk3 sendmail[10440]: n318SeMI010440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:29:40 splunk3 sendmail[10679]: n318Tesw010679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:30:20 splunk3 sendmail[10853]: n318UKwl010853: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010830.n318UKka019122@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:30:20 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35486
|
|
Apr 1 01:30:20 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:30:20 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:30:20 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:30:20 splunk3 spamd[12510]: spamd: processing message <200904010830.n318UKka019122@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:30:22 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 01:30:22 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35486,mid=<200904010830.n318UKka019122@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:30:22 splunk3 sendmail[10854]: n318UKwl010853: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:30:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:30:40 splunk3 sendmail[10935]: n318UeF1010935: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:31:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:31:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:31:40 splunk3 sendmail[11182]: n318Ve29011182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:32:41 splunk3 sendmail[11418]: n318Wfm7011418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:33:41 splunk3 sendmail[11657]: n318XfFb011657: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:34:41 splunk3 sendmail[11893]: n318YfK9011893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:35:21 splunk3 sendmail[12067]: n318ZLOI012067: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010835.n318ZLNx019864@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:35:21 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35541
|
|
Apr 1 01:35:21 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:35:21 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:35:21 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:35:21 splunk3 spamd[12510]: spamd: processing message <200904010835.n318ZLNx019864@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:35:23 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 1 01:35:23 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35541,mid=<200904010835.n318ZLNx019864@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:35:23 splunk3 sendmail[12068]: n318ZLOI012067: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:35:41 splunk3 sendmail[12147]: n318ZfPl012147: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:36:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:36:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:36:41 splunk3 sendmail[12389]: n318afeX012389: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:37:41 splunk3 sendmail[12629]: n318bfCt012629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:38:41 splunk3 sendmail[12869]: n318cfTf012869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:39:41 splunk3 sendmail[13109]: n318df2i013109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:40:22 splunk3 sendmail[13312]: n318eLFJ013312: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010840.n318eLl2020501@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:40:22 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35597
|
|
Apr 1 01:40:22 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:40:22 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:40:22 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:40:22 splunk3 spamd[12510]: spamd: processing message <200904010840.n318eLl2020501@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:40:26 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1308 bytes.
|
|
Apr 1 01:40:26 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35597,mid=<200904010840.n318eLl2020501@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:40:26 splunk3 sendmail[13315]: n318eLFJ013312: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:40:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:40:41 splunk3 sendmail[13404]: n318efkn013404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:41:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:41:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 01:41:41 splunk3 sendmail[13653]: n318ffBX013653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:42:41 splunk3 sendmail[13886]: n318gfEu013886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:43:41 splunk3 sendmail[14124]: n318hfg1014124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:44:41 splunk3 sendmail[14360]: n318ifWf014360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:45:22 splunk3 sendmail[14533]: n318jMmk014533: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010845.n318jMLe021112@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:45:22 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35654
|
|
Apr 1 01:45:22 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:45:22 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:45:22 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:45:22 splunk3 spamd[12510]: spamd: processing message <200904010845.n318jMLe021112@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:45:24 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 01:45:24 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35654,mid=<200904010845.n318jMLe021112@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:45:24 splunk3 sendmail[14534]: n318jMmk014533: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:45:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:45:41 splunk3 sendmail[14614]: n318jfw9014614: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:46:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:46:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:46:41 splunk3 sendmail[14856]: n318kfsY014856: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:47:41 splunk3 sendmail[15095]: n318lfJ0015095: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:48:41 splunk3 sendmail[15330]: n318mfSv015330: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:49:41 splunk3 sendmail[15568]: n318nffG015568: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:50:23 splunk3 sendmail[15744]: n318oNbB015744: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010850.n318oMa1021741@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:50:23 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35709
|
|
Apr 1 01:50:23 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:50:23 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:50:23 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:50:23 splunk3 spamd[12510]: spamd: processing message <200904010850.n318oMa1021741@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:50:25 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 01:50:25 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35709,mid=<200904010850.n318oMa1021741@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:50:25 splunk3 sendmail[15745]: n318oNbB015744: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:50:41 splunk3 sendmail[15824]: n318ofM1015824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:51:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:51:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:51:41 splunk3 sendmail[16071]: n318pfIw016071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:52:41 splunk3 sendmail[16306]: n318qfbg016306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:53:41 splunk3 sendmail[16550]: n318rftS016550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:54:41 splunk3 sendmail[16787]: n318sfR9016787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:55:23 splunk3 sendmail[16962]: n318tNIW016962: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010855.n318tNpL022345@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 01:55:23 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35765
|
|
Apr 1 01:55:23 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 01:55:23 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 01:55:23 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 01:55:23 splunk3 spamd[12510]: spamd: processing message <200904010855.n318tNpL022345@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 01:55:25 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 01:55:25 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35765,mid=<200904010855.n318tNpL022345@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 01:55:25 splunk3 sendmail[16963]: n318tNIW016962: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 01:55:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 01:55:41 splunk3 sendmail[17041]: n318tfsF017041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:56:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 01:56:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 01:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 01:56:41 splunk3 sendmail[17284]: n318ufgA017284: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:57:41 splunk3 sendmail[17522]: n318vfKg017522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:58:41 splunk3 sendmail[17757]: n318wfSE017757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 01:59:41 splunk3 sendmail[17998]: n318xfhd017998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:00:04 splunk3 sendmail[18159]: n31904kQ018159: from=root, size=291, class=0, nrcpts=1, msgid=<200904010900.n31904kQ018159@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 02:00:04 splunk3 sendmail[18163]: n31904Qh018163: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904010900.n31904kQ018159@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 02:00:04 splunk3 sendmail[18159]: n31904kQ018159: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31904Qh018163 Message accepted for delivery)
|
|
Apr 1 02:00:06 splunk3 sendmail[18164]: n31904Qh018163: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:00:14 splunk3 sendmail[18222]: n3190EcO018222: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904010900.n3190EcO018222@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 02:00:14 splunk3 sendmail[18224]: n3190EcO018222: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 02:00:14 splunk3 sendmail[18224]: n3190EcO018222: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 02:00:14 splunk3 sendmail[18224]: n3190EcO018222: n3190EcO018224: postmaster notify: User unknown
|
|
Apr 1 02:00:16 splunk3 sendmail[18224]: n3190EcO018224: to=root, delay=00:00:02, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:00:24 splunk3 sendmail[18257]: n3190OtJ018257: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010900.n3190NVv022987@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:00:24 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35829
|
|
Apr 1 02:00:24 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:00:24 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 02:00:24 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 02:00:24 splunk3 sendmail[18258]: n3190OtJ018257: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:00:41 splunk3 sendmail[18336]: n3190fr8018336: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:01:03 splunk3 sendmail[18422]: n31911ce018422: from=root, size=443, class=0, nrcpts=1, msgid=<200904010901.n31911ce018422@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 02:01:03 splunk3 sendmail[18431]: n31913bB018431: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904010901.n31911ce018422@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 02:01:03 splunk3 sendmail[18422]: n31911ce018422: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31913bB018431 Message accepted for delivery)
|
|
Apr 1 02:01:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:01:05 splunk3 sendmail[18432]: n31913bB018431: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:01:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:01:41 splunk3 sendmail[18595]: n3191fP0018595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:02:41 splunk3 sendmail[18830]: n3192ftq018830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:03:41 splunk3 sendmail[19066]: n3193fqU019066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:04:41 splunk3 sendmail[19301]: n3194fvf019301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:05:24 splunk3 sendmail[19474]: n3195O7Q019474: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010905.n3195OTE023696@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:05:24 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35886
|
|
Apr 1 02:05:24 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:05:24 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 02:05:24 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 02:05:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:05:24 splunk3 sendmail[19475]: n3195O7Q019474: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:05:41 splunk3 sendmail[19553]: n3195frI019553: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:06:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:06:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:06:41 splunk3 sendmail[19797]: n3196fPY019797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:07:41 splunk3 sendmail[20036]: n3197fPx020036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:08:41 splunk3 sendmail[20276]: n3198fg5020276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:09:41 splunk3 sendmail[20518]: n3199f9a020518: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:10:02 splunk3 sendmail[20696]: n319A21o020696: from=root, size=292, class=0, nrcpts=1, msgid=<200904010910.n319A21o020696@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 02:10:03 splunk3 sendmail[20701]: n319A2KX020701: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904010910.n319A21o020696@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 02:10:03 splunk3 sendmail[20696]: n319A21o020696: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n319A2KX020701 Message accepted for delivery)
|
|
Apr 1 02:10:04 splunk3 sendmail[20702]: n319A2KX020701: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:10:25 splunk3 sendmail[20814]: n319APkv020814: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010910.n319AOol024317@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:10:25 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35942
|
|
Apr 1 02:10:25 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:10:25 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:10:25 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:10:25 splunk3 spamd[12510]: spamd: processing message <200904010910.n319AOol024317@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:10:27 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 02:10:27 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35942,mid=<200904010910.n319AOol024317@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 02:10:27 splunk3 sendmail[20815]: n319APkv020814: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:10:35 splunk3 sendmail[5929]: n318AVoI005929: timeout waiting for input from [86.99.50.7] during server cmd read
|
|
Apr 1 02:10:35 splunk3 sendmail[5929]: n318AVoI005929: lost input channel from [86.99.50.7] to MTA after rcpt
|
|
Apr 1 02:10:35 splunk3 sendmail[5929]: n318AVoI005929: from=<qatartradefinan2@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[86.99.50.7]
|
|
Apr 1 02:10:41 splunk3 sendmail[20875]: n319AfcX020875: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:11:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:11:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 02:11:41 splunk3 sendmail[21124]: n319Bflf021124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:12:41 splunk3 sendmail[21359]: n319CfA0021359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:13:41 splunk3 sendmail[21599]: n319DfkQ021599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:14:41 splunk3 sendmail[21835]: n319EfqV021835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:15:25 splunk3 sendmail[22028]: n319FPlh022028: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010915.n319FPwQ025108@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:15:25 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35999
|
|
Apr 1 02:15:25 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:15:25 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:15:25 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:15:25 splunk3 spamd[12510]: spamd: processing message <200904010915.n319FPwQ025108@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:15:27 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 1 02:15:27 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35999,mid=<200904010915.n319FPwQ025108@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 02:15:27 splunk3 sendmail[22029]: n319FPlh022028: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:15:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:15:41 splunk3 sendmail[22091]: n319Fffs022091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:16:04 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:16:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:16:41 splunk3 sendmail[22334]: n319GfJe022334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:17:41 splunk3 sendmail[22570]: n319Hf6F022570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:18:41 splunk3 sendmail[22802]: n319IfM1022802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:19:41 splunk3 sendmail[23043]: n319Jflh023043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:20:26 splunk3 sendmail[23236]: n319KQCn023236: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010920.n319KPLu025743@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:20:26 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36054
|
|
Apr 1 02:20:26 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:20:26 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:20:26 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:20:26 splunk3 spamd[12510]: spamd: processing message <200904010920.n319KPLu025743@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:20:28 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 1 02:20:28 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36054,mid=<200904010920.n319KPLu025743@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 02:20:28 splunk3 sendmail[23237]: n319KQCn023236: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:20:41 splunk3 sendmail[23300]: n319Kfa8023300: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:21:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:21:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:21:41 splunk3 sendmail[23546]: n319LfHE023546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:22:41 splunk3 sendmail[23781]: n319MfdW023781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:23:41 splunk3 sendmail[24026]: n319NfEW024026: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:24:41 splunk3 sendmail[24259]: n319OfCX024259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:25:26 splunk3 sendmail[24452]: n319PQWf024452: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010925.n319PQeC026349@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:25:26 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36110
|
|
Apr 1 02:25:26 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:25:26 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:25:26 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:25:26 splunk3 spamd[12510]: spamd: processing message <200904010925.n319PQeC026349@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:25:28 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 02:25:28 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36110,mid=<200904010925.n319PQeC026349@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 02:25:28 splunk3 sendmail[24453]: n319PQWf024452: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:25:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:25:41 splunk3 sendmail[24512]: n319Pfpi024512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:26:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:26:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 02:26:41 splunk3 sendmail[24757]: n319QfNP024757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:27:41 splunk3 sendmail[24996]: n319RfEP024996: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:28:41 splunk3 sendmail[25231]: n319SfU6025231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:29:41 splunk3 sendmail[25473]: n319TfL7025473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:30:27 splunk3 sendmail[25667]: n319UR7h025667: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010930.n319UQYS026976@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:30:27 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36165
|
|
Apr 1 02:30:27 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:30:27 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:30:27 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:30:27 splunk3 spamd[12510]: spamd: processing message <200904010930.n319UQYS026976@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:30:29 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 1 02:30:29 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36165,mid=<200904010930.n319UQYS026976@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 02:30:29 splunk3 sendmail[25668]: n319UR7h025667: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:30:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:30:41 splunk3 sendmail[25729]: n319Uf9H025729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:31:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:31:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:31:41 splunk3 sendmail[25975]: n319VfWX025975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:32:41 splunk3 sendmail[26210]: n319WfXg026210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:33:41 splunk3 sendmail[26448]: n319XfbE026448: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:34:41 splunk3 sendmail[26684]: n319Yfg9026684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:35:27 splunk3 sendmail[26874]: n319ZRe7026874: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010935.n319ZRSS027747@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:35:27 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36221
|
|
Apr 1 02:35:27 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:35:27 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:35:27 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:35:27 splunk3 spamd[12510]: spamd: processing message <200904010935.n319ZRSS027747@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:35:29 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 02:35:29 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36221,mid=<200904010935.n319ZRSS027747@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 02:35:29 splunk3 sendmail[26875]: n319ZRe7026874: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:35:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:35:41 splunk3 sendmail[26937]: n319ZfOB026937: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:36:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:36:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:36:41 splunk3 sendmail[27179]: n319af6Y027179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:37:41 splunk3 sendmail[27418]: n319bfDe027418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:38:41 splunk3 sendmail[27656]: n319cfK3027656: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:39:41 splunk3 sendmail[27895]: n319dfr1027895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:40:27 splunk3 sendmail[28089]: n319eR6C028089: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010940.n319eRmV028354@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:40:28 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36277
|
|
Apr 1 02:40:28 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:40:28 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:40:28 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:40:28 splunk3 spamd[12510]: spamd: processing message <200904010940.n319eRmV028354@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:40:30 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 1 02:40:30 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36277,mid=<200904010940.n319eRmV028354@virt2.int.splunk.com>,bayes=0.11287236086641,autolearn=no
|
|
Apr 1 02:40:30 splunk3 sendmail[28091]: n319eR6C028089: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:40:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:40:41 splunk3 sendmail[28150]: n319ef7k028150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:41:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:41:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 02:41:41 splunk3 sendmail[28400]: n319ffKl028400: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:42:39 splunk3 sendmail[28634]: n319gdBi028634: from=<3DjfTSRQKBmIGOOGLEALERTS-NOREPLYGOOGLE.COMSPAMMESPLUNKIT.COM@alerts.bounces.google.com>, size=3378, class=0, nrcpts=1, msgid=<0016361e86aede65c404667b2266@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 1 02:42:39 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36300
|
|
Apr 1 02:42:39 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:42:39 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:42:39 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:42:39 splunk3 spamd[12510]: spamd: processing message <0016361e86aede65c404667b2266@google.com> for spamme:501
|
|
Apr 1 02:42:41 splunk3 sendmail[28640]: n319gfxs028640: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:42:41 splunk3 spamd[12510]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.3 seconds, 3812 bytes.
|
|
Apr 1 02:42:41 splunk3 spamd[12510]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.3,size=3812,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36300,mid=<0016361e86aede65c404667b2266@google.com>,bayes=0,autolearn=ham
|
|
Apr 1 02:42:41 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:42:41 splunk3 sendmail[28635]: n319gdBi028634: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33593, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:42:58 splunk3 sendmail[28701]: n319gugn028701: from=<spamme@splunkit.com>, size=2757, class=0, nrcpts=1, msgid=<200904010942.n319gugn028701@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=adsl-6-75-109.msy.bellsouth.net [65.6.75.109]
|
|
Apr 1 02:42:58 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36303
|
|
Apr 1 02:42:58 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:42:58 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:42:58 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:42:58 splunk3 spamd[12510]: spamd: processing message <200904010942.n319gugn028701@splunk3.splunkit.com> for spamme:501
|
|
Apr 1 02:43:01 splunk3 spamd[12510]: spamd: identified spam (35.6/5.0) for spamme:501 in 2.7 seconds, 3169 bytes.
|
|
Apr 1 02:43:01 splunk3 spamd[12510]: spamd: result: Y 35 - BAYES_99,HELO_DYNAMIC_DHCP,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.7,size=3169,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36303,mid=<200904010942.n319gugn028701@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 1 02:43:01 splunk3 sendmail[28707]: n319gugn028701: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:03, mailer=local, pri=33091, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:43:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:43:41 splunk3 sendmail[28886]: n319hfxR028886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:44:41 splunk3 sendmail[29123]: n319ifwZ029123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:45:28 splunk3 sendmail[29315]: n319jS4n029315: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010945.n319jSWs028996@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:45:28 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36335
|
|
Apr 1 02:45:28 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:45:28 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:45:28 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:45:28 splunk3 spamd[12510]: spamd: processing message <200904010945.n319jSWs028996@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:45:30 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 02:45:30 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36335,mid=<200904010945.n319jSWs028996@virt2.int.splunk.com>,bayes=0.112897210742243,autolearn=no
|
|
Apr 1 02:45:30 splunk3 sendmail[29316]: n319jS4n029315: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:45:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:45:41 splunk3 sendmail[29374]: n319jf2Y029374: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:46:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:46:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:46:41 splunk3 sendmail[29617]: n319kfc8029617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:47:41 splunk3 sendmail[29856]: n319lfJL029856: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:48:41 splunk3 sendmail[30092]: n319mfF7030092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:49:41 splunk3 sendmail[30331]: n319nfuf030331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:50:28 splunk3 sendmail[30540]: n319oSuv030540: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010950.n319oSjQ029585@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:50:28 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36391
|
|
Apr 1 02:50:28 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:50:28 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:50:28 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:50:28 splunk3 spamd[12510]: spamd: processing message <200904010950.n319oSjQ029585@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:50:30 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 02:50:30 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36391,mid=<200904010950.n319oSjQ029585@virt2.int.splunk.com>,bayes=0.112897210742243,autolearn=no
|
|
Apr 1 02:50:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:50:30 splunk3 sendmail[30541]: n319oSuv030540: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:50:41 splunk3 sendmail[30586]: n319ofOP030586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:51:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:51:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:51:41 splunk3 sendmail[30833]: n319pfB6030833: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:52:41 splunk3 sendmail[31066]: n319qfCu031066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:53:41 splunk3 sendmail[31310]: n319rfVO031310: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:54:41 splunk3 sendmail[31544]: n319sfIo031544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:55:29 splunk3 sendmail[31752]: n319tTMD031752: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904010955.n319tSoY030218@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 02:55:29 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36446
|
|
Apr 1 02:55:29 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:55:29 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:55:29 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:55:29 splunk3 spamd[12510]: spamd: processing message <200904010955.n319tSoY030218@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 02:55:31 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 02:55:31 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36446,mid=<200904010955.n319tSoY030218@virt2.int.splunk.com>,bayes=0.112897210742243,autolearn=no
|
|
Apr 1 02:55:31 splunk3 sendmail[31753]: n319tTMD031752: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:55:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:55:41 splunk3 sendmail[31797]: n319tf3v031797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:56:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 02:56:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 02:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 02:56:39 splunk3 sendmail[32038]: n319uccO032038: from=<3VjrTSRQKBq0TbbTYRNYRegf-abeRcYlTbbTYR.PbZfcNZZRfcYhaXVg.PbZ@alerts.bounces.google.com>, size=4528, class=0, nrcpts=1, msgid=<001636920611e9660404667b5443@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 1 02:56:39 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36460
|
|
Apr 1 02:56:39 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 02:56:39 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 02:56:39 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 02:56:39 splunk3 spamd[12510]: spamd: processing message <001636920611e9660404667b5443@google.com> for spamme:501
|
|
Apr 1 02:56:41 splunk3 sendmail[32047]: n319ufxR032047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:56:41 splunk3 spamd[12510]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.7 seconds, 4962 bytes.
|
|
Apr 1 02:56:41 splunk3 spamd[12510]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.7,size=4962,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36460,mid=<001636920611e9660404667b5443@google.com>,bayes=4.44089209850063e-16,autolearn=ham
|
|
Apr 1 02:56:41 splunk3 sendmail[32039]: n319uccO032038: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=34743, dsn=2.0.0, stat=Sent
|
|
Apr 1 02:56:41 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 02:57:41 splunk3 sendmail[32286]: n319vfk7032286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:58:41 splunk3 sendmail[32522]: n319wf4O032522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 02:59:41 splunk3 sendmail[32762]: n319xf9U032762: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:00:04 splunk3 sendmail[458]: n31A04cg000458: from=root, size=291, class=0, nrcpts=1, msgid=<200904011000.n31A04cg000458@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 03:00:04 splunk3 sendmail[462]: n31A04qf000462: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011000.n31A04cg000458@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 03:00:04 splunk3 sendmail[458]: n31A04cg000458: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31A04qf000462 Message accepted for delivery)
|
|
Apr 1 03:00:06 splunk3 sendmail[463]: n31A04qf000462: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:00:20 splunk3 sendmail[538]: n31A0KI4000538: from=<splunk@localhost>, size=717, class=0, nrcpts=1, msgid=<200904011000.n31A0KI4000538@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 03:00:20 splunk3 sendmail[540]: n31A0KI4000538: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120717, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 03:00:20 splunk3 sendmail[540]: n31A0KI4000538: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120717, dsn=5.1.1, stat=User unknown
|
|
Apr 1 03:00:20 splunk3 sendmail[540]: n31A0KI4000538: n31A0KI4000540: postmaster notify: User unknown
|
|
Apr 1 03:00:22 splunk3 sendmail[540]: n31A0KI4000540: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32085, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:00:29 splunk3 sendmail[590]: n31A0TTX000590: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011000.n31A0Tfr030831@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:00:29 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36512
|
|
Apr 1 03:00:29 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:00:29 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 03:00:29 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 03:00:29 splunk3 sendmail[591]: n31A0TTX000590: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:00:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:00:41 splunk3 sendmail[634]: n31A0fVY000634: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:01:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:01:12 splunk3 sendmail[725]: n31A11JO000725: from=root, size=443, class=0, nrcpts=1, msgid=<200904011001.n31A11JO000725@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 03:01:12 splunk3 sendmail[767]: n31A1CA8000767: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011001.n31A11JO000725@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 03:01:12 splunk3 sendmail[725]: n31A11JO000725: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31A1CA8000767 Message accepted for delivery)
|
|
Apr 1 03:01:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:01:13 splunk3 sendmail[768]: n31A1CA8000767: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:01:41 splunk3 sendmail[892]: n31A1fNC000892: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:02:41 splunk3 sendmail[1129]: n31A2fqM001129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:03:41 splunk3 sendmail[1368]: n31A3fLr001368: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:04:41 splunk3 sendmail[1604]: n31A4fN6001604: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:05:30 splunk3 sendmail[1814]: n31A5UL3001814: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011005.n31A5TVg031545@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:05:30 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36568
|
|
Apr 1 03:05:30 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:05:30 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 03:05:30 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 03:05:30 splunk3 sendmail[1815]: n31A5UL3001814: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:05:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:05:41 splunk3 sendmail[1859]: n31A5f7C001859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:06:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:06:13 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:06:41 splunk3 sendmail[2102]: n31A6f7X002102: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:07:41 splunk3 sendmail[2340]: n31A7fPq002340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:08:41 splunk3 sendmail[2581]: n31A8ftc002581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:09:41 splunk3 sendmail[2833]: n31A9fjf002833: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:10:00 splunk3 sendmail[2914]: n31AA0V5002914: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011010.n31AA0TK032060@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:10:00 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36612
|
|
Apr 1 03:10:00 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:10:00 splunk3 spamd[12510]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 03:10:00 splunk3 spamd[12510]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 03:10:00 splunk3 sendmail[2916]: n31AA0V5002914: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:10:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:10:02 splunk3 sendmail[3026]: n31AA2X7003026: from=root, size=292, class=0, nrcpts=1, msgid=<200904011010.n31AA2X7003026@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 03:10:02 splunk3 sendmail[3031]: n31AA2Ak003031: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011010.n31AA2X7003026@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 03:10:02 splunk3 sendmail[3026]: n31AA2X7003026: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31AA2Ak003031 Message accepted for delivery)
|
|
Apr 1 03:10:04 splunk3 sendmail[3032]: n31AA2Ak003031: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:10:41 splunk3 sendmail[3204]: n31AAfSE003204: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:11:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:11:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 03:11:41 splunk3 sendmail[3452]: n31ABfDt003452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:12:41 splunk3 sendmail[3718]: n31ACfZB003718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:13:41 splunk3 sendmail[3962]: n31ADfdL003962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:14:41 splunk3 sendmail[4216]: n31AEfQp004216: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:15:00 splunk3 sendmail[4301]: n31AF0i3004301: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904011015.n31AF0O2000389@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:15:00 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36670
|
|
Apr 1 03:15:00 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:15:00 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:15:00 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:15:00 splunk3 spamd[12510]: spamd: processing message <200904011015.n31AF0O2000389@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 03:15:01 splunk3 sendmail[4299]: n31AF0qR004299: from=<martin@isd.co.la.ca.us>, size=2164, class=0, nrcpts=1, msgid=<000d01c9b2b2$aef90d10$6400a8c0@martin>, proto=ESMTP, daemon=MTA, relay=asy98.asy149.tellcom.com.tr [92.45.149.98] (may be forged)
|
|
Apr 1 03:15:02 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1302 bytes.
|
|
Apr 1 03:15:02 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36670,mid=<200904011015.n31AF0O2000389@virt2.int.splunk.com>,bayes=0.0668025645578141,autolearn=no
|
|
Apr 1 03:15:02 splunk3 sendmail[4302]: n31AF0i3004301: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:15:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:15:09 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36672
|
|
Apr 1 03:15:09 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:15:09 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:15:09 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:15:09 splunk3 spamd[12510]: spamd: processing message <000d01c9b2b2$aef90d10$6400a8c0@martin> for spamme:501
|
|
Apr 1 03:15:11 splunk3 spamd[12510]: spamd: identified spam (29.9/5.0) for spamme:501 in 1.4 seconds, 2489 bytes.
|
|
Apr 1 03:15:11 splunk3 spamd[12510]: spamd: result: Y 29 - BAYES_99,DNS_FROM_RFC_WHOIS,HTML_50_60,HTML_MESSAGE,HTML_TITLE_EMPTY,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,UNPARSEABLE_RELAY,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.4,size=2489,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36672,mid=<000d01c9b2b2$aef90d10$6400a8c0@martin>,bayes=0.999999999999999,autolearn=spam
|
|
Apr 1 03:15:11 splunk3 sendmail[4310]: n31AF0qR004299: to=<spamme@splunkit.com>, delay=00:00:10, xdelay=00:00:10, mailer=local, pri=32400, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:15:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:15:41 splunk3 sendmail[4486]: n31AFfn4004486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:16:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:16:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:16:41 splunk3 sendmail[4731]: n31AGfuO004731: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:17:41 splunk3 sendmail[4981]: n31AHf8J004981: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:18:41 splunk3 sendmail[5251]: n31AIfYN005251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:19:41 splunk3 sendmail[5497]: n31AJfgV005497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:20:01 splunk3 sendmail[5575]: n31AK1Ch005575: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011020.n31AK0xJ001006@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:20:01 splunk3 spamd[12510]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36726
|
|
Apr 1 03:20:01 splunk3 spamd[12510]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:20:01 splunk3 spamd[12510]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:20:01 splunk3 spamd[12510]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:20:01 splunk3 spamd[12510]: spamd: processing message <200904011020.n31AK0xJ001006@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 03:20:03 splunk3 spamd[12510]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 1 03:20:03 splunk3 spamd[12510]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36726,mid=<200904011020.n31AK0xJ001006@virt2.int.splunk.com>,bayes=0.169969034582672,autolearn=no
|
|
Apr 1 03:20:03 splunk3 sendmail[5576]: n31AK1Ch005575: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:20:03 splunk3 spamd[3033]: prefork: child states: BI
|
|
Apr 1 03:20:03 splunk3 spamd[3033]: spamd: handled cleanup of child pid 12510 due to SIGCHLD
|
|
Apr 1 03:20:03 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 5605
|
|
Apr 1 03:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:20:36 splunk3 sendmail[5732]: n31AKZhr005732: ruleset=check_rcpt, arg1=<sseenndd1201@yahoo.com.hk>, relay=118-165-89-249.dynamic.hinet.net [118.165.89.249], reject=550 5.7.1 <sseenndd1201@yahoo.com.hk>... Relaying denied
|
|
Apr 1 03:20:41 splunk3 sendmail[5754]: n31AKfL5005754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:21:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:21:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:21:41 splunk3 sendmail[6001]: n31ALfGe006001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:22:41 splunk3 sendmail[6235]: n31AMfxI006235: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:23:41 splunk3 sendmail[6480]: n31ANfqd006480: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:24:41 splunk3 sendmail[6714]: n31AOfCe006714: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:25:02 splunk3 sendmail[6798]: n31AP2MU006798: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011025.n31AP1vo001682@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:25:02 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36782
|
|
Apr 1 03:25:02 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:25:02 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:25:02 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:25:02 splunk3 spamd[5605]: spamd: processing message <200904011025.n31AP1vo001682@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 03:25:04 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 03:25:04 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36782,mid=<200904011025.n31AP1vo001682@virt2.int.splunk.com>,bayes=0.169969034582672,autolearn=no
|
|
Apr 1 03:25:04 splunk3 sendmail[6799]: n31AP2MU006798: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:25:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:25:41 splunk3 sendmail[6968]: n31APfUr006968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:26:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:26:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 03:26:41 splunk3 sendmail[7215]: n31AQfKP007215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:27:41 splunk3 sendmail[7451]: n31ARfVS007451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:28:41 splunk3 sendmail[7694]: n31ASfpu007694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:29:41 splunk3 sendmail[7933]: n31ATfRc007933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:30:02 splunk3 sendmail[8018]: n31AU2d2008018: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011030.n31AU2A9002340@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:30:02 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36838
|
|
Apr 1 03:30:02 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:30:02 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:30:02 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:30:02 splunk3 spamd[5605]: spamd: processing message <200904011030.n31AU2A9002340@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 03:30:04 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1305 bytes.
|
|
Apr 1 03:30:04 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36838,mid=<200904011030.n31AU2A9002340@virt2.int.splunk.com>,bayes=0.169969034582672,autolearn=no
|
|
Apr 1 03:30:04 splunk3 sendmail[8019]: n31AU2d2008018: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:30:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:30:41 splunk3 sendmail[8190]: n31AUf3e008190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:31:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:31:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:31:41 splunk3 sendmail[8436]: n31AVf98008436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:32:35 splunk3 sendmail[8632]: n31AWUAZ008632: from=<wbuwchq@bradlo.com.au>, size=978, class=0, nrcpts=1, msgid=<01c9b29c$0547be80$162236c9@wbuwchq>, proto=ESMTP, daemon=MTA, relay=[201.54.34.22]
|
|
Apr 1 03:32:35 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36871
|
|
Apr 1 03:32:35 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:32:35 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:32:35 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:32:35 splunk3 spamd[5605]: spamd: processing message <01c9b29c$0547be80$162236c9@wbuwchq> for spamme:501
|
|
Apr 1 03:32:38 splunk3 spamd[5605]: spamd: identified spam (24.3/5.0) for spamme:501 in 2.8 seconds, 1244 bytes.
|
|
Apr 1 03:32:38 splunk3 spamd[5605]: spamd: result: Y 24 - BAYES_95,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_PH_SURBL,URIBL_WS_SURBL scantime=2.8,size=1244,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36871,mid=<01c9b29c$0547be80$162236c9@wbuwchq>,bayes=0.977559623511105,autolearn=spam
|
|
Apr 1 03:32:38 splunk3 sendmail[8653]: n31AWUAZ008632: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:03, mailer=local, pri=31157, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:32:38 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:32:41 splunk3 sendmail[8678]: n31AWfKc008678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:33:41 splunk3 sendmail[8919]: n31AXfJs008919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:34:41 splunk3 sendmail[9154]: n31AYfco009154: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:35:03 splunk3 sendmail[9254]: n31AZ3YX009254: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011035.n31AZ3nM003093@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:35:03 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36895
|
|
Apr 1 03:35:03 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:35:03 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:35:03 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:35:03 splunk3 spamd[5605]: spamd: processing message <200904011035.n31AZ3nM003093@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 03:35:05 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 03:35:05 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36895,mid=<200904011035.n31AZ3nM003093@virt2.int.splunk.com>,bayes=0.169960179718353,autolearn=no
|
|
Apr 1 03:35:05 splunk3 sendmail[9255]: n31AZ3YX009254: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:35:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:35:41 splunk3 sendmail[9409]: n31AZfev009409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:36:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:36:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:36:41 splunk3 sendmail[9661]: n31Aaf43009661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:37:42 splunk3 sendmail[9901]: n31Abf1O009901: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:38:42 splunk3 sendmail[10140]: n31AcgXO010140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:39:42 splunk3 sendmail[10379]: n31Adgm6010379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:40:04 splunk3 sendmail[10482]: n31Ae3aK010482: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011040.n31Ae3JX003728@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:40:04 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36950
|
|
Apr 1 03:40:04 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:40:04 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:40:04 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:40:04 splunk3 spamd[5605]: spamd: processing message <200904011040.n31Ae3JX003728@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 03:40:06 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 1 03:40:06 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36950,mid=<200904011040.n31Ae3JX003728@virt2.int.splunk.com>,bayes=0.169960179718353,autolearn=no
|
|
Apr 1 03:40:06 splunk3 sendmail[10483]: n31Ae3aK010482: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:40:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:40:42 splunk3 sendmail[10637]: n31AegFf010637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:41:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:41:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 03:41:42 splunk3 sendmail[10883]: n31AfguP010883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:42:42 splunk3 sendmail[11117]: n31AgguZ011117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:43:42 splunk3 sendmail[11354]: n31Ahgi4011354: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:44:42 splunk3 sendmail[11591]: n31Aigt1011591: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:45:04 splunk3 sendmail[11691]: n31Aj4eS011691: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011045.n31Aj4NF004339@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:45:04 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37007
|
|
Apr 1 03:45:04 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:45:04 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:45:04 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:45:04 splunk3 spamd[5605]: spamd: processing message <200904011045.n31Aj4NF004339@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 03:45:06 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1305 bytes.
|
|
Apr 1 03:45:06 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37007,mid=<200904011045.n31Aj4NF004339@virt2.int.splunk.com>,bayes=0.169960179718353,autolearn=no
|
|
Apr 1 03:45:06 splunk3 sendmail[11692]: n31Aj4eS011691: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:45:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:45:42 splunk3 sendmail[11845]: n31Ajg59011845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:46:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:46:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:46:42 splunk3 sendmail[12087]: n31AkgvX012087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:47:42 splunk3 sendmail[12328]: n31AlgPc012328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:48:42 splunk3 sendmail[12562]: n31Amghf012562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:49:42 splunk3 sendmail[12802]: n31AngAD012802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:50:06 splunk3 sendmail[12905]: n31Ao5m9012905: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011050.n31Ao5DS004954@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:50:06 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37063
|
|
Apr 1 03:50:06 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:50:06 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:50:06 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:50:06 splunk3 spamd[5605]: spamd: processing message <200904011050.n31Ao5DS004954@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 03:50:08 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 03:50:08 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37063,mid=<200904011050.n31Ao5DS004954@virt2.int.splunk.com>,bayes=0.169960179718353,autolearn=no
|
|
Apr 1 03:50:08 splunk3 sendmail[12906]: n31Ao5m9012905: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:50:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:50:42 splunk3 sendmail[13057]: n31Aog0Q013057: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:51:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:51:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:51:42 splunk3 sendmail[13335]: n31ApgUd013335: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:51:48 splunk3 sendmail[13366]: n31ApkJb013366: from=<nlinfo101@yahoo.com.hk>, size=1064, class=0, nrcpts=1, msgid=<200904011051.n31ApkJb013366@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=[83.220.67.200]
|
|
Apr 1 03:51:48 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37087
|
|
Apr 1 03:51:48 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:51:48 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:51:48 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:51:48 splunk3 spamd[5605]: spamd: processing message <200904011051.n31ApkJb013366@splunk3.splunkit.com> for spamme:501
|
|
Apr 1 03:51:50 splunk3 spamd[5605]: spamd: identified spam (17.2/5.0) for spamme:501 in 2.4 seconds, 1394 bytes.
|
|
Apr 1 03:51:50 splunk3 spamd[5605]: spamd: result: Y 17 - ADVANCE_FEE_1,BAYES_99,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST,FORGED_MUA_OUTLOOK,MSGID_FROM_MTA_HEADER,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SBL,RCVD_IN_SORBS_WEB,TO_CC_NONE scantime=2.4,size=1394,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37087,mid=<200904011051.n31ApkJb013366@splunk3.splunkit.com>,bayes=1,autolearn=no
|
|
Apr 1 03:51:50 splunk3 sendmail[13385]: n31ApkJb013366: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31305, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:51:50 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:52:42 splunk3 sendmail[13584]: n31AqgcF013584: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:53:42 splunk3 sendmail[13826]: n31Argi9013826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:54:42 splunk3 sendmail[14062]: n31Asgwd014062: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:55:07 splunk3 sendmail[14164]: n31At7ft014164: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011055.n31At6RA005561@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 03:55:07 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37119
|
|
Apr 1 03:55:07 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 03:55:07 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 03:55:07 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 03:55:07 splunk3 spamd[5605]: spamd: processing message <200904011055.n31At6RA005561@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 03:55:09 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 1 03:55:09 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37119,mid=<200904011055.n31At6RA005561@virt2.int.splunk.com>,bayes=0.169960179718353,autolearn=no
|
|
Apr 1 03:55:09 splunk3 sendmail[14165]: n31At7ft014164: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 03:55:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 03:55:42 splunk3 sendmail[14316]: n31AtgrH014316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:56:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 03:56:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 03:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 03:56:42 splunk3 sendmail[14561]: n31Aug9F014561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:57:42 splunk3 sendmail[14798]: n31Avg2X014798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:58:42 splunk3 sendmail[15032]: n31Awgx4015032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 03:59:42 splunk3 sendmail[15270]: n31AxgXv015270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:00:04 splunk3 sendmail[15434]: n31B04gn015434: from=root, size=291, class=0, nrcpts=1, msgid=<200904011100.n31B04gn015434@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 04:00:04 splunk3 sendmail[15438]: n31B04Mw015438: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011100.n31B04gn015434@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 04:00:04 splunk3 sendmail[15434]: n31B04gn015434: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31B04Mw015438 Message accepted for delivery)
|
|
Apr 1 04:00:05 splunk3 sendmail[15439]: n31B04Mw015438: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:00:07 splunk3 sendmail[15460]: n31B07Pr015460: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011100.n31B07NP006197@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:00:07 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37177
|
|
Apr 1 04:00:07 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:00:07 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 04:00:07 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 04:00:07 splunk3 sendmail[15461]: n31B07Pr015460: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:00:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:00:26 splunk3 sendmail[15539]: n31B0Pc0015539: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904011100.n31B0Pc0015539@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 04:00:26 splunk3 sendmail[15541]: n31B0Pc0015539: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 04:00:26 splunk3 sendmail[15541]: n31B0Pc0015539: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 04:00:26 splunk3 sendmail[15541]: n31B0Pc0015539: n31B0Qc0015541: postmaster notify: User unknown
|
|
Apr 1 04:00:27 splunk3 sendmail[15541]: n31B0Qc0015541: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:00:42 splunk3 sendmail[15610]: n31B0gOM015610: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:01:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:01:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:01:13 splunk3 sendmail[15702]: n31B11Wc015702: from=root, size=443, class=0, nrcpts=1, msgid=<200904011101.n31B11Wc015702@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 04:01:13 splunk3 sendmail[15767]: n31B1DjA015767: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011101.n31B11Wc015702@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 04:01:13 splunk3 sendmail[15702]: n31B11Wc015702: to=root, ctladdr=root (0/0), delay=00:00:12, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31B1DjA015767 Message accepted for delivery)
|
|
Apr 1 04:01:14 splunk3 sendmail[15768]: n31B1DjA015767: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:01:42 splunk3 sendmail[15870]: n31B1gBw015870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:02:04 splunk3 sendmail[16279]: n31B24Ct016279: from=root, size=1540, class=0, nrcpts=1, msgid=<200904011102.n31B24Ct016279@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 04:02:04 splunk3 sendmail[16281]: n31B24kY016281: from=<root@splunk3.splunkit.com>, size=1840, class=0, nrcpts=1, msgid=<200904011102.n31B24Ct016279@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 04:02:04 splunk3 sendmail[16279]: n31B24Ct016279: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=31540, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31B24kY016281 Message accepted for delivery)
|
|
Apr 1 04:02:06 splunk3 sendmail[16282]: n31B24kY016281: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32073, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:02:42 splunk3 sendmail[16566]: n31B2g0p016566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:03:42 splunk3 sendmail[16805]: n31B3gsF016805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:04:42 splunk3 sendmail[17039]: n31B4gh9017039: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:05:08 splunk3 sendmail[17158]: n31B57it017158: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011105.n31B57AS007378@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:05:08 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37241
|
|
Apr 1 04:05:08 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:05:08 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 04:05:08 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 04:05:08 splunk3 sendmail[17159]: n31B57it017158: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:05:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:05:42 splunk3 sendmail[17292]: n31B5gnG017292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:06:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:06:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:06:42 splunk3 sendmail[17535]: n31B6g9T017535: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:07:42 splunk3 sendmail[17776]: n31B7gZv017776: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:08:42 splunk3 sendmail[18015]: n31B8gkn018015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:09:42 splunk3 sendmail[18256]: n31B9gZ8018256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:10:02 splunk3 sendmail[18450]: n31BA2Z7018450: from=root, size=292, class=0, nrcpts=1, msgid=<200904011110.n31BA2Z7018450@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 04:10:02 splunk3 sendmail[18455]: n31BA25U018455: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011110.n31BA2Z7018450@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 04:10:02 splunk3 sendmail[18450]: n31BA2Z7018450: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31BA25U018455 Message accepted for delivery)
|
|
Apr 1 04:10:04 splunk3 sendmail[18456]: n31BA25U018455: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:10:08 splunk3 sendmail[18478]: n31BA8gt018478: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011110.n31BA8Li008000@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:10:08 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37298
|
|
Apr 1 04:10:08 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:10:08 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:10:08 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:10:08 splunk3 spamd[5605]: spamd: processing message <200904011110.n31BA8Li008000@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:10:10 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 04:10:10 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37298,mid=<200904011110.n31BA8Li008000@virt2.int.splunk.com>,bayes=0.169960179718353,autolearn=no
|
|
Apr 1 04:10:10 splunk3 sendmail[18479]: n31BA8gt018478: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:10:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:10:42 splunk3 sendmail[18626]: n31BAgNH018626: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:11:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:11:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 04:11:42 splunk3 sendmail[18876]: n31BBg5u018876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:12:42 splunk3 sendmail[19109]: n31BCgDY019109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:13:42 splunk3 sendmail[19346]: n31BDgSk019346: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:14:42 splunk3 sendmail[19584]: n31BEgiB019584: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:15:09 splunk3 sendmail[19703]: n31BF9vh019703: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011115.n31BF8D3008803@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:15:09 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37354
|
|
Apr 1 04:15:09 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:15:09 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:15:09 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:15:09 splunk3 spamd[5605]: spamd: processing message <200904011115.n31BF8D3008803@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:15:11 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 1 04:15:11 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37354,mid=<200904011115.n31BF8D3008803@virt2.int.splunk.com>,bayes=0.169960179718353,autolearn=no
|
|
Apr 1 04:15:11 splunk3 sendmail[19704]: n31BF9vh019703: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:15:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:15:42 splunk3 sendmail[19839]: n31BFgRQ019839: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:16:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:16:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:16:42 splunk3 sendmail[20081]: n31BGgBx020081: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:17:42 splunk3 sendmail[20318]: n31BHgaq020318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:18:42 splunk3 sendmail[20552]: n31BIgMX020552: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:19:42 splunk3 sendmail[20791]: n31BJg0O020791: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:20:09 splunk3 sendmail[20913]: n31BK9Zu020913: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011120.n31BK91n009432@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:20:09 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37410
|
|
Apr 1 04:20:09 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:20:09 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:20:09 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:20:09 splunk3 spamd[5605]: spamd: processing message <200904011120.n31BK91n009432@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:20:11 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 04:20:11 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37410,mid=<200904011120.n31BK91n009432@virt2.int.splunk.com>,bayes=0.169960179718353,autolearn=no
|
|
Apr 1 04:20:11 splunk3 sendmail[20914]: n31BK9Zu020913: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:20:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:20:36 splunk3 sendmail[5732]: n31AKZhr005732: timeout waiting for input from 118-165-89-249.dynamic.hinet.net during server cmd read
|
|
Apr 1 04:20:36 splunk3 sendmail[5732]: n31AKZhr005732: lost input channel from 118-165-89-249.dynamic.hinet.net [118.165.89.249] to MTA after rcpt
|
|
Apr 1 04:20:36 splunk3 sendmail[5732]: n31AKZhr005732: from=<oh5k6f8d87@yahoo.com.tw>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-165-89-249.dynamic.hinet.net [118.165.89.249]
|
|
Apr 1 04:20:42 splunk3 sendmail[21050]: n31BKggM021050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:21:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:21:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:21:42 splunk3 sendmail[21299]: n31BLgNN021299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:22:42 splunk3 sendmail[21540]: n31BMglg021540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:23:42 splunk3 sendmail[21789]: n31BNgKM021789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:24:42 splunk3 sendmail[22013]: n31BOgXb022013: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:25:10 splunk3 sendmail[22128]: n31BPAWq022128: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011125.n31BPArf010042@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:25:10 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37466
|
|
Apr 1 04:25:10 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:25:10 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:25:10 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:25:10 splunk3 spamd[5605]: spamd: processing message <200904011125.n31BPArf010042@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:25:12 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 1 04:25:12 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37466,mid=<200904011125.n31BPArf010042@virt2.int.splunk.com>,bayes=0.112923010567796,autolearn=no
|
|
Apr 1 04:25:12 splunk3 sendmail[22129]: n31BPAWq022128: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:25:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:25:42 splunk3 sendmail[22281]: n31BPgIC022281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:26:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:26:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 04:26:42 splunk3 sendmail[22526]: n31BQgKC022526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:27:42 splunk3 sendmail[22764]: n31BRgXh022764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:28:42 splunk3 sendmail[23000]: n31BSgCR023000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:29:42 splunk3 sendmail[23239]: n31BTgnD023239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:30:10 splunk3 sendmail[23339]: n31BUA4U023339: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011130.n31BUAS9010664@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:30:10 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37522
|
|
Apr 1 04:30:10 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:30:10 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:30:10 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:30:10 splunk3 spamd[5605]: spamd: processing message <200904011130.n31BUAS9010664@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:30:13 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 04:30:13 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37522,mid=<200904011130.n31BUAS9010664@virt2.int.splunk.com>,bayes=0.112923010567796,autolearn=no
|
|
Apr 1 04:30:13 splunk3 sendmail[23340]: n31BUA4U023339: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:30:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:30:42 splunk3 sendmail[23494]: n31BUgla023494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:31:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:31:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:31:42 splunk3 sendmail[23741]: n31BVgwh023741: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:32:42 splunk3 sendmail[23974]: n31BWgeR023974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:33:42 splunk3 sendmail[24213]: n31BXgKH024213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:34:42 splunk3 sendmail[24446]: n31BYgJh024446: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:35:12 splunk3 sendmail[24569]: n31BZCVn024569: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011135.n31BZBcS011414@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:35:12 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37578
|
|
Apr 1 04:35:12 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:35:12 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:35:12 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:35:12 splunk3 spamd[5605]: spamd: processing message <200904011135.n31BZBcS011414@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:35:14 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 1 04:35:14 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37578,mid=<200904011135.n31BZBcS011414@virt2.int.splunk.com>,bayes=0.112923010567796,autolearn=no
|
|
Apr 1 04:35:14 splunk3 sendmail[24570]: n31BZCVn024569: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:35:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:35:42 splunk3 sendmail[24703]: n31BZg3C024703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:36:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:36:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:36:42 splunk3 sendmail[24945]: n31Bagh0024945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:37:42 splunk3 sendmail[25184]: n31Bbgbk025184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:38:42 splunk3 sendmail[25425]: n31Bcg2c025425: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:39:42 splunk3 sendmail[25662]: n31Bdgvc025662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:40:13 splunk3 sendmail[25788]: n31BeDLv025788: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011140.n31BeCq8012045@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:40:13 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37633
|
|
Apr 1 04:40:13 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:40:13 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:40:13 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:40:13 splunk3 spamd[5605]: spamd: processing message <200904011140.n31BeCq8012045@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:40:15 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 04:40:15 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37633,mid=<200904011140.n31BeCq8012045@virt2.int.splunk.com>,bayes=0.112923010567796,autolearn=no
|
|
Apr 1 04:40:15 splunk3 sendmail[25789]: n31BeDLv025788: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:40:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:40:37 splunk3 sendmail[25849]: n31BeS0L025849: from=<Farhaad-ovocyte@MARIZ.COM.BR>, size=1992, class=0, nrcpts=1, msgid=<200904011140.n31BeS0L025849@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=99.Red-81-34-58.dynamicIP.rima-tde.net [81.34.58.99]
|
|
Apr 1 04:40:37 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37645
|
|
Apr 1 04:40:37 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:40:37 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:40:37 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:40:37 splunk3 spamd[5605]: spamd: processing message <200904011140.n31BeS0L025849@splunk3.splunkit.com> for spamme:501
|
|
Apr 1 04:40:42 splunk3 sendmail[25927]: n31BegP4025927: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:40:43 splunk3 spamd[5605]: spamd: identified spam (18.1/5.0) for spamme:501 in 6.5 seconds, 2436 bytes.
|
|
Apr 1 04:40:43 splunk3 spamd[5605]: spamd: result: Y 18 - BAYES_99,HELO_DYNAMIC_SPLIT_IP,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL scantime=6.5,size=2436,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37645,mid=<200904011140.n31BeS0L025849@splunk3.splunkit.com>,bayes=0.998096408989449,autolearn=spam
|
|
Apr 1 04:40:43 splunk3 sendmail[25884]: n31BeS0L025849: to=<spamme@splunkit.com>, delay=00:00:13, xdelay=00:00:06, mailer=local, pri=32341, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:40:43 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:41:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:41:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 04:41:42 splunk3 sendmail[26174]: n31BfgJm026174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:42:42 splunk3 sendmail[26416]: n31BggN6026416: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:43:42 splunk3 sendmail[26654]: n31BhgXT026654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:44:42 splunk3 sendmail[26888]: n31BigKD026888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:45:14 splunk3 sendmail[27020]: n31BjEis027020: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011145.n31BjDo5012660@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:45:14 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37699
|
|
Apr 1 04:45:14 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:45:14 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:45:14 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:45:14 splunk3 spamd[5605]: spamd: processing message <200904011145.n31BjDo5012660@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:45:16 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 04:45:16 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37699,mid=<200904011145.n31BjDo5012660@virt2.int.splunk.com>,bayes=0.112915534306553,autolearn=no
|
|
Apr 1 04:45:16 splunk3 sendmail[27021]: n31BjEis027020: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:45:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:45:42 splunk3 sendmail[27141]: n31BjgFp027141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:46:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:46:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:46:42 splunk3 sendmail[27383]: n31Bkgha027383: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:47:42 splunk3 sendmail[27623]: n31BlgWa027623: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:48:42 splunk3 sendmail[27858]: n31BmgM5027858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:49:42 splunk3 sendmail[28095]: n31BngHD028095: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:50:14 splunk3 sendmail[28231]: n31BoE5S028231: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011150.n31BoEIe013276@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:50:14 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37754
|
|
Apr 1 04:50:14 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:50:14 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:50:14 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:50:14 splunk3 spamd[5605]: spamd: processing message <200904011150.n31BoEIe013276@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:50:16 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 04:50:16 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37754,mid=<200904011150.n31BoEIe013276@virt2.int.splunk.com>,bayes=0.112915534306553,autolearn=no
|
|
Apr 1 04:50:16 splunk3 sendmail[28232]: n31BoE5S028231: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:50:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:50:42 splunk3 sendmail[28350]: n31BogeH028350: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:51:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:51:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:51:42 splunk3 sendmail[28595]: n31BpgNH028595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:52:42 splunk3 sendmail[28831]: n31BqgP3028831: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:53:42 splunk3 sendmail[29073]: n31Brgcb029073: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:54:42 splunk3 sendmail[29310]: n31BsgCV029310: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:55:15 splunk3 sendmail[29444]: n31BtFFQ029444: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011155.n31BtECS013889@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 04:55:15 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37810
|
|
Apr 1 04:55:15 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 04:55:15 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 04:55:15 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 04:55:15 splunk3 spamd[5605]: spamd: processing message <200904011155.n31BtECS013889@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 04:55:17 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 04:55:17 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37810,mid=<200904011155.n31BtECS013889@virt2.int.splunk.com>,bayes=0.112915534306553,autolearn=no
|
|
Apr 1 04:55:17 splunk3 sendmail[29446]: n31BtFFQ029444: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 04:55:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 04:55:42 splunk3 sendmail[29563]: n31BtgQD029563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:56:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 04:56:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 04:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 04:56:42 splunk3 sendmail[29808]: n31BugBE029808: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:57:42 splunk3 sendmail[30047]: n31Bvgfj030047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:58:42 splunk3 sendmail[30280]: n31BwgkU030280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 04:59:42 splunk3 sendmail[30521]: n31BxgGn030521: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:00:01 splunk3 sendmail[30590]: n31C01DZ030590: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904011200.n31C01DZ030590@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 05:00:01 splunk3 sendmail[30592]: n31C01DZ030590: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 05:00:01 splunk3 sendmail[30592]: n31C01DZ030590: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 05:00:01 splunk3 sendmail[30592]: n31C01DZ030590: n31C01DZ030592: postmaster notify: User unknown
|
|
Apr 1 05:00:03 splunk3 sendmail[30592]: n31C01DZ030592: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:00:04 splunk3 sendmail[30691]: n31C04HB030691: from=root, size=291, class=0, nrcpts=1, msgid=<200904011200.n31C04HB030691@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 05:00:04 splunk3 sendmail[30695]: n31C04ZZ030695: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011200.n31C04HB030691@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 05:00:04 splunk3 sendmail[30691]: n31C04HB030691: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31C04ZZ030695 Message accepted for delivery)
|
|
Apr 1 05:00:06 splunk3 sendmail[30696]: n31C04ZZ030695: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:00:15 splunk3 sendmail[30741]: n31C0Fjf030741: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011200.n31C0FIX014529@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:00:15 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37875
|
|
Apr 1 05:00:15 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:00:15 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 05:00:15 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 05:00:15 splunk3 sendmail[30742]: n31C0Fjf030741: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:00:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:00:42 splunk3 sendmail[30860]: n31C0gpL030860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:01:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:01:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:01:12 splunk3 sendmail[30953]: n31C114C030953: from=root, size=443, class=0, nrcpts=1, msgid=<200904011201.n31C114C030953@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 05:01:12 splunk3 sendmail[31000]: n31C1CcD031000: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011201.n31C114C030953@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 05:01:12 splunk3 sendmail[30953]: n31C114C030953: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31C1CcD031000 Message accepted for delivery)
|
|
Apr 1 05:01:13 splunk3 sendmail[31001]: n31C1CcD031000: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:01:42 splunk3 sendmail[31121]: n31C1ghJ031121: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:02:42 splunk3 sendmail[31354]: n31C2gxA031354: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:03:42 splunk3 sendmail[31591]: n31C3gOR031591: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:04:42 splunk3 sendmail[31824]: n31C4gsG031824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:05:01 splunk3 sendmail[31827]: n31C4jIx031827: from=<trishag@dnforum.com>, size=5693, class=0, nrcpts=1, msgid=<cb74019dbdd3$df43e365$2148cc82@dnforum.com>, proto=ESMTP, daemon=MTA, relay=[88.245.83.225]
|
|
Apr 1 05:05:01 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37921
|
|
Apr 1 05:05:01 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:05:01 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 05:05:01 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 05:05:01 splunk3 sendmail[31889]: n31C4jIx031827: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:00, mailer=local, pri=35870, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:05:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:05:16 splunk3 sendmail[31964]: n31C5GlX031964: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011205.n31C5Fr3015210@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:05:16 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37932
|
|
Apr 1 05:05:16 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:05:16 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 05:05:16 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 05:05:16 splunk3 sendmail[31965]: n31C5GlX031964: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:05:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:05:42 splunk3 sendmail[32083]: n31C5gRj032083: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:06:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:06:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:06:42 splunk3 sendmail[32325]: n31C6gP4032325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:07:42 splunk3 sendmail[32564]: n31C7gIJ032564: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:08:42 splunk3 sendmail[338]: n31C8gTT000338: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:09:42 splunk3 sendmail[578]: n31C9g8e000578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:10:02 splunk3 sendmail[754]: n31CA2Hh000754: from=root, size=292, class=0, nrcpts=1, msgid=<200904011210.n31CA2Hh000754@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 05:10:02 splunk3 sendmail[764]: n31CA2ou000764: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011210.n31CA2Hh000754@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 05:10:02 splunk3 sendmail[754]: n31CA2Hh000754: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31CA2ou000764 Message accepted for delivery)
|
|
Apr 1 05:10:03 splunk3 sendmail[771]: n31CA2ou000764: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:10:16 splunk3 sendmail[819]: n31CAGpY000819: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011210.n31CAGjM015822@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:10:16 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37989
|
|
Apr 1 05:10:16 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:10:16 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:10:16 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:10:16 splunk3 spamd[5605]: spamd: processing message <200904011210.n31CAGjM015822@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:10:18 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 05:10:18 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37989,mid=<200904011210.n31CAGjM015822@virt2.int.splunk.com>,bayes=0.112915534306553,autolearn=no
|
|
Apr 1 05:10:18 splunk3 sendmail[821]: n31CAGpY000819: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:10:42 splunk3 sendmail[938]: n31CAgBj000938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:11:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:11:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 05:11:42 splunk3 sendmail[1186]: n31CBggG001186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:12:12 splunk3 sendmail[1305]: n31CCCHi001305: from=<3G1rTSRQKBpI2AA270w70DFE-9AD0B7K2AA270.yA8EBw880EB7G964F.yA8@alerts.bounces.google.com>, size=2784, class=0, nrcpts=1, msgid=<0016e6464262add88c04667d3955@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.190]
|
|
Apr 1 05:12:12 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38010
|
|
Apr 1 05:12:12 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:12:12 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:12:12 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:12:12 splunk3 spamd[5605]: spamd: processing message <0016e6464262add88c04667d3955@google.com> for spamme:501
|
|
Apr 1 05:12:15 splunk3 spamd[5605]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.6 seconds, 3214 bytes.
|
|
Apr 1 05:12:15 splunk3 spamd[5605]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.6,size=3214,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38010,mid=<0016e6464262add88c04667d3955@google.com>,bayes=1.11022302462516e-16,autolearn=ham
|
|
Apr 1 05:12:15 splunk3 sendmail[1307]: n31CCCHi001305: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=32995, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:12:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:12:42 splunk3 sendmail[1428]: n31CCgZ3001428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:13:42 splunk3 sendmail[1667]: n31CDgrC001667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:14:42 splunk3 sendmail[1902]: n31CEggD001902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:15:17 splunk3 sendmail[2056]: n31CFHlY002056: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011215.n31CFG40016619@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:15:17 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38046
|
|
Apr 1 05:15:17 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:15:17 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:15:17 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:15:17 splunk3 spamd[5605]: spamd: processing message <200904011215.n31CFG40016619@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:15:19 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 05:15:19 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38046,mid=<200904011215.n31CFG40016619@virt2.int.splunk.com>,bayes=0.112947856474092,autolearn=no
|
|
Apr 1 05:15:19 splunk3 sendmail[2057]: n31CFHlY002056: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:15:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:15:42 splunk3 sendmail[2160]: n31CFg8c002160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:16:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:16:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:16:42 splunk3 sendmail[2402]: n31CGg8Q002402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:17:42 splunk3 sendmail[2648]: n31CHgie002648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:18:29 splunk3 sendmail[2831]: n31CISoN002831: from=<microsoftaward@gmail.com>, size=2442, class=0, nrcpts=1, msgid=<54961.200.56.86.163.1238587022.squirrel@mail.cesvimexico.com.mx>, proto=ESMTP, daemon=MTA, relay=dedint-200-56-86-164.tolxm.axtel.net [200.56.86.164] (may be forged)
|
|
Apr 1 05:18:29 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38078
|
|
Apr 1 05:18:29 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:18:29 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:18:29 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:18:29 splunk3 spamd[5605]: spamd: processing message <54961.200.56.86.163.1238587022.squirrel@mail.cesvimexico.com.mx> for spamme:501
|
|
Apr 1 05:18:31 splunk3 spamd[5605]: spamd: identified spam (5.4/5.0) for spamme:501 in 2.2 seconds, 2777 bytes.
|
|
Apr 1 05:18:31 splunk3 spamd[5605]: spamd: result: Y 5 - BAYES_50,DNS_FROM_RFC_POST,FORGED_RCVD_HELO,PLING_PLING,RCVD_IN_SORBS_DUL,SUBJ_ALL_CAPS,TO_CC_NONE scantime=2.2,size=2777,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38078,mid=<54961.200.56.86.163.1238587022.squirrel@mail.cesvimexico.com.mx>,bayes=0.499895117304365,autolearn=no
|
|
Apr 1 05:18:31 splunk3 sendmail[2833]: n31CISoN002831: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32680, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:18:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:18:42 splunk3 sendmail[2898]: n31CIgem002898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:19:42 splunk3 sendmail[3145]: n31CJg1T003145: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:20:17 splunk3 sendmail[3301]: n31CKHno003301: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011220.n31CKHhb017249@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:20:17 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38103
|
|
Apr 1 05:20:17 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:20:17 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:20:17 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:20:17 splunk3 spamd[5605]: spamd: processing message <200904011220.n31CKHhb017249@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:20:19 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 05:20:19 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38103,mid=<200904011220.n31CKHhb017249@virt2.int.splunk.com>,bayes=0.112947856474092,autolearn=no
|
|
Apr 1 05:20:19 splunk3 sendmail[3302]: n31CKHno003301: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:20:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:20:42 splunk3 sendmail[3404]: n31CKg2F003404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:21:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:21:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:21:42 splunk3 sendmail[3671]: n31CLglA003671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:22:42 splunk3 sendmail[3917]: n31CMgfB003917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:23:42 splunk3 sendmail[4174]: n31CNgeT004174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:24:42 splunk3 sendmail[4424]: n31COgGL004424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:25:18 splunk3 sendmail[4576]: n31CPHQE004576: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011225.n31CPHRF017854@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:25:18 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38158
|
|
Apr 1 05:25:18 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:25:18 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:25:18 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:25:18 splunk3 spamd[5605]: spamd: processing message <200904011225.n31CPHRF017854@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:25:20 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 05:25:20 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38158,mid=<200904011225.n31CPHRF017854@virt2.int.splunk.com>,bayes=0.112947856474092,autolearn=no
|
|
Apr 1 05:25:20 splunk3 sendmail[4577]: n31CPHQE004576: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:25:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:25:42 splunk3 sendmail[4679]: n31CPg4u004679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:26:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:26:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 05:26:42 splunk3 sendmail[4933]: n31CQgAb004933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:27:42 splunk3 sendmail[5210]: n31CRgV5005210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:28:42 splunk3 sendmail[5448]: n31CSgcL005448: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:29:42 splunk3 sendmail[5690]: n31CTgcN005690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:30:08 splunk3 sendmail[5800]: n31CU7u9005800: from=<3T17TSRQKBsow44w1uq1u798-347u51Ew44w1u.s4285q22u851A30y9.s42@alerts.bounces.google.com>, size=5148, class=0, nrcpts=1, msgid=<000e0cd2e67cd46eca04667d7948@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 1 05:30:08 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38214
|
|
Apr 1 05:30:08 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:30:08 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:30:08 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:30:08 splunk3 spamd[5605]: spamd: processing message <000e0cd2e67cd46eca04667d7948@google.com> for spamme:501
|
|
Apr 1 05:30:10 splunk3 spamd[5605]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.2 seconds, 5582 bytes.
|
|
Apr 1 05:30:10 splunk3 spamd[5605]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.2,size=5582,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38214,mid=<000e0cd2e67cd46eca04667d7948@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Apr 1 05:30:10 splunk3 sendmail[5801]: n31CU7u9005800: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=35363, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:30:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:30:18 splunk3 sendmail[5849]: n31CUIue005849: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011230.n31CUILY018475@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:30:18 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38216
|
|
Apr 1 05:30:18 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:30:18 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:30:18 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:30:18 splunk3 spamd[5605]: spamd: processing message <200904011230.n31CUILY018475@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:30:20 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 05:30:20 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38216,mid=<200904011230.n31CUILY018475@virt2.int.splunk.com>,bayes=0.112980178381206,autolearn=no
|
|
Apr 1 05:30:20 splunk3 sendmail[5850]: n31CUIue005849: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:30:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:30:42 splunk3 sendmail[5952]: n31CUgri005952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:31:03 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:31:12 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:31:42 splunk3 sendmail[6199]: n31CVgof006199: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:32:42 splunk3 sendmail[6434]: n31CWgXS006434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:33:42 splunk3 sendmail[6673]: n31CXgVA006673: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:34:42 splunk3 sendmail[6907]: n31CYg2Q006907: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:35:19 splunk3 sendmail[7061]: n31CZJFj007061: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011235.n31CZICv019224@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:35:19 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38271
|
|
Apr 1 05:35:19 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:35:19 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:35:19 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:35:19 splunk3 spamd[5605]: spamd: processing message <200904011235.n31CZICv019224@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:35:21 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 05:35:21 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38271,mid=<200904011235.n31CZICv019224@virt2.int.splunk.com>,bayes=0.112980178381206,autolearn=no
|
|
Apr 1 05:35:21 splunk3 sendmail[7062]: n31CZJFj007061: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:35:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:35:42 splunk3 sendmail[7162]: n31CZgms007162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:36:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:36:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:36:42 splunk3 sendmail[7405]: n31CagNL007405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:37:43 splunk3 sendmail[7652]: n31Cbh8v007652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:38:43 splunk3 sendmail[7892]: n31CchV7007892: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:39:43 splunk3 sendmail[8130]: n31Cdhul008130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:40:19 splunk3 sendmail[8286]: n31CeJHZ008286: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011240.n31CeJbA019864@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:40:19 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38327
|
|
Apr 1 05:40:19 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:40:19 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:40:19 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:40:19 splunk3 spamd[5605]: spamd: processing message <200904011240.n31CeJbA019864@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:40:21 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 1 05:40:21 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38327,mid=<200904011240.n31CeJbA019864@virt2.int.splunk.com>,bayes=0.112980178381206,autolearn=no
|
|
Apr 1 05:40:21 splunk3 sendmail[8287]: n31CeJHZ008286: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:40:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:40:43 splunk3 sendmail[8386]: n31CehPP008386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:41:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:41:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 05:41:43 splunk3 sendmail[8635]: n31CfhfR008635: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:42:43 splunk3 sendmail[8868]: n31Cghro008868: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:43:43 splunk3 sendmail[9108]: n31Chhq6009108: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:44:43 splunk3 sendmail[9343]: n31CihSm009343: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:45:20 splunk3 sendmail[9498]: n31CjKhf009498: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011245.n31CjJ6j020480@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:45:20 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38384
|
|
Apr 1 05:45:20 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:45:20 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:45:20 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:45:20 splunk3 spamd[5605]: spamd: processing message <200904011245.n31CjJ6j020480@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:45:22 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 05:45:22 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38384,mid=<200904011245.n31CjJ6j020480@virt2.int.splunk.com>,bayes=0.112980178381206,autolearn=no
|
|
Apr 1 05:45:22 splunk3 sendmail[9499]: n31CjKhf009498: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:45:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:45:43 splunk3 sendmail[9609]: n31CjhsL009609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:46:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:46:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:46:43 splunk3 sendmail[9851]: n31Ckh1o009851: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:47:43 splunk3 sendmail[10091]: n31ClhAi010091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:48:43 splunk3 sendmail[10323]: n31CmhYo010323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:49:43 splunk3 sendmail[10562]: n31CnhIC010562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:50:20 splunk3 sendmail[10717]: n31CoKMo010717: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011250.n31CoKud021091@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:50:20 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38440
|
|
Apr 1 05:50:20 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:50:20 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:50:20 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:50:20 splunk3 spamd[5605]: spamd: processing message <200904011250.n31CoKud021091@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:50:22 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 1 05:50:22 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38440,mid=<200904011250.n31CoKud021091@virt2.int.splunk.com>,bayes=0.112980178381206,autolearn=no
|
|
Apr 1 05:50:22 splunk3 sendmail[10718]: n31CoKMo010717: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:50:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:50:43 splunk3 sendmail[10821]: n31CohPc010821: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:51:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:51:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:51:43 splunk3 sendmail[11067]: n31CphSn011067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:52:43 splunk3 sendmail[11301]: n31Cqhrt011301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:53:43 splunk3 sendmail[11543]: n31Crhnp011543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:54:43 splunk3 sendmail[11775]: n31Cshr4011775: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:55:21 splunk3 sendmail[11927]: n31CtLZu011927: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011255.n31CtKXB021699@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 05:55:21 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38496
|
|
Apr 1 05:55:21 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 05:55:21 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 05:55:21 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 05:55:21 splunk3 spamd[5605]: spamd: processing message <200904011255.n31CtKXB021699@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 05:55:25 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Apr 1 05:55:25 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38496,mid=<200904011255.n31CtKXB021699@virt2.int.splunk.com>,bayes=0.112980178381206,autolearn=no
|
|
Apr 1 05:55:25 splunk3 sendmail[11928]: n31CtLZu011927: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 05:55:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 05:55:43 splunk3 sendmail[12027]: n31CthWO012027: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:56:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 05:56:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 05:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 05:56:43 splunk3 sendmail[12271]: n31Cuhkm012271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:57:43 splunk3 sendmail[12512]: n31CvhQb012512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:58:43 splunk3 sendmail[12746]: n31Cwh5q012746: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 05:59:43 splunk3 sendmail[12987]: n31CxhHx012987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:00:04 splunk3 sendmail[13129]: n31D04t1013129: from=root, size=291, class=0, nrcpts=1, msgid=<200904011300.n31D04t1013129@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 06:00:04 splunk3 sendmail[13133]: n31D04Eu013133: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011300.n31D04t1013129@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 06:00:04 splunk3 sendmail[13129]: n31D04t1013129: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31D04Eu013133 Message accepted for delivery)
|
|
Apr 1 06:00:06 splunk3 sendmail[13134]: n31D04Eu013133: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:00:07 splunk3 sendmail[13166]: n31D077T013166: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904011300.n31D077T013166@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 06:00:07 splunk3 sendmail[13168]: n31D077T013166: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 06:00:07 splunk3 sendmail[13168]: n31D077T013166: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 06:00:07 splunk3 sendmail[13168]: n31D077T013166: n31D077T013168: postmaster notify: User unknown
|
|
Apr 1 06:00:08 splunk3 sendmail[13168]: n31D077T013168: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:00:21 splunk3 sendmail[13242]: n31D0Lqj013242: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011300.n31D0Lu8022339@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:00:21 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38560
|
|
Apr 1 06:00:21 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:00:21 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 06:00:21 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 06:00:21 splunk3 sendmail[13243]: n31D0Lqj013242: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:00:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:00:43 splunk3 sendmail[13363]: n31D0hcH013363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:01:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:01:03 splunk3 sendmail[13454]: n31D11ZE013454: from=root, size=443, class=0, nrcpts=1, msgid=<200904011301.n31D11ZE013454@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 06:01:04 splunk3 sendmail[13457]: n31D13GQ013457: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011301.n31D11ZE013454@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 06:01:04 splunk3 sendmail[13454]: n31D11ZE013454: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31D13GQ013457 Message accepted for delivery)
|
|
Apr 1 06:01:05 splunk3 sendmail[13458]: n31D13GQ013457: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:01:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:01:43 splunk3 sendmail[13625]: n31D1h9j013625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:02:43 splunk3 sendmail[13859]: n31D2hKv013859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:03:43 splunk3 sendmail[14098]: n31D3hJr014098: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:04:43 splunk3 sendmail[14332]: n31D4hZA014332: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:05:22 splunk3 sendmail[14503]: n31D5M2O014503: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011305.n31D5L25023025@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:05:22 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38617
|
|
Apr 1 06:05:22 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:05:22 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 06:05:22 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 06:05:22 splunk3 sendmail[14504]: n31D5M2O014503: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:05:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:05:43 splunk3 sendmail[14589]: n31D5hRG014589: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:06:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:06:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:06:43 splunk3 sendmail[14832]: n31D6hH5014832: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:07:43 splunk3 sendmail[15070]: n31D7hhH015070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:08:43 splunk3 sendmail[15310]: n31D8h7U015310: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:09:43 splunk3 sendmail[15548]: n31D9h4l015548: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:10:02 splunk3 sendmail[15722]: n31DA2jp015722: from=root, size=292, class=0, nrcpts=1, msgid=<200904011310.n31DA2jp015722@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 06:10:02 splunk3 sendmail[15727]: n31DA2dr015727: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011310.n31DA2jp015722@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 06:10:02 splunk3 sendmail[15722]: n31DA2jp015722: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31DA2dr015727 Message accepted for delivery)
|
|
Apr 1 06:10:03 splunk3 sendmail[15728]: n31DA2dr015727: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:10:22 splunk3 sendmail[15824]: n31DAMgK015824: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011310.n31DAMuQ023668@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:10:22 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38673
|
|
Apr 1 06:10:22 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:10:22 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:10:22 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:10:22 splunk3 spamd[5605]: spamd: processing message <200904011310.n31DAMuQ023668@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:10:24 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 06:10:24 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38673,mid=<200904011310.n31DAMuQ023668@virt2.int.splunk.com>,bayes=0.112980178381206,autolearn=no
|
|
Apr 1 06:10:24 splunk3 sendmail[15825]: n31DAMgK015824: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:10:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:10:43 splunk3 sendmail[15908]: n31DAhMx015908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:11:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:11:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 06:11:43 splunk3 sendmail[16157]: n31DBh2i016157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:12:43 splunk3 sendmail[16393]: n31DChbf016393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:12:59 splunk3 sendmail[16177]: n31DBorp016177: from=<shepherdt@deactivatedon.com>, size=5727, class=0, nrcpts=1, msgid=<3502019dbf08$ea546e62$6f8c8da3@deactivatedon.com>, proto=ESMTP, daemon=MTA, relay=94.99.59.150.dynamic.saudi.net.sa [94.99.59.150] (may be forged)
|
|
Apr 1 06:12:59 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38700
|
|
Apr 1 06:12:59 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:12:59 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:12:59 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:12:59 splunk3 spamd[5605]: spamd: processing message <3502019dbf08$ea546e62$6f8c8da3@deactivatedon.com> for spamme:501
|
|
Apr 1 06:13:01 splunk3 spamd[5605]: spamd: identified spam (30.2/5.0) for spamme:501 in 1.9 seconds, 6064 bytes.
|
|
Apr 1 06:13:01 splunk3 spamd[5605]: spamd: result: Y 30 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FORGED_RCVD_HELO,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_SORBS_WEB,SUBJECT_EXCESS_BASE64,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.9,size=6064,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38700,mid=<3502019dbf08$ea546e62$6f8c8da3@deactivatedon.com>,bayes=1,autolearn=spam
|
|
Apr 1 06:13:01 splunk3 sendmail[16454]: n31DBorp016177: to=<spamme@splunkit.com>, delay=00:00:13, xdelay=00:00:02, mailer=local, pri=35957, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:13:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:13:43 splunk3 sendmail[16636]: n31DDhud016636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:14:43 splunk3 sendmail[16870]: n31DEhTY016870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:15:23 splunk3 sendmail[17040]: n31DFNUj017040: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011315.n31DFM9a024461@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:15:23 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38731
|
|
Apr 1 06:15:23 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:15:23 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:15:23 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:15:23 splunk3 spamd[5605]: spamd: processing message <200904011315.n31DFM9a024461@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:15:25 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 06:15:25 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38731,mid=<200904011315.n31DFM9a024461@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 06:15:25 splunk3 sendmail[17041]: n31DFNUj017040: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:15:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:15:43 splunk3 sendmail[17125]: n31DFhIS017125: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:16:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:16:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:16:43 splunk3 sendmail[17366]: n31DGh1w017366: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:17:43 splunk3 sendmail[17606]: n31DHh3Q017606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:18:43 splunk3 sendmail[17841]: n31DIhUv017841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:19:43 splunk3 sendmail[18079]: n31DJh7p018079: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:20:24 splunk3 sendmail[18252]: n31DKNLP018252: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011320.n31DKNTF025101@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:20:24 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38786
|
|
Apr 1 06:20:24 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:20:24 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:20:24 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:20:24 splunk3 spamd[5605]: spamd: processing message <200904011320.n31DKNTF025101@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:20:28 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Apr 1 06:20:28 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38786,mid=<200904011320.n31DKNTF025101@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 06:20:28 splunk3 sendmail[18253]: n31DKNLP018252: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:20:43 splunk3 sendmail[18337]: n31DKhjr018337: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:21:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:21:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:21:43 splunk3 sendmail[18583]: n31DLh1C018583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:22:43 splunk3 sendmail[18818]: n31DMh02018818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:23:43 splunk3 sendmail[19060]: n31DNhA3019060: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:24:43 splunk3 sendmail[19295]: n31DOhHd019295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:25:24 splunk3 sendmail[19468]: n31DPO9l019468: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011325.n31DPO5h025706@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:25:24 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38842
|
|
Apr 1 06:25:24 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:25:24 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:25:24 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:25:24 splunk3 spamd[5605]: spamd: processing message <200904011325.n31DPO5h025706@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:25:26 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 06:25:26 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38842,mid=<200904011325.n31DPO5h025706@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 06:25:26 splunk3 sendmail[19469]: n31DPO9l019468: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:25:43 splunk3 sendmail[19551]: n31DPhV0019551: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:26:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:26:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 06:26:43 splunk3 sendmail[19797]: n31DQhNO019797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:27:43 splunk3 sendmail[20036]: n31DRhUo020036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:28:43 splunk3 sendmail[20270]: n31DShJG020270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:29:43 splunk3 sendmail[20508]: n31DThN0020508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:30:24 splunk3 sendmail[20682]: n31DUOhw020682: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011330.n31DUOtW026328@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:30:24 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38898
|
|
Apr 1 06:30:24 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:30:24 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:30:24 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:30:24 splunk3 spamd[5605]: spamd: processing message <200904011330.n31DUOtW026328@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:30:26 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 06:30:26 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38898,mid=<200904011330.n31DUOtW026328@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 06:30:26 splunk3 sendmail[20683]: n31DUOhw020682: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:30:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:30:43 splunk3 sendmail[20763]: n31DUhMD020763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:31:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:31:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:31:43 splunk3 sendmail[21010]: n31DVh6H021010: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:32:43 splunk3 sendmail[21247]: n31DWhpS021247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:33:43 splunk3 sendmail[21486]: n31DXhR1021486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:34:43 splunk3 sendmail[21721]: n31DYhkB021721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:35:25 splunk3 sendmail[21893]: n31DZPJf021893: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011335.n31DZP6H027073@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:35:25 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38954
|
|
Apr 1 06:35:25 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:35:25 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:35:25 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:35:25 splunk3 spamd[5605]: spamd: processing message <200904011335.n31DZP6H027073@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:35:27 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 06:35:27 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38954,mid=<200904011335.n31DZP6H027073@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 06:35:27 splunk3 sendmail[21894]: n31DZPJf021893: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:35:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:35:43 splunk3 sendmail[21977]: n31DZho0021977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:36:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:36:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:36:43 splunk3 sendmail[22221]: n31DahYl022221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:37:43 splunk3 sendmail[22458]: n31DbhDW022458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:38:43 splunk3 sendmail[22698]: n31DchDX022698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:39:43 splunk3 sendmail[22938]: n31DdhVQ022938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:40:26 splunk3 sendmail[23128]: n31DePh6023128: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011340.n31DePGB027709@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:40:26 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39010
|
|
Apr 1 06:40:26 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:40:26 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:40:26 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:40:26 splunk3 spamd[5605]: spamd: processing message <200904011340.n31DePGB027709@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:40:28 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 1 06:40:28 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39010,mid=<200904011340.n31DePGB027709@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 06:40:28 splunk3 sendmail[23129]: n31DePh6023128: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:40:43 splunk3 sendmail[23194]: n31DehiJ023194: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:41:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:41:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 06:41:43 splunk3 sendmail[23443]: n31DfhZk023443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:42:43 splunk3 sendmail[23676]: n31DghUv023676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:43:43 splunk3 sendmail[23913]: n31DhhXb023913: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:44:43 splunk3 sendmail[24147]: n31Dih6i024147: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:45:14 splunk3 sendmail[24202]: n31DivOe024202: from=<wccoelc@bordeaux-france.com>, size=64483, class=0, nrcpts=1, msgid=<01c9b2d8$6e4d2780$3b5c0753@wccoelc>, proto=ESMTP, daemon=MTA, relay=abhc59.neoplus.adsl.tpnet.pl [83.7.92.59]
|
|
Apr 1 06:45:14 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39065
|
|
Apr 1 06:45:14 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:45:14 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:45:14 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:45:14 splunk3 spamd[5605]: spamd: processing message <01c9b2d8$6e4d2780$3b5c0753@wccoelc> for spamme:501
|
|
Apr 1 06:45:16 splunk3 spamd[5605]: spamd: identified spam (7.5/5.0) for spamme:501 in 2.2 seconds, 64789 bytes.
|
|
Apr 1 06:45:16 splunk3 spamd[5605]: spamd: result: Y 7 - BAYES_99,EXTRA_MPART_TYPE,HTML_30_40,HTML_IMAGE_ONLY_16,HTML_MESSAGE,RCVD_IN_SORBS_DUL scantime=2.2,size=64789,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39065,mid=<01c9b2d8$6e4d2780$3b5c0753@wccoelc>,bayes=0.999999884318068,autolearn=no
|
|
Apr 1 06:45:16 splunk3 sendmail[24280]: n31DivOe024202: to=<spamme@splunkit.com>, delay=00:00:16, xdelay=00:00:02, mailer=local, pri=94691, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:45:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:45:26 splunk3 sendmail[24340]: n31DjQt2024340: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011345.n31DjQHG028315@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:45:26 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39067
|
|
Apr 1 06:45:26 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:45:26 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:45:26 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:45:26 splunk3 spamd[5605]: spamd: processing message <200904011345.n31DjQHG028315@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:45:28 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 06:45:28 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39067,mid=<200904011345.n31DjQHG028315@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 06:45:28 splunk3 sendmail[24341]: n31DjQt2024340: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:45:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:45:43 splunk3 sendmail[24407]: n31Djhqb024407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:46:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:46:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:46:43 splunk3 sendmail[24650]: n31DkhPq024650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:47:43 splunk3 sendmail[24889]: n31Dlheu024889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:48:43 splunk3 sendmail[25124]: n31DmhmW025124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:49:43 splunk3 sendmail[25362]: n31DnhTN025362: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:50:26 splunk3 sendmail[25554]: n31DoQoi025554: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011350.n31DoQJK028928@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:50:26 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39123
|
|
Apr 1 06:50:26 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:50:26 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:50:26 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:50:26 splunk3 spamd[5605]: spamd: processing message <200904011350.n31DoQJK028928@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:50:28 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 06:50:28 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39123,mid=<200904011350.n31DoQJK028928@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 06:50:28 splunk3 sendmail[25555]: n31DoQoi025554: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:50:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:50:43 splunk3 sendmail[25621]: n31DohJW025621: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:51:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:51:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:51:43 splunk3 sendmail[25866]: n31Dphqm025866: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:52:43 splunk3 sendmail[26101]: n31Dqh7Q026101: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:53:43 splunk3 sendmail[26345]: n31DrhOf026345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:54:43 splunk3 sendmail[26580]: n31DshFm026580: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:55:27 splunk3 sendmail[26768]: n31DtRpO026768: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011355.n31DtR3r029558@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 06:55:27 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39178
|
|
Apr 1 06:55:27 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 06:55:27 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 06:55:27 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 06:55:27 splunk3 spamd[5605]: spamd: processing message <200904011355.n31DtR3r029558@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 06:55:29 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 06:55:29 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39178,mid=<200904011355.n31DtR3r029558@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 06:55:29 splunk3 sendmail[26769]: n31DtRpO026768: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 06:55:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 06:55:43 splunk3 sendmail[26835]: n31Dthks026835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:56:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 06:56:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 06:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 06:56:43 splunk3 sendmail[27079]: n31Duh7w027079: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:57:43 splunk3 sendmail[27318]: n31Dvhgr027318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:58:43 splunk3 sendmail[27551]: n31DwhDt027551: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 06:59:43 splunk3 sendmail[27791]: n31Dxhe1027791: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:00:04 splunk3 sendmail[27932]: n31E04bZ027932: from=root, size=291, class=0, nrcpts=1, msgid=<200904011400.n31E04bZ027932@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 07:00:04 splunk3 sendmail[27936]: n31E042Y027936: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011400.n31E04bZ027932@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 07:00:04 splunk3 sendmail[27932]: n31E04bZ027932: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31E042Y027936 Message accepted for delivery)
|
|
Apr 1 07:00:05 splunk3 sendmail[27937]: n31E042Y027936: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:00:13 splunk3 sendmail[27994]: n31E0Dnm027994: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904011400.n31E0Dnm027994@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 07:00:13 splunk3 sendmail[27996]: n31E0Dnm027994: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 07:00:13 splunk3 sendmail[27996]: n31E0Dnm027994: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 07:00:13 splunk3 sendmail[27996]: n31E0Dnm027994: n31E0Dnm027996: postmaster notify: User unknown
|
|
Apr 1 07:00:14 splunk3 sendmail[27996]: n31E0Dnm027996: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:00:28 splunk3 sendmail[28066]: n31E0REm028066: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011400.n31E0Ruo030173@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:00:28 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39243
|
|
Apr 1 07:00:28 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:00:28 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 07:00:28 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 07:00:28 splunk3 sendmail[28067]: n31E0REm028066: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:00:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:00:43 splunk3 sendmail[28131]: n31E0h1w028131: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:01:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:01:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:01:13 splunk3 sendmail[28220]: n31E11sP028220: from=root, size=443, class=0, nrcpts=1, msgid=<200904011401.n31E11sP028220@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 07:01:13 splunk3 sendmail[28267]: n31E1D3L028267: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011401.n31E11sP028220@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 07:01:13 splunk3 sendmail[28220]: n31E11sP028220: to=root, ctladdr=root (0/0), delay=00:00:12, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31E1D3L028267 Message accepted for delivery)
|
|
Apr 1 07:01:14 splunk3 sendmail[28268]: n31E1D3L028267: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:01:43 splunk3 sendmail[28390]: n31E1hW6028390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:02:43 splunk3 sendmail[28626]: n31E2hj4028626: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:03:21 splunk3 sendmail[28784]: n31E3LXW028784: from=<dan@splunk.com>, size=1080, class=0, nrcpts=1, msgid=<1DBFE0C7-9839-433A-900F-6A28A014003B@splunk.com>, proto=ESMTP, daemon=MTA, relay=exhub017-3.exch017.msoutlookonline.net [64.78.22.18]
|
|
Apr 1 07:03:21 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39273
|
|
Apr 1 07:03:21 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:03:21 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 07:03:21 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 07:03:22 splunk3 sendmail[28785]: n31E3LXW028784: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31324, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:03:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:03:43 splunk3 sendmail[28869]: n31E3h7r028869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:04:43 splunk3 sendmail[29104]: n31E4h1r029104: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:05:30 splunk3 sendmail[29311]: n31E5U79029311: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011405.n31E5SlU030879@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:05:30 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39301
|
|
Apr 1 07:05:30 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:05:30 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 07:05:30 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 07:05:30 splunk3 sendmail[29312]: n31E5U79029311: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:05:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:05:43 splunk3 sendmail[29357]: n31E5hEb029357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:06:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:06:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:06:43 splunk3 sendmail[29600]: n31E6hQX029600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:07:43 splunk3 sendmail[29840]: n31E7hm3029840: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:08:43 splunk3 sendmail[30080]: n31E8hr6030080: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:09:43 splunk3 sendmail[30321]: n31E9hqQ030321: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:10:01 splunk3 sendmail[30394]: n31EA1T0030394: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011410.n31EA0gL031395@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:10:01 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39344
|
|
Apr 1 07:10:01 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:10:01 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 07:10:01 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 07:10:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:10:01 splunk3 sendmail[30402]: n31EA1T0030394: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:10:02 splunk3 sendmail[30498]: n31EA2AS030498: from=root, size=292, class=0, nrcpts=1, msgid=<200904011410.n31EA2AS030498@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 07:10:02 splunk3 sendmail[30503]: n31EA2fd030503: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011410.n31EA2AS030498@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 07:10:02 splunk3 sendmail[30498]: n31EA2AS030498: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31EA2fd030503 Message accepted for delivery)
|
|
Apr 1 07:10:03 splunk3 sendmail[30504]: n31EA2fd030503: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:10:43 splunk3 sendmail[30679]: n31EAhLn030679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:11:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:11:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:11:19 splunk3 sendmail[14527]: n31D5RDi014527: SYSERR(root): collect: read timeout on connection from [41.221.24.10], from=<aejmpsufoe@boydsmarine.com>
|
|
Apr 1 07:11:19 splunk3 sendmail[14527]: n31D5RDi014527: from=<aejmpsufoe@boydsmarine.com>, size=17128, class=0, nrcpts=1, proto=ESMTP, daemon=MTA, relay=[41.221.24.10]
|
|
Apr 1 07:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 07:11:43 splunk3 sendmail[30928]: n31EBh5a030928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:12:43 splunk3 sendmail[31161]: n31EChl3031161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:13:43 splunk3 sendmail[31400]: n31EDh0T031400: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:14:43 splunk3 sendmail[31635]: n31EEhD2031635: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:15:01 splunk3 sendmail[31713]: n31EF1Bi031713: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011415.n31EF1mw032195@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:15:01 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39402
|
|
Apr 1 07:15:01 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:15:01 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:15:01 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:15:01 splunk3 spamd[5605]: spamd: processing message <200904011415.n31EF1mw032195@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 07:15:03 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 07:15:03 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39402,mid=<200904011415.n31EF1mw032195@virt2.int.splunk.com>,bayes=0.112975695657611,autolearn=no
|
|
Apr 1 07:15:03 splunk3 sendmail[31714]: n31EF1Bi031713: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:15:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:15:43 splunk3 sendmail[31890]: n31EFhGI031890: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:16:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:16:07 splunk3 sendmail[31969]: n31EG44Q031969: from=<stempleu@malwaredomains.com>, size=5760, class=0, nrcpts=1, msgid=<fb0b019dbfc3$5e768e99$92d3c8bf@malwaredomains.com>, proto=ESMTP, daemon=MTA, relay=[92.82.184.188]
|
|
Apr 1 07:16:07 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39420
|
|
Apr 1 07:16:07 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:16:07 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:16:07 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:16:07 splunk3 spamd[5605]: spamd: processing message <fb0b019dbfc3$5e768e99$92d3c8bf@malwaredomains.com> for spamme:501
|
|
Apr 1 07:16:09 splunk3 spamd[5605]: spamd: identified spam (27.8/5.0) for spamme:501 in 1.4 seconds, 6048 bytes.
|
|
Apr 1 07:16:09 splunk3 spamd[5605]: spamd: result: Y 27 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_BOGUSMX,DNS_FROM_RFC_POST,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,SUBJECT_EXCESS_BASE64,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=1.4,size=6048,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39420,mid=<fb0b019dbfc3$5e768e99$92d3c8bf@malwaredomains.com>,bayes=1,autolearn=spam
|
|
Apr 1 07:16:09 splunk3 sendmail[31987]: n31EG44Q031969: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:02, mailer=local, pri=35941, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:16:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:16:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:16:43 splunk3 sendmail[32138]: n31EGhiV032138: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:17:43 splunk3 sendmail[32375]: n31EHhOG032375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:18:43 splunk3 sendmail[32608]: n31EIhlJ032608: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:19:43 splunk3 sendmail[378]: n31EJhiI000378: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:20:01 splunk3 sendmail[459]: n31EK14H000459: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904011420.n31EK1bZ000381@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:20:01 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39458
|
|
Apr 1 07:20:01 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:20:01 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:20:01 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:20:01 splunk3 spamd[5605]: spamd: processing message <200904011420.n31EK1bZ000381@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 07:20:04 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1302 bytes.
|
|
Apr 1 07:20:04 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39458,mid=<200904011420.n31EK1bZ000381@virt2.int.splunk.com>,bayes=0.0668335905461712,autolearn=no
|
|
Apr 1 07:20:04 splunk3 sendmail[460]: n31EK14H000459: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:20:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:20:43 splunk3 sendmail[636]: n31EKhnr000636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:21:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:21:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:21:43 splunk3 sendmail[882]: n31ELhY6000882: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:22:43 splunk3 sendmail[1118]: n31EMhJ5001118: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:23:43 splunk3 sendmail[1362]: n31ENhbh001362: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:24:43 splunk3 sendmail[1598]: n31EOhNK001598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:25:02 splunk3 sendmail[1677]: n31EP2pB001677: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011425.n31EP2ks001012@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:25:02 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39514
|
|
Apr 1 07:25:02 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:25:02 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:25:02 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:25:02 splunk3 spamd[5605]: spamd: processing message <200904011425.n31EP2ks001012@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 07:25:04 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 1 07:25:04 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39514,mid=<200904011425.n31EP2ks001012@virt2.int.splunk.com>,bayes=0.170016711145973,autolearn=no
|
|
Apr 1 07:25:04 splunk3 sendmail[1678]: n31EP2pB001677: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:25:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:25:43 splunk3 sendmail[1854]: n31EPh8e001854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:26:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:26:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 07:26:43 splunk3 sendmail[2100]: n31EQhuq002100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:27:43 splunk3 sendmail[2339]: n31ERhiu002339: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:28:43 splunk3 sendmail[2575]: n31EShAX002575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:29:23 splunk3 sendmail[2703]: n31ETD42002703: from=<spikey@wolf-howl.com>, size=5720, class=0, nrcpts=1, msgid=<cf52019dc440$9e58891f$fa925ad4@wolf-howl.com>, proto=ESMTP, daemon=MTA, relay=[221.199.114.110]
|
|
Apr 1 07:29:23 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39566
|
|
Apr 1 07:29:23 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:29:23 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:29:23 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:29:23 splunk3 spamd[5605]: spamd: processing message <cf52019dc440$9e58891f$fa925ad4@wolf-howl.com> for spamme:501
|
|
Apr 1 07:29:25 splunk3 spamd[5605]: spamd: identified spam (32.4/5.0) for spamme:501 in 1.3 seconds, 5992 bytes.
|
|
Apr 1 07:29:25 splunk3 spamd[5605]: spamd: result: Y 32 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.3,size=5992,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39566,mid=<cf52019dc440$9e58891f$fa925ad4@wolf-howl.com>,bayes=1,autolearn=spam
|
|
Apr 1 07:29:25 splunk3 sendmail[2743]: n31ETD42002703: to=<spamme@splunkit.com>, delay=00:00:06, xdelay=00:00:02, mailer=local, pri=35899, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:29:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:29:43 splunk3 sendmail[2834]: n31EThxX002834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:30:03 splunk3 sendmail[2917]: n31EU3b7002917: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011430.n31EU21Q001657@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:30:03 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39572
|
|
Apr 1 07:30:03 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:30:03 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:30:03 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:30:03 splunk3 spamd[5605]: spamd: processing message <200904011430.n31EU21Q001657@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 07:30:05 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 07:30:05 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39572,mid=<200904011430.n31EU21Q001657@virt2.int.splunk.com>,bayes=0.170011343669552,autolearn=no
|
|
Apr 1 07:30:05 splunk3 sendmail[2918]: n31EU3b7002917: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:30:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:30:43 splunk3 sendmail[3101]: n31EUhq5003101: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:31:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:31:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:31:43 splunk3 sendmail[3349]: n31EVhqe003349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:32:43 splunk3 sendmail[3603]: n31EWhFP003603: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:33:43 splunk3 sendmail[3849]: n31EXh6v003849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:34:43 splunk3 sendmail[4095]: n31EYhKB004095: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:35:03 splunk3 sendmail[4178]: n31EZ3N6004178: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011435.n31EZ3g1002417@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:35:03 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39627
|
|
Apr 1 07:35:03 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:35:03 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:35:03 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:35:03 splunk3 spamd[5605]: spamd: processing message <200904011435.n31EZ3g1002417@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 07:35:05 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 1 07:35:05 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39627,mid=<200904011435.n31EZ3g1002417@virt2.int.splunk.com>,bayes=0.170011343669552,autolearn=no
|
|
Apr 1 07:35:05 splunk3 sendmail[4179]: n31EZ3N6004178: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:35:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:35:43 splunk3 sendmail[4368]: n31EZhCX004368: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:36:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:36:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:36:43 splunk3 sendmail[4613]: n31Eah7E004613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:37:43 splunk3 sendmail[4851]: n31EbhNa004851: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:38:43 splunk3 sendmail[5102]: n31EchPZ005102: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:39:43 splunk3 sendmail[5381]: n31Edh4p005381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:40:04 splunk3 sendmail[5460]: n31Ee4ds005460: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011440.n31Ee3dv003028@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:40:04 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39683
|
|
Apr 1 07:40:04 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:40:04 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:40:04 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:40:04 splunk3 spamd[5605]: spamd: processing message <200904011440.n31Ee3dv003028@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 07:40:06 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 1 07:40:06 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39683,mid=<200904011440.n31Ee3dv003028@virt2.int.splunk.com>,bayes=0.170011343669552,autolearn=no
|
|
Apr 1 07:40:06 splunk3 sendmail[5461]: n31Ee4ds005460: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:40:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:40:43 splunk3 sendmail[5638]: n31EehU2005638: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:41:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:41:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 07:41:43 splunk3 sendmail[5887]: n31EfhZE005887: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:42:43 splunk3 sendmail[6121]: n31Egho2006121: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:43:43 splunk3 sendmail[6362]: n31Ehh3D006362: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:44:43 splunk3 sendmail[6596]: n31EihJW006596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:45:05 splunk3 sendmail[6691]: n31Ej5eB006691: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011445.n31Ej4We003666@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:45:05 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39739
|
|
Apr 1 07:45:05 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:45:05 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:45:05 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:45:05 splunk3 spamd[5605]: spamd: processing message <200904011445.n31Ej4We003666@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 07:45:07 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 07:45:07 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39739,mid=<200904011445.n31Ej4We003666@virt2.int.splunk.com>,bayes=0.170011343669552,autolearn=no
|
|
Apr 1 07:45:07 splunk3 sendmail[6692]: n31Ej5eB006691: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:45:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:45:44 splunk3 sendmail[6851]: n31Ejicx006851: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:46:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:46:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:46:44 splunk3 sendmail[7094]: n31EkidV007094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:47:44 splunk3 sendmail[7331]: n31Elij8007331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:48:44 splunk3 sendmail[7573]: n31EmiGg007573: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:49:44 splunk3 sendmail[7809]: n31Eni2p007809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:50:06 splunk3 sendmail[7908]: n31Eo6MB007908: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011450.n31Eo5Vr004286@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:50:06 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39795
|
|
Apr 1 07:50:06 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:50:06 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:50:06 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:50:06 splunk3 spamd[5605]: spamd: processing message <200904011450.n31Eo5Vr004286@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 07:50:08 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 07:50:08 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39795,mid=<200904011450.n31Eo5Vr004286@virt2.int.splunk.com>,bayes=0.170011343669552,autolearn=no
|
|
Apr 1 07:50:08 splunk3 sendmail[7909]: n31Eo6MB007908: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:50:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:50:44 splunk3 sendmail[8067]: n31EoiPM008067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:51:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:51:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:51:44 splunk3 sendmail[8312]: n31Epixh008312: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:52:44 splunk3 sendmail[8547]: n31Eqi78008547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:53:44 splunk3 sendmail[8791]: n31EriZu008791: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:54:44 splunk3 sendmail[9024]: n31Esi3j009024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:54:58 splunk3 sendmail[9084]: n31Esv6f009084: from=<3QYDTSRQKBt4GOOGLEALERTS-NOREPLYGOOGLE.COMSPAMMESPLUNKIT.COM@alerts.bounces.google.com>, size=2811, class=0, nrcpts=1, msgid=<001517574498c6adfc04667f7fff@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.160]
|
|
Apr 1 07:54:58 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39849
|
|
Apr 1 07:54:58 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:54:58 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:54:58 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:54:58 splunk3 spamd[5605]: spamd: processing message <001517574498c6adfc04667f7fff@google.com> for spamme:501
|
|
Apr 1 07:55:01 splunk3 spamd[5605]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.8 seconds, 3240 bytes.
|
|
Apr 1 07:55:01 splunk3 spamd[5605]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.8,size=3240,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39849,mid=<001517574498c6adfc04667f7fff@google.com>,bayes=0,autolearn=ham
|
|
Apr 1 07:55:01 splunk3 sendmail[9085]: n31Esv6f009084: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=33021, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:55:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:55:06 splunk3 sendmail[9125]: n31Et6wt009125: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011455.n31Et69R004899@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 07:55:06 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39851
|
|
Apr 1 07:55:06 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 07:55:06 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 07:55:06 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 07:55:06 splunk3 spamd[5605]: spamd: processing message <200904011455.n31Et69R004899@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 07:55:08 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 07:55:08 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39851,mid=<200904011455.n31Et69R004899@virt2.int.splunk.com>,bayes=0.170049397586208,autolearn=no
|
|
Apr 1 07:55:08 splunk3 sendmail[9127]: n31Et6wt009125: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 07:55:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 07:55:44 splunk3 sendmail[9285]: n31Etifh009285: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:56:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 07:56:11 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 07:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 07:56:44 splunk3 sendmail[9532]: n31EuijD009532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:57:44 splunk3 sendmail[9780]: n31Evi0C009780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:58:44 splunk3 sendmail[10015]: n31Ewime010015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 07:59:44 splunk3 sendmail[10255]: n31Exi5O010255: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:00:04 splunk3 sendmail[10397]: n31F04da010397: from=root, size=291, class=0, nrcpts=1, msgid=<200904011500.n31F04da010397@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 08:00:04 splunk3 sendmail[10401]: n31F04NI010401: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011500.n31F04da010397@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 08:00:04 splunk3 sendmail[10397]: n31F04da010397: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31F04NI010401 Message accepted for delivery)
|
|
Apr 1 08:00:05 splunk3 sendmail[10402]: n31F04NI010401: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:00:07 splunk3 sendmail[10423]: n31F071E010423: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011500.n31F06jl005539@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:00:07 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39909
|
|
Apr 1 08:00:07 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:00:07 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 08:00:07 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 08:00:07 splunk3 sendmail[10424]: n31F071E010423: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:00:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:00:18 splunk3 sendmail[10481]: n31F0IwV010481: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904011500.n31F0IwV010481@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 08:00:18 splunk3 sendmail[10483]: n31F0IwV010481: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 08:00:18 splunk3 sendmail[10483]: n31F0IwV010481: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 08:00:18 splunk3 sendmail[10483]: n31F0IwV010481: n31F0IwV010483: postmaster notify: User unknown
|
|
Apr 1 08:00:20 splunk3 sendmail[10483]: n31F0IwV010483: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:00:44 splunk3 sendmail[10597]: n31F0iks010597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:01:01 splunk3 sendmail[10683]: n31F11rS010683: from=root, size=443, class=0, nrcpts=1, msgid=<200904011501.n31F11rS010683@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 08:01:01 splunk3 sendmail[10686]: n31F11Cf010686: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011501.n31F11rS010683@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 08:01:01 splunk3 sendmail[10683]: n31F11rS010683: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31F11Cf010686 Message accepted for delivery)
|
|
Apr 1 08:01:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:01:03 splunk3 sendmail[10687]: n31F11Cf010686: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:01:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:01:44 splunk3 sendmail[10855]: n31F1inE010855: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:02:44 splunk3 sendmail[11091]: n31F2iCe011091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:03:44 splunk3 sendmail[11330]: n31F3iSZ011330: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:04:44 splunk3 sendmail[11564]: n31F4iOS011564: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:05:08 splunk3 sendmail[11660]: n31F57mY011660: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011505.n31F57dJ006221@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:05:08 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39973
|
|
Apr 1 08:05:08 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:05:08 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 08:05:08 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 08:05:08 splunk3 sendmail[11661]: n31F57mY011660: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:05:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:05:44 splunk3 sendmail[11818]: n31F5iHf011818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:06:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:06:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:06:44 splunk3 sendmail[12061]: n31F6ii0012061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:07:44 splunk3 sendmail[12300]: n31F7iSj012300: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:08:44 splunk3 sendmail[12538]: n31F8iue012538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:09:44 splunk3 sendmail[12779]: n31F9iNV012779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:10:03 splunk3 sendmail[12952]: n31FA2v9012952: from=root, size=292, class=0, nrcpts=1, msgid=<200904011510.n31FA2v9012952@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 08:10:03 splunk3 sendmail[12957]: n31FA3Dr012957: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011510.n31FA2v9012952@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 08:10:03 splunk3 sendmail[12952]: n31FA2v9012952: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31FA3Dr012957 Message accepted for delivery)
|
|
Apr 1 08:10:04 splunk3 sendmail[12958]: n31FA3Dr012957: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:10:08 splunk3 sendmail[12980]: n31FA8xE012980: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011510.n31FA8MO006838@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:10:08 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40029
|
|
Apr 1 08:10:08 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:10:08 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:10:08 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:10:08 splunk3 spamd[5605]: spamd: processing message <200904011510.n31FA8MO006838@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:10:10 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 1 08:10:10 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40029,mid=<200904011510.n31FA8MO006838@virt2.int.splunk.com>,bayes=0.170049397586208,autolearn=no
|
|
Apr 1 08:10:10 splunk3 sendmail[12981]: n31FA8xE012980: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:10:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:10:44 splunk3 sendmail[13138]: n31FAiQM013138: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:11:02 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:11:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 08:11:44 splunk3 sendmail[13427]: n31FBia5013427: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:12:44 splunk3 sendmail[13661]: n31FCiOb013661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:13:44 splunk3 sendmail[13900]: n31FDiBw013900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:14:44 splunk3 sendmail[14136]: n31FEikP014136: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:15:09 splunk3 sendmail[14234]: n31FF91Z014234: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011515.n31FF8Mv007631@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:15:09 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40086
|
|
Apr 1 08:15:09 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:15:09 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:15:09 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:15:09 splunk3 spamd[5605]: spamd: processing message <200904011515.n31FF8Mv007631@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:15:11 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 1 08:15:11 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40086,mid=<200904011515.n31FF8Mv007631@virt2.int.splunk.com>,bayes=0.170049397586208,autolearn=no
|
|
Apr 1 08:15:11 splunk3 sendmail[14235]: n31FF91Z014234: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:15:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:15:44 splunk3 sendmail[14390]: n31FFiZk014390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:16:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:16:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:16:44 splunk3 sendmail[14633]: n31FGiVC014633: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:17:44 splunk3 sendmail[14871]: n31FHihI014871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:18:44 splunk3 sendmail[15108]: n31FIiL0015108: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:19:44 splunk3 sendmail[15347]: n31FJiVO015347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:20:09 splunk3 sendmail[15467]: n31FK9Hp015467: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011520.n31FK9k5008264@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:20:09 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40141
|
|
Apr 1 08:20:09 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:20:09 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:20:09 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:20:09 splunk3 spamd[5605]: spamd: processing message <200904011520.n31FK9k5008264@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:20:11 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 1 08:20:11 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40141,mid=<200904011520.n31FK9k5008264@virt2.int.splunk.com>,bayes=0.170049397586208,autolearn=no
|
|
Apr 1 08:20:11 splunk3 sendmail[15468]: n31FK9Hp015467: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:20:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:20:44 splunk3 sendmail[15605]: n31FKiCG015605: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:21:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:21:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:21:44 splunk3 sendmail[15851]: n31FLisg015851: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:22:44 splunk3 sendmail[16084]: n31FMi4v016084: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:23:44 splunk3 sendmail[16326]: n31FNiAl016326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:24:44 splunk3 sendmail[16560]: n31FOiHc016560: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:25:10 splunk3 sendmail[16679]: n31FPA01016679: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011525.n31FPA4u008868@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:25:10 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40197
|
|
Apr 1 08:25:10 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:25:10 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:25:10 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:25:10 splunk3 spamd[5605]: spamd: processing message <200904011525.n31FPA4u008868@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:25:12 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 08:25:12 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40197,mid=<200904011525.n31FPA4u008868@virt2.int.splunk.com>,bayes=0.170049397586208,autolearn=no
|
|
Apr 1 08:25:12 splunk3 sendmail[16680]: n31FPA01016679: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:25:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:25:44 splunk3 sendmail[16816]: n31FPiQ1016816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:26:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:26:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 08:26:44 splunk3 sendmail[17060]: n31FQiW6017060: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:27:44 splunk3 sendmail[17299]: n31FRiOT017299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:28:44 splunk3 sendmail[17533]: n31FSiEa017533: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:29:44 splunk3 sendmail[17788]: n31FTinl017788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:30:11 splunk3 sendmail[17893]: n31FUBsM017893: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011530.n31FUBu8009490@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:30:11 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40253
|
|
Apr 1 08:30:11 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:30:11 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:30:11 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:30:11 splunk3 spamd[5605]: spamd: processing message <200904011530.n31FUBu8009490@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:30:13 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 08:30:13 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40253,mid=<200904011530.n31FUBu8009490@virt2.int.splunk.com>,bayes=0.170049397586208,autolearn=no
|
|
Apr 1 08:30:13 splunk3 sendmail[17894]: n31FUBsM017893: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:30:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:30:44 splunk3 sendmail[18045]: n31FUihL018045: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:31:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:31:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:31:44 splunk3 sendmail[18291]: n31FViWJ018291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:32:44 splunk3 sendmail[18528]: n31FWi3j018528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:33:44 splunk3 sendmail[18766]: n31FXih7018766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:34:44 splunk3 sendmail[19001]: n31FYiVX019001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:35:12 splunk3 sendmail[19104]: n31FZBG0019104: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011535.n31FZBS5010240@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:35:12 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40309
|
|
Apr 1 08:35:12 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:35:12 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:35:12 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:35:12 splunk3 spamd[5605]: spamd: processing message <200904011535.n31FZBS5010240@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:35:14 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 08:35:14 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40309,mid=<200904011535.n31FZBS5010240@virt2.int.splunk.com>,bayes=0.112999050170132,autolearn=no
|
|
Apr 1 08:35:14 splunk3 sendmail[19105]: n31FZBG0019104: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:35:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:35:44 splunk3 sendmail[19256]: n31FZi54019256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:36:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:36:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:36:44 splunk3 sendmail[19499]: n31Faig2019499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:36:59 splunk3 sendmail[13935]: n31FDohD013935: cpc1-runc3-0-0-cust862.bagu.cable.ntl.com [86.4.227.95] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:37:44 splunk3 sendmail[19738]: n31FbiRw019738: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:38:44 splunk3 sendmail[19977]: n31FciY9019977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:39:44 splunk3 sendmail[20216]: n31FdiEJ020216: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:40:12 splunk3 sendmail[20319]: n31FeCTX020319: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011540.n31FeC71010878@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:40:12 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40364
|
|
Apr 1 08:40:12 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:40:12 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:40:12 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:40:12 splunk3 spamd[5605]: spamd: processing message <200904011540.n31FeC71010878@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:40:14 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 08:40:14 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40364,mid=<200904011540.n31FeC71010878@virt2.int.splunk.com>,bayes=0.112999050170132,autolearn=no
|
|
Apr 1 08:40:14 splunk3 sendmail[20320]: n31FeCTX020319: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:40:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:40:44 splunk3 sendmail[20471]: n31Fei9t020471: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:41:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:41:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 08:41:44 splunk3 sendmail[20720]: n31FfijV020720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:42:44 splunk3 sendmail[20955]: n31Fgiwi020955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:43:44 splunk3 sendmail[21193]: n31FhiGl021193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:44:44 splunk3 sendmail[21429]: n31Fii2l021429: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:45:13 splunk3 sendmail[21533]: n31FjDGZ021533: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011545.n31FjCcQ011493@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:45:13 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40421
|
|
Apr 1 08:45:13 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:45:13 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:45:13 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:45:13 splunk3 spamd[5605]: spamd: processing message <200904011545.n31FjCcQ011493@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:45:15 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 08:45:15 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40421,mid=<200904011545.n31FjCcQ011493@virt2.int.splunk.com>,bayes=0.112999050170132,autolearn=no
|
|
Apr 1 08:45:15 splunk3 sendmail[21534]: n31FjDGZ021533: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:45:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:45:44 splunk3 sendmail[21682]: n31FjiT4021682: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:46:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:46:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:46:44 splunk3 sendmail[21927]: n31FkihM021927: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:47:44 splunk3 sendmail[22167]: n31FliLW022167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:48:06 splunk3 sendmail[16481]: n31FOvRT016481: [193.152.151.204] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:48:44 splunk3 sendmail[22402]: n31FmiPh022402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:49:44 splunk3 sendmail[22640]: n31FniAp022640: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:50:14 splunk3 sendmail[22761]: n31FoEP2022761: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011550.n31FoDNX012105@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:50:14 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40477
|
|
Apr 1 08:50:14 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:50:14 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:50:14 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:50:14 splunk3 spamd[5605]: spamd: processing message <200904011550.n31FoDNX012105@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:50:16 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 1 08:50:16 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40477,mid=<200904011550.n31FoDNX012105@virt2.int.splunk.com>,bayes=0.112999050170132,autolearn=no
|
|
Apr 1 08:50:16 splunk3 sendmail[22763]: n31FoEP2022761: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:50:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:50:44 splunk3 sendmail[22897]: n31FoiPj022897: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:51:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:51:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:51:32 splunk3 sendmail[23087]: n31FpWaq023087: from=<3hI3TSRQKBi8RZZRWPLWPced-YZcPaWjRZZRWP.NZXdaLXXPdaWfYVTe.NZX@alerts.bounces.google.com>, size=2799, class=0, nrcpts=1, msgid=<0015175744981d8ff90466804a4d@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.161]
|
|
Apr 1 08:51:32 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40498
|
|
Apr 1 08:51:32 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:51:32 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:51:32 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:51:32 splunk3 spamd[5605]: spamd: processing message <0015175744981d8ff90466804a4d@google.com> for spamme:501
|
|
Apr 1 08:51:35 splunk3 spamd[5605]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.3 seconds, 3228 bytes.
|
|
Apr 1 08:51:35 splunk3 spamd[5605]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.3,size=3228,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40498,mid=<0015175744981d8ff90466804a4d@google.com>,bayes=0,autolearn=ham
|
|
Apr 1 08:51:35 splunk3 sendmail[23088]: n31FpWaq023087: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=33009, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:51:35 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:51:44 splunk3 sendmail[23150]: n31Fpiv8023150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:52:44 splunk3 sendmail[23383]: n31Fqia6023383: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:53:44 splunk3 sendmail[23628]: n31FribK023628: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:54:44 splunk3 sendmail[23861]: n31FsiWl023861: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:55:14 splunk3 sendmail[23980]: n31FtEGK023980: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011555.n31FtEM8012712@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 08:55:14 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40533
|
|
Apr 1 08:55:14 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 08:55:14 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 08:55:14 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 08:55:14 splunk3 spamd[5605]: spamd: processing message <200904011555.n31FtEM8012712@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 08:55:16 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 08:55:16 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40533,mid=<200904011555.n31FtEM8012712@virt2.int.splunk.com>,bayes=0.113031368771718,autolearn=no
|
|
Apr 1 08:55:16 splunk3 sendmail[23981]: n31FtEGK023980: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 08:55:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 08:55:44 splunk3 sendmail[24115]: n31Fti6Y024115: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:56:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 08:56:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 08:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 08:56:44 splunk3 sendmail[24359]: n31Fui56024359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:57:44 splunk3 sendmail[24597]: n31FviK6024597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:58:44 splunk3 sendmail[24831]: n31Fwinf024831: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 08:59:44 splunk3 sendmail[25071]: n31Fxiae025071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:00:04 splunk3 sendmail[25212]: n31G04ri025212: from=root, size=291, class=0, nrcpts=1, msgid=<200904011600.n31G04ri025212@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 09:00:05 splunk3 sendmail[25216]: n31G04a6025216: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011600.n31G04ri025212@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 09:00:05 splunk3 sendmail[25212]: n31G04ri025212: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31G04a6025216 Message accepted for delivery)
|
|
Apr 1 09:00:06 splunk3 sendmail[25217]: n31G04a6025216: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:00:15 splunk3 sendmail[25263]: n31G0Feb025263: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011600.n31G0EiA013349@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:00:15 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40591
|
|
Apr 1 09:00:15 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:00:15 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 09:00:15 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 09:00:15 splunk3 sendmail[25264]: n31G0Feb025263: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:00:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:00:24 splunk3 sendmail[25316]: n31G0OIg025316: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904011600.n31G0OIg025316@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 09:00:24 splunk3 sendmail[25318]: n31G0OIg025316: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 09:00:24 splunk3 sendmail[25318]: n31G0OIg025316: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 09:00:24 splunk3 sendmail[25318]: n31G0OIg025316: n31G0OIg025318: postmaster notify: User unknown
|
|
Apr 1 09:00:25 splunk3 sendmail[25318]: n31G0OIg025318: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:00:44 splunk3 sendmail[25412]: n31G0inu025412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:01:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:01:06 splunk3 sendmail[25484]: n31G11lt025484: from=root, size=443, class=0, nrcpts=1, msgid=<200904011601.n31G11lt025484@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 09:01:06 splunk3 sendmail[25504]: n31G16Ek025504: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011601.n31G11lt025484@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 09:01:06 splunk3 sendmail[25484]: n31G11lt025484: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31G16Ek025504 Message accepted for delivery)
|
|
Apr 1 09:01:07 splunk3 sendmail[25505]: n31G16Ek025504: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:01:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:01:44 splunk3 sendmail[25672]: n31G1iX2025672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:02:44 splunk3 sendmail[25907]: n31G2iJT025907: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:03:44 splunk3 sendmail[26145]: n31G3iOf026145: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:04:44 splunk3 sendmail[26379]: n31G4i4P026379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:05:15 splunk3 sendmail[26501]: n31G5F45026501: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011605.n31G5FJ5014035@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:05:15 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40654
|
|
Apr 1 09:05:15 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:05:15 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 09:05:15 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 09:05:15 splunk3 sendmail[26502]: n31G5F45026501: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:05:44 splunk3 sendmail[26634]: n31G5iRL026634: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:06:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:06:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:06:44 splunk3 sendmail[26877]: n31G6i7D026877: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:07:44 splunk3 sendmail[27115]: n31G7iKe027115: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:08:44 splunk3 sendmail[27355]: n31G8iuP027355: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:09:44 splunk3 sendmail[27595]: n31G9ioZ027595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:10:02 splunk3 sendmail[27751]: n31GA2iM027751: from=root, size=292, class=0, nrcpts=1, msgid=<200904011610.n31GA2iM027751@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 09:10:02 splunk3 sendmail[27756]: n31GA2S4027756: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011610.n31GA2iM027751@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 09:10:02 splunk3 sendmail[27751]: n31GA2iM027751: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31GA2S4027756 Message accepted for delivery)
|
|
Apr 1 09:10:03 splunk3 sendmail[27757]: n31GA2S4027756: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:10:16 splunk3 sendmail[27821]: n31GAFM8027821: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011610.n31GAFSQ014650@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:10:16 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40711
|
|
Apr 1 09:10:16 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:10:16 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:10:16 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:10:16 splunk3 spamd[5605]: spamd: processing message <200904011610.n31GAFSQ014650@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:10:18 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 09:10:18 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40711,mid=<200904011610.n31GAFSQ014650@virt2.int.splunk.com>,bayes=0.113031368771718,autolearn=no
|
|
Apr 1 09:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:10:18 splunk3 sendmail[27822]: n31GAFM8027821: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:10:44 splunk3 sendmail[27953]: n31GAilI027953: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:11:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:11:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 09:11:44 splunk3 sendmail[28202]: n31GBicx028202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:12:44 splunk3 sendmail[28436]: n31GCiXj028436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:13:44 splunk3 sendmail[28679]: n31GDiA2028679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:14:44 splunk3 sendmail[28913]: n31GEia7028913: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:15:16 splunk3 sendmail[29034]: n31GFGti029034: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011615.n31GFG0L015409@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:15:16 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40767
|
|
Apr 1 09:15:16 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:15:16 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:15:16 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:15:16 splunk3 spamd[5605]: spamd: processing message <200904011615.n31GFG0L015409@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:15:18 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 09:15:18 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40767,mid=<200904011615.n31GFG0L015409@virt2.int.splunk.com>,bayes=0.113031368771718,autolearn=no
|
|
Apr 1 09:15:18 splunk3 sendmail[29035]: n31GFGti029034: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:15:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:15:44 splunk3 sendmail[29170]: n31GFilN029170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:16:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:16:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:16:44 splunk3 sendmail[29412]: n31GGisl029412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:17:44 splunk3 sendmail[29651]: n31GHiC4029651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:18:44 splunk3 sendmail[29885]: n31GIirv029885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:19:03 splunk3 sendmail[29947]: n31GJ2xr029947: from=<39pPTSRQKBqcNVVNSLHSLYaZ-UVYLWSfNVVNSL.JVTZWHTTLZWSbURPa.JVT@alerts.bounces.google.com>, size=7117, class=0, nrcpts=1, msgid=<00163698966f7ac2b2046680acba@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.189]
|
|
Apr 1 09:19:03 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40812
|
|
Apr 1 09:19:03 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:19:03 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:19:03 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:19:03 splunk3 spamd[5605]: spamd: processing message <00163698966f7ac2b2046680acba@google.com> for spamme:501
|
|
Apr 1 09:19:06 splunk3 spamd[5605]: spamd: clean message (-2.3/5.0) for spamme:501 in 3.0 seconds, 7547 bytes.
|
|
Apr 1 09:19:06 splunk3 spamd[5605]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=3.0,size=7547,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40812,mid=<00163698966f7ac2b2046680acba@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Apr 1 09:19:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:19:06 splunk3 sendmail[29948]: n31GJ2xr029947: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:03, mailer=local, pri=37328, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:19:44 splunk3 sendmail[30129]: n31GJiI2030129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:20:17 splunk3 sendmail[30253]: n31GKGTU030253: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011620.n31GKGaL016088@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:20:17 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40824
|
|
Apr 1 09:20:17 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:20:17 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:20:17 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:20:17 splunk3 spamd[5605]: spamd: processing message <200904011620.n31GKGaL016088@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:20:19 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 09:20:19 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40824,mid=<200904011620.n31GKGaL016088@virt2.int.splunk.com>,bayes=0.113063687109234,autolearn=no
|
|
Apr 1 09:20:19 splunk3 sendmail[30254]: n31GKGTU030253: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:20:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:20:44 splunk3 sendmail[30387]: n31GKiaX030387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:21:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:21:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:21:44 splunk3 sendmail[30632]: n31GLis8030632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:22:44 splunk3 sendmail[30870]: n31GMitx030870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:23:44 splunk3 sendmail[31113]: n31GNif8031113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:24:44 splunk3 sendmail[31347]: n31GOiTu031347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:25:17 splunk3 sendmail[31468]: n31GPHAj031468: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011625.n31GPHlk016698@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:25:17 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40879
|
|
Apr 1 09:25:17 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:25:17 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:25:17 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:25:17 splunk3 spamd[5605]: spamd: processing message <200904011625.n31GPHlk016698@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:25:19 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 09:25:19 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40879,mid=<200904011625.n31GPHlk016698@virt2.int.splunk.com>,bayes=0.113063687109234,autolearn=no
|
|
Apr 1 09:25:19 splunk3 sendmail[31469]: n31GPHAj031468: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:25:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:25:44 splunk3 sendmail[31600]: n31GPi02031600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:26:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:26:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 09:26:44 splunk3 sendmail[31846]: n31GQinQ031846: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:27:44 splunk3 sendmail[32084]: n31GRiLI032084: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:28:44 splunk3 sendmail[32317]: n31GSioJ032317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:29:44 splunk3 sendmail[32558]: n31GTirV032558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:30:18 splunk3 sendmail[32680]: n31GUImd032680: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011630.n31GUHo6017318@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:30:18 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40936
|
|
Apr 1 09:30:18 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:30:18 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:30:18 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:30:18 splunk3 spamd[5605]: spamd: processing message <200904011630.n31GUHo6017318@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:30:21 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 09:30:21 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40936,mid=<200904011630.n31GUHo6017318@virt2.int.splunk.com>,bayes=0.113063687109234,autolearn=no
|
|
Apr 1 09:30:21 splunk3 sendmail[32681]: n31GUImd032680: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:30:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:30:44 splunk3 sendmail[349]: n31GUivW000349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:31:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:31:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:31:44 splunk3 sendmail[595]: n31GVi04000595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:32:44 splunk3 sendmail[829]: n31GWiUu000829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:33:44 splunk3 sendmail[1070]: n31GXiXx001070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:34:44 splunk3 sendmail[1306]: n31GYiE0001306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:35:18 splunk3 sendmail[1445]: n31GZIcv001445: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011635.n31GZIJ3018063@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:35:18 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40992
|
|
Apr 1 09:35:18 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:35:18 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:35:18 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:35:18 splunk3 spamd[5605]: spamd: processing message <200904011635.n31GZIJ3018063@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:35:20 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 1 09:35:20 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40992,mid=<200904011635.n31GZIJ3018063@virt2.int.splunk.com>,bayes=0.113063687109234,autolearn=no
|
|
Apr 1 09:35:20 splunk3 sendmail[1446]: n31GZIcv001445: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:35:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:35:44 splunk3 sendmail[1559]: n31GZi79001559: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:36:01 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:36:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:36:44 splunk3 sendmail[1805]: n31Gaiqx001805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:37:44 splunk3 sendmail[2047]: n31GbiwY002047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:38:44 splunk3 sendmail[2286]: n31GciHC002286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:39:44 splunk3 sendmail[2521]: n31GdiEx002521: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:40:19 splunk3 sendmail[2670]: n31GeJsI002670: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011640.n31GeIL8018691@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:40:19 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41047
|
|
Apr 1 09:40:19 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:40:19 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:40:19 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:40:19 splunk3 spamd[5605]: spamd: processing message <200904011640.n31GeIL8018691@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:40:21 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 09:40:21 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41047,mid=<200904011640.n31GeIL8018691@virt2.int.splunk.com>,bayes=0.113063687109234,autolearn=no
|
|
Apr 1 09:40:21 splunk3 sendmail[2671]: n31GeJsI002670: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:40:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:40:44 splunk3 sendmail[2793]: n31GeioR002793: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:41:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:41:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 09:41:44 splunk3 sendmail[3053]: n31Gfi9k003053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:42:44 splunk3 sendmail[3289]: n31GgiqF003289: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:43:06 splunk3 sendmail[3355]: n31Gh3UG003355: from=<uehidrkvced@blurbpr.com>, size=1064, class=0, nrcpts=1, msgid=<01c9b2f9$b2045900$8cc7e658@uehidrkvced>, proto=ESMTP, daemon=MTA, relay=dsl88.230-51084.ttnet.net.tr [88.230.199.140] (may be forged)
|
|
Apr 1 09:43:06 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41085
|
|
Apr 1 09:43:06 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:43:06 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:43:06 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:43:06 splunk3 spamd[5605]: spamd: processing message <01c9b2f9$b2045900$8cc7e658@uehidrkvced> for spamme:501
|
|
Apr 1 09:43:09 splunk3 spamd[5605]: spamd: identified spam (19.4/5.0) for spamme:501 in 2.5 seconds, 1395 bytes.
|
|
Apr 1 09:43:09 splunk3 spamd[5605]: spamd: result: Y 19 - BAYES_95,HELO_DYNAMIC_DHCP,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL scantime=2.5,size=1395,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41085,mid=<01c9b2f9$b2045900$8cc7e658@uehidrkvced>,bayes=0.975580854811198,autolearn=spam
|
|
Apr 1 09:43:09 splunk3 sendmail[3373]: n31Gh3UG003355: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:03, mailer=local, pri=31305, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:43:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:43:44 splunk3 sendmail[3534]: n31Ghi9d003534: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:44:44 splunk3 sendmail[3797]: n31GiiAH003797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:45:19 splunk3 sendmail[3946]: n31GjJxk003946: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011645.n31GjJWS019302@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:45:19 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41113
|
|
Apr 1 09:45:19 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:45:19 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:45:19 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:45:19 splunk3 spamd[5605]: spamd: processing message <200904011645.n31GjJWS019302@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:45:21 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 09:45:21 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41113,mid=<200904011645.n31GjJWS019302@virt2.int.splunk.com>,bayes=0.113056206969378,autolearn=no
|
|
Apr 1 09:45:21 splunk3 sendmail[3947]: n31GjJxk003946: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:45:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:45:44 splunk3 sendmail[4059]: n31GjiW5004059: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:46:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:46:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:46:44 splunk3 sendmail[4315]: n31GkioI004315: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:47:44 splunk3 sendmail[4561]: n31Glitj004561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:48:44 splunk3 sendmail[4796]: n31Gmix5004796: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:49:44 splunk3 sendmail[5046]: n31GniKE005046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:50:20 splunk3 sendmail[5236]: n31GoKqM005236: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011650.n31GoJrr019912@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:50:20 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41168
|
|
Apr 1 09:50:20 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:50:20 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:50:20 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:50:20 splunk3 spamd[5605]: spamd: processing message <200904011650.n31GoJrr019912@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:50:22 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 09:50:22 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41168,mid=<200904011650.n31GoJrr019912@virt2.int.splunk.com>,bayes=0.113056206969378,autolearn=no
|
|
Apr 1 09:50:22 splunk3 sendmail[5237]: n31GoKqM005236: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:50:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:50:44 splunk3 sendmail[5339]: n31Goiix005339: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:51:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:51:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:51:44 splunk3 sendmail[5593]: n31GpitW005593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:52:44 splunk3 sendmail[5827]: n31GqiDe005827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:53:44 splunk3 sendmail[6083]: n31GriZI006083: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:54:45 splunk3 sendmail[6317]: n31GsiYu006317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:55:20 splunk3 sendmail[6469]: n31GtKmC006469: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011655.n31GtKwi020521@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 09:55:20 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41224
|
|
Apr 1 09:55:20 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 09:55:20 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 09:55:20 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 09:55:20 splunk3 spamd[5605]: spamd: processing message <200904011655.n31GtKwi020521@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 09:55:22 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 09:55:22 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41224,mid=<200904011655.n31GtKwi020521@virt2.int.splunk.com>,bayes=0.113056206969378,autolearn=no
|
|
Apr 1 09:55:22 splunk3 sendmail[6470]: n31GtKmC006469: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 09:55:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 09:55:45 splunk3 sendmail[6572]: n31GtjIh006572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:56:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 09:56:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 09:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 09:56:45 splunk3 sendmail[6817]: n31GujZ0006817: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:57:45 splunk3 sendmail[7056]: n31GvjJ8007056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:58:45 splunk3 sendmail[7291]: n31GwjcY007291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 09:59:45 splunk3 sendmail[7530]: n31Gxjn0007530: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:00:04 splunk3 sendmail[7685]: n31H04w5007685: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904011700.n31H04w5007685@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 10:00:04 splunk3 sendmail[7687]: n31H04w5007685: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 10:00:04 splunk3 sendmail[7687]: n31H04w5007685: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 1 10:00:04 splunk3 sendmail[7687]: n31H04w5007685: n31H04w5007687: postmaster notify: User unknown
|
|
Apr 1 10:00:04 splunk3 sendmail[7691]: n31H049x007691: from=root, size=291, class=0, nrcpts=1, msgid=<200904011700.n31H049x007691@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 10:00:04 splunk3 sendmail[7702]: n31H04ji007702: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011700.n31H049x007691@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 10:00:04 splunk3 sendmail[7691]: n31H049x007691: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31H04ji007702 Message accepted for delivery)
|
|
Apr 1 10:00:05 splunk3 sendmail[7687]: n31H04w5007687: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:00:13 splunk3 sendmail[7708]: n31H04ji007702: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:09, xdelay=00:00:09, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:00:21 splunk3 sendmail[7773]: n31H0LRq007773: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011700.n31H0K5E021160@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:00:21 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41288
|
|
Apr 1 10:00:21 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:00:21 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 10:00:21 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 10:00:21 splunk3 sendmail[7774]: n31H0LRq007773: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:00:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:00:45 splunk3 sendmail[7876]: n31H0jue007876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:01:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:01:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:01:15 splunk3 sendmail[7947]: n31H11cY007947: from=root, size=443, class=0, nrcpts=1, msgid=<200904011701.n31H11cY007947@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 10:01:15 splunk3 sendmail[8017]: n31H1F2u008017: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011701.n31H11cY007947@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 10:01:15 splunk3 sendmail[7947]: n31H11cY007947: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31H1F2u008017 Message accepted for delivery)
|
|
Apr 1 10:01:16 splunk3 sendmail[8018]: n31H1F2u008017: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:01:45 splunk3 sendmail[8135]: n31H1jgp008135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:02:45 splunk3 sendmail[8370]: n31H2jao008370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:03:45 splunk3 sendmail[8608]: n31H3jrN008608: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:04:45 splunk3 sendmail[8843]: n31H4jqb008843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:05:21 splunk3 sendmail[8995]: n31H5LT5008995: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011705.n31H5LfB021836@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:05:21 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41345
|
|
Apr 1 10:05:21 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:05:21 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 10:05:21 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 10:05:21 splunk3 sendmail[8996]: n31H5LT5008995: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:05:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:05:45 splunk3 sendmail[9097]: n31H5jNd009097: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:06:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:06:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:06:45 splunk3 sendmail[9341]: n31H6jdN009341: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:06:45 splunk3 sendmail[9282]: n31H6Xm8009282: from=<ngrsh@bowkis.com>, size=64411, class=0, nrcpts=1, msgid=<01c9b2f4$98acde00$959c2253@ngrsh>, proto=ESMTP, daemon=MTA, relay=149.Red-83-34-156.dynamicIP.rima-tde.net [83.34.156.149]
|
|
Apr 1 10:06:45 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41359
|
|
Apr 1 10:06:45 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:06:45 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 10:06:45 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 10:06:45 splunk3 sendmail[9342]: n31H6Xm8009282: to=<spamme@splunkit.com>, delay=00:00:09, xdelay=00:00:00, mailer=local, pri=94659, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:06:45 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:07:45 splunk3 sendmail[9594]: n31H7j9H009594: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:08:45 splunk3 sendmail[9834]: n31H8j65009834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:09:45 splunk3 sendmail[10074]: n31H9jFX010074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:10:02 splunk3 sendmail[10231]: n31HA2mW010231: from=root, size=292, class=0, nrcpts=1, msgid=<200904011710.n31HA2mW010231@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 10:10:02 splunk3 sendmail[10236]: n31HA2os010236: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011710.n31HA2mW010231@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 10:10:02 splunk3 sendmail[10231]: n31HA2mW010231: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31HA2os010236 Message accepted for delivery)
|
|
Apr 1 10:10:04 splunk3 sendmail[10237]: n31HA2os010236: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:10:21 splunk3 sendmail[10332]: n31HAL5A010332: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011710.n31HALQb022456@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:10:22 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41402
|
|
Apr 1 10:10:22 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:10:22 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:10:22 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:10:22 splunk3 spamd[5605]: spamd: processing message <200904011710.n31HALQb022456@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:10:26 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1308 bytes.
|
|
Apr 1 10:10:26 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41402,mid=<200904011710.n31HALQb022456@virt2.int.splunk.com>,bayes=0.113056206969378,autolearn=no
|
|
Apr 1 10:10:26 splunk3 sendmail[10333]: n31HAL5A010332: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:05, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:10:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:10:45 splunk3 sendmail[10433]: n31HAjZl010433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:11:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:11:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 10:11:45 splunk3 sendmail[10683]: n31HBjhG010683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:12:45 splunk3 sendmail[10918]: n31HCja1010918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:13:45 splunk3 sendmail[11155]: n31HDjVK011155: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:14:45 splunk3 sendmail[11389]: n31HEjgm011389: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:15:22 splunk3 sendmail[11541]: n31HFMBK011541: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011715.n31HFMjB023250@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:15:22 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41458
|
|
Apr 1 10:15:22 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:15:22 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:15:22 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:15:22 splunk3 spamd[5605]: spamd: processing message <200904011715.n31HFMjB023250@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:15:24 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 10:15:24 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41458,mid=<200904011715.n31HFMjB023250@virt2.int.splunk.com>,bayes=0.113056206969378,autolearn=no
|
|
Apr 1 10:15:24 splunk3 sendmail[11542]: n31HFMBK011541: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:15:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:15:45 splunk3 sendmail[11643]: n31HFj6G011643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:16:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:16:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:16:45 splunk3 sendmail[11885]: n31HGjV0011885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:17:45 splunk3 sendmail[12124]: n31HHjFt012124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:18:45 splunk3 sendmail[12357]: n31HIjR8012357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:19:45 splunk3 sendmail[12594]: n31HJja1012594: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:20:22 splunk3 sendmail[12747]: n31HKMsT012747: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011720.n31HKMDp023914@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:20:23 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41513
|
|
Apr 1 10:20:23 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:20:23 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:20:23 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:20:23 splunk3 spamd[5605]: spamd: processing message <200904011720.n31HKMDp023914@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:20:25 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 10:20:25 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41513,mid=<200904011720.n31HKMDp023914@virt2.int.splunk.com>,bayes=0.113056206969378,autolearn=no
|
|
Apr 1 10:20:25 splunk3 sendmail[12754]: n31HKMsT012747: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:20:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:20:45 splunk3 sendmail[12849]: n31HKj20012849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:21:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:21:10 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:21:45 splunk3 sendmail[13096]: n31HLjJw013096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:22:45 splunk3 sendmail[13369]: n31HMjeD013369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:23:45 splunk3 sendmail[13612]: n31HNjTq013612: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:24:45 splunk3 sendmail[13848]: n31HOjGc013848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:25:23 splunk3 sendmail[14017]: n31HPNT1014017: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011725.n31HPNiM024518@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:25:23 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41569
|
|
Apr 1 10:25:23 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:25:23 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:25:23 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:25:23 splunk3 spamd[5605]: spamd: processing message <200904011725.n31HPNiM024518@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:25:25 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 10:25:25 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41569,mid=<200904011725.n31HPNiM024518@virt2.int.splunk.com>,bayes=0.113056206969378,autolearn=no
|
|
Apr 1 10:25:25 splunk3 sendmail[14018]: n31HPNT1014017: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:25:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:25:45 splunk3 sendmail[14101]: n31HPjwZ014101: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:26:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:26:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 10:26:45 splunk3 sendmail[14347]: n31HQjdL014347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:27:15 splunk3 sendmail[14469]: n31HRF8G014469: from=<386PTSRQKBrQaiiafYUfYlnm-hilYjfsaiiafY.WigmjUggYmjfohecn.Wig@alerts.bounces.google.com>, size=4129, class=0, nrcpts=1, msgid=<0016e644c7666f4fb6046681a0c9@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.190]
|
|
Apr 1 10:27:16 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41590
|
|
Apr 1 10:27:16 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:27:16 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:27:16 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:27:16 splunk3 spamd[5605]: spamd: processing message <0016e644c7666f4fb6046681a0c9@google.com> for spamme:501
|
|
Apr 1 10:27:18 splunk3 spamd[5605]: spamd: clean message (-1.5/5.0) for spamme:501 in 2.5 seconds, 4559 bytes.
|
|
Apr 1 10:27:18 splunk3 spamd[5605]: spamd: result: . -1 - AWL,BAYES_00,HTML_IMAGE_ONLY_28,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.5,size=4559,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41590,mid=<0016e644c7666f4fb6046681a0c9@google.com>,bayes=1.11022302462516e-16,autolearn=no
|
|
Apr 1 10:27:18 splunk3 sendmail[14470]: n31HRF8G014469: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=34340, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:27:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:27:45 splunk3 sendmail[14590]: n31HRjb4014590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:28:38 splunk3 sendmail[14729]: n31HSO8Q014729: from=<spamme@splunkit.com>, size=2753, class=0, nrcpts=1, msgid=<200904011728.n31HSO8Q014729@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=200164020059.user.veloxzone.com.br [200.164.20.59]
|
|
Apr 1 10:28:38 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41603
|
|
Apr 1 10:28:38 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:28:38 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:28:38 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:28:38 splunk3 spamd[5605]: spamd: processing message <200904011728.n31HSO8Q014729@splunk3.splunkit.com> for spamme:501
|
|
Apr 1 10:28:40 splunk3 spamd[5605]: spamd: identified spam (22.0/5.0) for spamme:501 in 1.9 seconds, 3173 bytes.
|
|
Apr 1 10:28:40 splunk3 spamd[5605]: spamd: result: Y 21 - AWL,BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_NJABL_PROXY,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.9,size=3173,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41603,mid=<200904011728.n31HSO8Q014729@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 1 10:28:40 splunk3 sendmail[14807]: n31HSO8Q014729: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:11, xdelay=00:00:02, mailer=local, pri=33095, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:28:40 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:28:45 splunk3 sendmail[14830]: n31HSjHl014830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:29:45 splunk3 sendmail[15070]: n31HTjB5015070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:30:23 splunk3 sendmail[15241]: n31HUNXf015241: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011730.n31HUNeU025142@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:30:23 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41628
|
|
Apr 1 10:30:23 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:30:23 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:30:23 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:30:23 splunk3 spamd[5605]: spamd: processing message <200904011730.n31HUNeU025142@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:30:25 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Apr 1 10:30:25 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41628,mid=<200904011730.n31HUNeU025142@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 10:30:25 splunk3 sendmail[15242]: n31HUNXf015241: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:30:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:30:45 splunk3 sendmail[15326]: n31HUjR4015326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:31:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:31:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:31:45 splunk3 sendmail[15575]: n31HVjHA015575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:32:45 splunk3 sendmail[15810]: n31HWjnE015810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:33:45 splunk3 sendmail[16048]: n31HXj3o016048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:34:45 splunk3 sendmail[16280]: n31HYj8D016280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:35:24 splunk3 sendmail[16449]: n31HZOAs016449: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011735.n31HZOxd025886@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:35:24 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41683
|
|
Apr 1 10:35:24 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:35:24 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:35:24 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:35:24 splunk3 spamd[5605]: spamd: processing message <200904011735.n31HZOxd025886@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:35:26 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 10:35:26 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41683,mid=<200904011735.n31HZOxd025886@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 10:35:26 splunk3 sendmail[16450]: n31HZOAs016449: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:35:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:35:45 splunk3 sendmail[16533]: n31HZjl6016533: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:36:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:36:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:36:45 splunk3 sendmail[16777]: n31HajiE016777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:37:45 splunk3 sendmail[17015]: n31HbjgE017015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:38:45 splunk3 sendmail[17256]: n31HcjFl017256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:39:45 splunk3 sendmail[17494]: n31HdjfQ017494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:40:25 splunk3 sendmail[17667]: n31HePYM017667: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011740.n31HePNf026520@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:40:25 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41739
|
|
Apr 1 10:40:25 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:40:25 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:40:25 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:40:25 splunk3 spamd[5605]: spamd: processing message <200904011740.n31HePNf026520@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:40:28 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 10:40:28 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41739,mid=<200904011740.n31HePNf026520@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 10:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:40:28 splunk3 sendmail[17669]: n31HePYM017667: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:40:45 splunk3 sendmail[17751]: n31Hejkl017751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:41:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:41:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 10:41:45 splunk3 sendmail[18000]: n31HfjvL018000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:42:45 splunk3 sendmail[18235]: n31Hgj1U018235: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:43:45 splunk3 sendmail[18473]: n31Hhj8e018473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:44:45 splunk3 sendmail[18709]: n31Hijbh018709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:45:25 splunk3 sendmail[18880]: n31HjPnM018880: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011745.n31HjP2t027127@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:45:25 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41795
|
|
Apr 1 10:45:25 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:45:25 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:45:25 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:45:25 splunk3 spamd[5605]: spamd: processing message <200904011745.n31HjP2t027127@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:45:27 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 1 10:45:27 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41795,mid=<200904011745.n31HjP2t027127@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 10:45:27 splunk3 sendmail[18881]: n31HjPnM018880: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:45:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:45:45 splunk3 sendmail[18963]: n31HjjSd018963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:46:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:46:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:46:45 splunk3 sendmail[19206]: n31Hkj3m019206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:47:45 splunk3 sendmail[19446]: n31Hlj57019446: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:48:45 splunk3 sendmail[19678]: n31HmjV9019678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:49:45 splunk3 sendmail[19917]: n31HnjWo019917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:50:26 splunk3 sendmail[20088]: n31HoQ3g020088: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011750.n31HoP8S027747@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:50:26 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41851
|
|
Apr 1 10:50:26 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:50:26 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:50:26 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:50:26 splunk3 spamd[5605]: spamd: processing message <200904011750.n31HoP8S027747@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:50:28 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 10:50:28 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41851,mid=<200904011750.n31HoP8S027747@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 10:50:28 splunk3 sendmail[20089]: n31HoQ3g020088: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:50:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:50:45 splunk3 sendmail[20172]: n31HojAU020172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:51:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:51:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:51:45 splunk3 sendmail[20420]: n31HpjQw020420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:52:45 splunk3 sendmail[20655]: n31HqjQd020655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:53:45 splunk3 sendmail[20898]: n31Hrj4n020898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:54:45 splunk3 sendmail[21131]: n31Hsjik021131: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:55:26 splunk3 sendmail[21301]: n31HtQbi021301: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011755.n31HtQ9k028355@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 10:55:26 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41906
|
|
Apr 1 10:55:26 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 10:55:26 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 10:55:26 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 10:55:26 splunk3 spamd[5605]: spamd: processing message <200904011755.n31HtQ9k028355@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 10:55:28 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 1 10:55:28 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41906,mid=<200904011755.n31HtQ9k028355@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 10:55:28 splunk3 sendmail[21302]: n31HtQbi021301: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 10:55:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 10:55:45 splunk3 sendmail[21381]: n31HtjcU021381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:56:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 10:56:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 10:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 10:56:45 splunk3 sendmail[21628]: n31HujBo021628: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:57:45 splunk3 sendmail[21867]: n31Hvjss021867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:58:45 splunk3 sendmail[22103]: n31HwjDb022103: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 10:59:45 splunk3 sendmail[22343]: n31HxjFf022343: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:00:04 splunk3 sendmail[22485]: n31I045k022485: from=root, size=291, class=0, nrcpts=1, msgid=<200904011800.n31I045k022485@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 11:00:04 splunk3 sendmail[22489]: n31I0437022489: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011800.n31I045k022485@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 11:00:04 splunk3 sendmail[22485]: n31I045k022485: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31I0437022489 Message accepted for delivery)
|
|
Apr 1 11:00:05 splunk3 sendmail[22490]: n31I0437022489: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:00:09 splunk3 sendmail[22527]: n31I09OV022527: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904011800.n31I09OV022527@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 11:00:09 splunk3 sendmail[22529]: n31I09OV022527: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 11:00:09 splunk3 sendmail[22529]: n31I09OV022527: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 11:00:09 splunk3 sendmail[22529]: n31I09OV022527: n31I09OV022529: postmaster notify: User unknown
|
|
Apr 1 11:00:11 splunk3 sendmail[22529]: n31I09OV022529: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:00:27 splunk3 sendmail[22600]: n31I0Rmd022600: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011800.n31I0Qrh028991@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:00:27 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41971
|
|
Apr 1 11:00:27 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:00:27 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 11:00:27 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 11:00:27 splunk3 sendmail[22601]: n31I0Rmd022600: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:00:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:00:45 splunk3 sendmail[22683]: n31I0jXE022683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:01:00 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:01:03 splunk3 sendmail[22754]: n31I11P3022754: from=root, size=443, class=0, nrcpts=1, msgid=<200904011801.n31I11P3022754@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 11:01:03 splunk3 sendmail[22775]: n31I136j022775: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011801.n31I11P3022754@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 11:01:03 splunk3 sendmail[22754]: n31I11P3022754: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31I136j022775 Message accepted for delivery)
|
|
Apr 1 11:01:04 splunk3 sendmail[22776]: n31I136j022775: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:01:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:01:45 splunk3 sendmail[22944]: n31I1joI022944: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:02:45 splunk3 sendmail[23177]: n31I2jEe023177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:03:45 splunk3 sendmail[23417]: n31I3jQx023417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:04:45 splunk3 sendmail[23651]: n31I4jb6023651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:05:27 splunk3 sendmail[23838]: n31I5Rvs023838: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011805.n31I5R4b029700@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:05:27 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42027
|
|
Apr 1 11:05:27 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:05:27 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 11:05:27 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 11:05:27 splunk3 sendmail[23839]: n31I5Rvs023838: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:05:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:05:45 splunk3 sendmail[23905]: n31I5jEL023905: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:05:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:06:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:06:45 splunk3 sendmail[24148]: n31I6jVc024148: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:07:45 splunk3 sendmail[24386]: n31I7jLT024386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:08:28 splunk3 sendmail[24525]: n31I8M3h024525: from=<teivet@dsquad.com>, size=64565, class=0, nrcpts=1, msgid=<01c9b2db$b457ba80$685b07bd@teivet>, proto=ESMTP, daemon=MTA, relay=bd075b68.virtua.com.br [189.7.91.104] (may be forged)
|
|
Apr 1 11:08:28 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42058
|
|
Apr 1 11:08:28 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:08:28 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 11:08:28 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 11:08:28 splunk3 sendmail[24564]: n31I8M3h024525: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:00, mailer=local, pri=94784, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:08:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:08:45 splunk3 sendmail[24629]: n31I8j0H024629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:09:45 splunk3 sendmail[24866]: n31I9jPH024866: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:10:02 splunk3 sendmail[25038]: n31IA2eA025038: from=root, size=292, class=0, nrcpts=1, msgid=<200904011810.n31IA2eA025038@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 11:10:02 splunk3 sendmail[25043]: n31IA2sg025043: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011810.n31IA2eA025038@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 11:10:02 splunk3 sendmail[25038]: n31IA2eA025038: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31IA2sg025043 Message accepted for delivery)
|
|
Apr 1 11:10:03 splunk3 sendmail[25044]: n31IA2sg025043: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:10:28 splunk3 sendmail[25160]: n31IASVR025160: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011810.n31IARNh030289@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:10:28 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42085
|
|
Apr 1 11:10:28 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:10:28 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:10:28 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:10:28 splunk3 spamd[5605]: spamd: processing message <200904011810.n31IARNh030289@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:10:30 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 11:10:30 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42085,mid=<200904011810.n31IARNh030289@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 11:10:30 splunk3 sendmail[25161]: n31IASVR025160: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:10:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:10:45 splunk3 sendmail[25224]: n31IAjhx025224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:10:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:11:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 11:11:45 splunk3 sendmail[25474]: n31IBjwP025474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:12:45 splunk3 sendmail[25708]: n31ICjfv025708: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:13:45 splunk3 sendmail[25947]: n31IDjAw025947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:14:45 splunk3 sendmail[26183]: n31IEjP4026183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:15:29 splunk3 sendmail[26370]: n31IFSWc026370: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011815.n31IFS0i031110@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:15:29 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42142
|
|
Apr 1 11:15:29 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:15:29 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:15:29 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:15:29 splunk3 spamd[5605]: spamd: processing message <200904011815.n31IFS0i031110@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:15:31 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 11:15:31 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42142,mid=<200904011815.n31IFS0i031110@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 11:15:31 splunk3 sendmail[26371]: n31IFSWc026370: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:15:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:15:45 splunk3 sendmail[26437]: n31IFjti026437: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:15:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:16:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:16:45 splunk3 sendmail[26679]: n31IGj2m026679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:17:45 splunk3 sendmail[26919]: n31IHjB9026919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:18:45 splunk3 sendmail[27154]: n31IIjrQ027154: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:19:45 splunk3 sendmail[27393]: n31IJjhY027393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:20:31 splunk3 sendmail[27583]: n31IKVOk027583: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011820.n31IKTh3031719@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:20:31 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42197
|
|
Apr 1 11:20:31 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:20:31 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:20:31 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:20:31 splunk3 spamd[5605]: spamd: processing message <200904011820.n31IKTh3031719@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:20:33 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 11:20:33 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42197,mid=<200904011820.n31IKTh3031719@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 11:20:33 splunk3 sendmail[27584]: n31IKVOk027583: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:20:33 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:20:45 splunk3 sendmail[27650]: n31IKjsx027650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:20:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:21:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:21:45 splunk3 sendmail[27898]: n31ILjWY027898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:22:45 splunk3 sendmail[28132]: n31IMjZ9028132: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:23:45 splunk3 sendmail[28374]: n31INjTV028374: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:24:45 splunk3 sendmail[28608]: n31IOj5m028608: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:25:02 splunk3 sendmail[28668]: n31IP2Rk028668: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011825.n31IP1lG032295@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:25:02 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42241
|
|
Apr 1 11:25:02 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:25:02 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:25:02 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:25:02 splunk3 spamd[5605]: spamd: processing message <200904011825.n31IP1lG032295@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:25:04 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 11:25:04 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42241,mid=<200904011825.n31IP1lG032295@virt2.int.splunk.com>,bayes=0.113048727651418,autolearn=no
|
|
Apr 1 11:25:04 splunk3 sendmail[28669]: n31IP2Rk028668: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:25:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:25:45 splunk3 sendmail[28859]: n31IPjJn028859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:25:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:26:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 11:26:45 splunk3 sendmail[29105]: n31IQj6K029105: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:27:45 splunk3 sendmail[29345]: n31IRjsj029345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:28:45 splunk3 sendmail[29579]: n31ISjgl029579: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:29:45 splunk3 sendmail[29817]: n31ITjo6029817: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:30:02 splunk3 sendmail[29895]: n31IU296029895: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904011830.n31IU28i000445@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:30:02 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42298
|
|
Apr 1 11:30:02 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:30:02 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:30:02 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:30:02 splunk3 spamd[5605]: spamd: processing message <200904011830.n31IU28i000445@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:30:04 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1302 bytes.
|
|
Apr 1 11:30:04 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42298,mid=<200904011830.n31IU28i000445@virt2.int.splunk.com>,bayes=0.0668853524732549,autolearn=no
|
|
Apr 1 11:30:04 splunk3 sendmail[29896]: n31IU296029895: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:30:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:30:45 splunk3 sendmail[30071]: n31IUjEQ030071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:30:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:31:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:31:45 splunk3 sendmail[30320]: n31IVjBZ030320: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:32:28 splunk3 sendmail[30494]: n31IWSwf030494: from=<cmbits@rit.edu>, size=5795, class=0, nrcpts=1, msgid=<33AA7B81EF8A1142B2506F3A9C89D570011CD24C@svits11.main.ad.rit.edu>, proto=ESMTP, daemon=MTA, relay=exo1fe01.main.ad.rit.edu [129.21.16.161]
|
|
Apr 1 11:32:28 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42330
|
|
Apr 1 11:32:28 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:32:28 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:32:28 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:32:28 splunk3 spamd[5605]: spamd: processing message <33AA7B81EF8A1142B2506F3A9C89D570011CD24C@svits11.main.ad.rit.edu> for spamme:501
|
|
Apr 1 11:32:31 splunk3 spamd[5605]: spamd: clean message (0.8/5.0) for spamme:501 in 2.3 seconds, 6056 bytes.
|
|
Apr 1 11:32:31 splunk3 spamd[5605]: spamd: result: . 0 - BAYES_50,HTML_90_100,HTML_ATTR_UNIQUE,HTML_MESSAGE scantime=2.3,size=6056,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42330,mid=<33AA7B81EF8A1142B2506F3A9C89D570011CD24C@svits11.main.ad.rit.edu>,bayes=0.565787865853107,autolearn=ham
|
|
Apr 1 11:32:31 splunk3 sendmail[30495]: n31IWSwf030494: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=36007, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:32:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:32:45 splunk3 sendmail[30561]: n31IWjEh030561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:33:45 splunk3 sendmail[30801]: n31IXjar030801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:34:45 splunk3 sendmail[31037]: n31IYjrO031037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:35:02 splunk3 sendmail[31115]: n31IZ2W2031115: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011835.n31IZ2RD001195@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:35:02 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42354
|
|
Apr 1 11:35:02 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:35:03 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:35:03 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:35:03 splunk3 spamd[5605]: spamd: processing message <200904011835.n31IZ2RD001195@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:35:05 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1305 bytes.
|
|
Apr 1 11:35:05 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42354,mid=<200904011835.n31IZ2RD001195@virt2.int.splunk.com>,bayes=0.169632060443408,autolearn=no
|
|
Apr 1 11:35:05 splunk3 sendmail[31116]: n31IZ2W2031115: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:35:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:35:45 splunk3 sendmail[31291]: n31IZj6i031291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:35:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:36:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:36:45 splunk3 sendmail[31534]: n31Iajbf031534: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:37:45 splunk3 sendmail[31770]: n31Ibjxq031770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:38:45 splunk3 sendmail[32009]: n31IcjHg032009: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:39:45 splunk3 sendmail[32246]: n31Idjmb032246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:40:03 splunk3 sendmail[32325]: n31Ie3WU032325: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011840.n31Ie26L001856@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:40:03 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42410
|
|
Apr 1 11:40:03 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:40:03 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:40:03 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:40:03 splunk3 spamd[5605]: spamd: processing message <200904011840.n31Ie26L001856@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:40:05 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 1 11:40:05 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42410,mid=<200904011840.n31Ie26L001856@virt2.int.splunk.com>,bayes=0.169632060443408,autolearn=no
|
|
Apr 1 11:40:05 splunk3 sendmail[32326]: n31Ie3WU032325: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:40:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:40:45 splunk3 sendmail[32500]: n31IejxI032500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:40:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:41:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 11:41:45 splunk3 sendmail[32751]: n31IfjbH032751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:42:45 splunk3 sendmail[517]: n31Igjhd000517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:43:45 splunk3 sendmail[754]: n31Ihjcb000754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:44:45 splunk3 sendmail[987]: n31IijKp000987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:45:03 splunk3 sendmail[1065]: n31Ij3sH001065: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011845.n31Ij3bA002482@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:45:03 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42466
|
|
Apr 1 11:45:03 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:45:03 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:45:03 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:45:03 splunk3 spamd[5605]: spamd: processing message <200904011845.n31Ij3bA002482@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:45:05 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1305 bytes.
|
|
Apr 1 11:45:05 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42466,mid=<200904011845.n31Ij3bA002482@virt2.int.splunk.com>,bayes=0.169632060443408,autolearn=no
|
|
Apr 1 11:45:05 splunk3 sendmail[1066]: n31Ij3sH001065: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:45:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:45:45 splunk3 sendmail[1242]: n31IjjJS001242: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:45:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:46:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:46:45 splunk3 sendmail[1485]: n31IkjdH001485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:47:45 splunk3 sendmail[1726]: n31IljFI001726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:48:45 splunk3 sendmail[1962]: n31Imjmx001962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:49:45 splunk3 sendmail[2202]: n31Injj5002202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:50:04 splunk3 sendmail[2283]: n31Io4h4002283: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011850.n31Io3DR003097@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:50:04 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42522
|
|
Apr 1 11:50:04 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:50:04 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:50:04 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:50:04 splunk3 spamd[5605]: spamd: processing message <200904011850.n31Io3DR003097@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:50:06 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 1 11:50:06 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42522,mid=<200904011850.n31Io3DR003097@virt2.int.splunk.com>,bayes=0.169632060443408,autolearn=no
|
|
Apr 1 11:50:06 splunk3 sendmail[2284]: n31Io4h4002283: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:50:45 splunk3 sendmail[2459]: n31Iojsf002459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:50:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:51:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:51:45 splunk3 sendmail[2713]: n31IpjbI002713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:52:45 splunk3 sendmail[2959]: n31Iqjbn002959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:53:45 splunk3 sendmail[3210]: n31IrjbS003210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:54:45 splunk3 sendmail[3445]: n31IsjDG003445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:55:06 splunk3 sendmail[3524]: n31It6Wl003524: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011855.n31It5SZ003703@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 11:55:06 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42578
|
|
Apr 1 11:55:06 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 11:55:06 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 11:55:06 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 11:55:06 splunk3 spamd[5605]: spamd: processing message <200904011855.n31It5SZ003703@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 11:55:08 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 11:55:08 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42578,mid=<200904011855.n31It5SZ003703@virt2.int.splunk.com>,bayes=0.169632060443408,autolearn=no
|
|
Apr 1 11:55:08 splunk3 sendmail[3525]: n31It6Wl003524: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 11:55:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 11:55:45 splunk3 sendmail[3728]: n31Itjbk003728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:55:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 11:56:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 11:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 11:56:45 splunk3 sendmail[3975]: n31IujOq003975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:57:45 splunk3 sendmail[4230]: n31IvjHL004230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:58:46 splunk3 sendmail[4473]: n31IwjcM004473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 11:59:46 splunk3 sendmail[4714]: n31Ixklb004714: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:00:04 splunk3 sendmail[4854]: n31J047Q004854: from=root, size=291, class=0, nrcpts=1, msgid=<200904011900.n31J047Q004854@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 12:00:04 splunk3 sendmail[4858]: n31J04ub004858: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904011900.n31J047Q004854@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 12:00:04 splunk3 sendmail[4854]: n31J047Q004854: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31J04ub004858 Message accepted for delivery)
|
|
Apr 1 12:00:05 splunk3 sendmail[4859]: n31J04ub004858: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:00:07 splunk3 sendmail[4872]: n31J06AO004872: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011900.n31J06Ov004341@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:00:07 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42635
|
|
Apr 1 12:00:07 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:00:07 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 12:00:07 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 12:00:07 splunk3 sendmail[4890]: n31J06AO004872: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:00:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:00:16 splunk3 sendmail[4931]: n31J0GsL004931: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904011900.n31J0GsL004931@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 12:00:16 splunk3 sendmail[4933]: n31J0GsL004931: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 12:00:16 splunk3 sendmail[4933]: n31J0GsL004931: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 1 12:00:16 splunk3 sendmail[4933]: n31J0GsL004931: n31J0GsL004933: postmaster notify: User unknown
|
|
Apr 1 12:00:17 splunk3 sendmail[4933]: n31J0GsL004933: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:00:46 splunk3 sendmail[5063]: n31J0kYI005063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:00:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:01:08 splunk3 sendmail[5172]: n31J11kq005172: from=root, size=443, class=0, nrcpts=1, msgid=<200904011901.n31J11kq005172@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 12:01:08 splunk3 sendmail[5213]: n31J18AG005213: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904011901.n31J11kq005172@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 12:01:08 splunk3 sendmail[5172]: n31J11kq005172: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31J18AG005213 Message accepted for delivery)
|
|
Apr 1 12:01:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:01:09 splunk3 sendmail[5214]: n31J18AG005213: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:01:46 splunk3 sendmail[5365]: n31J1kvu005365: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:02:46 splunk3 sendmail[5601]: n31J2k8l005601: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:03:46 splunk3 sendmail[5841]: n31J3kgl005841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:04:15 splunk3 sendmail[5955]: n31J4Fh6005955: from=<3r7rTSRQKBocrzzrwplwp243-yz2p0w9rzzrwp.nzx30lxxp30w5yvt4.nzx@alerts.bounces.google.com>, size=5302, class=0, nrcpts=1, msgid=<00151750dbe2561a66046682fb65@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.166]
|
|
Apr 1 12:04:16 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42690
|
|
Apr 1 12:04:16 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:04:16 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 12:04:16 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 12:04:16 splunk3 sendmail[5956]: n31J4Fh6005955: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=35512, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:04:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:04:46 splunk3 sendmail[6080]: n31J4kk4006080: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:05:07 splunk3 sendmail[6180]: n31J57CI006180: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011905.n31J573X005027@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:05:07 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42700
|
|
Apr 1 12:05:07 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:05:07 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 12:05:07 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 12:05:07 splunk3 sendmail[6181]: n31J57CI006180: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:05:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:05:46 splunk3 sendmail[6332]: n31J5k7Z006332: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:05:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:06:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:06:46 splunk3 sendmail[6577]: n31J6k6t006577: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:07:46 splunk3 sendmail[6815]: n31J7kR4006815: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:08:46 splunk3 sendmail[7057]: n31J8kW5007057: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:09:46 splunk3 sendmail[7298]: n31J9k7k007298: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:10:02 splunk3 sendmail[7471]: n31JA2Cs007471: from=root, size=292, class=0, nrcpts=1, msgid=<200904011910.n31JA2Cs007471@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 12:10:02 splunk3 sendmail[7476]: n31JA21t007476: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904011910.n31JA2Cs007471@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 12:10:02 splunk3 sendmail[7471]: n31JA2Cs007471: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31JA21t007476 Message accepted for delivery)
|
|
Apr 1 12:10:03 splunk3 sendmail[7477]: n31JA21t007476: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:10:08 splunk3 sendmail[7503]: n31JA7HA007503: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011910.n31JA7XU005638@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:10:08 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42756
|
|
Apr 1 12:10:08 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:10:08 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:10:08 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:10:08 splunk3 spamd[5605]: spamd: processing message <200904011910.n31JA7XU005638@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:10:10 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 1 12:10:10 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42756,mid=<200904011910.n31JA7XU005638@virt2.int.splunk.com>,bayes=0.169632060443408,autolearn=no
|
|
Apr 1 12:10:10 splunk3 sendmail[7504]: n31JA7HA007503: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:10:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:10:46 splunk3 sendmail[7665]: n31JAkop007665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:10:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:11:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 12:11:46 splunk3 sendmail[7914]: n31JBkgS007914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:12:46 splunk3 sendmail[8146]: n31JCkeK008146: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:13:46 splunk3 sendmail[8384]: n31JDkEW008384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:14:46 splunk3 sendmail[8617]: n31JEkJv008617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:15:08 splunk3 sendmail[8718]: n31JF8rb008718: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011915.n31JF8k5006442@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:15:08 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42813
|
|
Apr 1 12:15:08 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:15:08 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:15:08 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:15:08 splunk3 spamd[5605]: spamd: processing message <200904011915.n31JF8k5006442@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:15:10 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 1 12:15:10 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42813,mid=<200904011915.n31JF8k5006442@virt2.int.splunk.com>,bayes=0.169632060443408,autolearn=no
|
|
Apr 1 12:15:10 splunk3 sendmail[8719]: n31JF8rb008718: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:15:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:15:46 splunk3 sendmail[8872]: n31JFkXC008872: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:15:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:16:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:16:46 splunk3 sendmail[9116]: n31JGkhZ009116: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:17:46 splunk3 sendmail[9356]: n31JHk4L009356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:18:46 splunk3 sendmail[9601]: n31JIkoX009601: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:19:14 splunk3 sendmail[9661]: n31JJ1Lv009661: from=<spaminvictus66@geotec.net>, size=11711, class=0, nrcpts=1, msgid=<20090401101914.3598.qmail@roza-glupol>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=87-205-216-9.adsl.inetia.pl [87.205.216.9]
|
|
Apr 1 12:19:14 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42860
|
|
Apr 1 12:19:14 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:19:14 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:19:14 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:19:14 splunk3 spamd[5605]: spamd: processing message <20090401101914.3598.qmail@roza-glupol> for spamme:501
|
|
Apr 1 12:19:17 splunk3 spamd[5605]: spamd: identified spam (30.9/5.0) for spamme:501 in 2.3 seconds, 12008 bytes.
|
|
Apr 1 12:19:17 splunk3 spamd[5605]: spamd: result: Y 30 - BAYES_99,DATE_IN_PAST_06_12,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_DSN,DNS_FROM_RFC_POST,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_TAGS,HTML_90_100,HTML_MESSAGE,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.3,size=12008,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42860,mid=<20090401101914.3598.qmail@roza-glupol>,bayes=1,autolearn=spam
|
|
Apr 1 12:19:17 splunk3 sendmail[9722]: n31JJ1Lv009661: to=<spamme@splunkit.com>, delay=00:00:10, xdelay=00:00:03, mailer=local, pri=41914, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:19:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:19:46 splunk3 sendmail[9844]: n31JJkpw009844: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:20:09 splunk3 sendmail[9949]: n31JK9lA009949: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011920.n31JK8Lr007071@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:20:09 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42869
|
|
Apr 1 12:20:09 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:20:09 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:20:09 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:20:09 splunk3 spamd[5605]: spamd: processing message <200904011920.n31JK8Lr007071@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:20:11 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 1 12:20:11 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42869,mid=<200904011920.n31JK8Lr007071@virt2.int.splunk.com>,bayes=0.169626697009246,autolearn=no
|
|
Apr 1 12:20:11 splunk3 sendmail[9950]: n31JK9lA009949: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:20:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:20:46 splunk3 sendmail[10102]: n31JKkWM010102: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:20:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:21:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:21:46 splunk3 sendmail[10348]: n31JLkkJ010348: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:22:46 splunk3 sendmail[10584]: n31JMk7K010584: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:23:46 splunk3 sendmail[10828]: n31JNkgc010828: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:24:46 splunk3 sendmail[11064]: n31JOkU7011064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:25:09 splunk3 sendmail[11163]: n31JP9G7011163: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011925.n31JP9RO007680@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:25:09 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42925
|
|
Apr 1 12:25:09 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:25:09 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:25:09 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:25:09 splunk3 spamd[5605]: spamd: processing message <200904011925.n31JP9RO007680@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:25:11 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 1 12:25:11 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42925,mid=<200904011925.n31JP9RO007680@virt2.int.splunk.com>,bayes=0.169626697009246,autolearn=no
|
|
Apr 1 12:25:11 splunk3 sendmail[11164]: n31JP9G7011163: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:25:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:25:46 splunk3 sendmail[11316]: n31JPkBH011316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:25:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:26:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 12:26:46 splunk3 sendmail[11559]: n31JQkDE011559: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:27:46 splunk3 sendmail[11799]: n31JRk2B011799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:28:46 splunk3 sendmail[12032]: n31JSkNa012032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:29:46 splunk3 sendmail[12271]: n31JTkKn012271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:30:07 splunk3 sendmail[6636]: n31J6wqS006636: [85.134.188.43] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:30:10 splunk3 sendmail[12372]: n31JUAsw012372: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011930.n31JU9Uf008304@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:30:10 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42981
|
|
Apr 1 12:30:10 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:30:10 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:30:10 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:30:10 splunk3 spamd[5605]: spamd: processing message <200904011930.n31JU9Uf008304@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:30:12 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 1 12:30:12 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42981,mid=<200904011930.n31JU9Uf008304@virt2.int.splunk.com>,bayes=0.169626697009246,autolearn=no
|
|
Apr 1 12:30:12 splunk3 sendmail[12373]: n31JUAsw012372: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:30:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:30:46 splunk3 sendmail[12526]: n31JUk1u012526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:30:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:31:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:31:46 splunk3 sendmail[12773]: n31JVkXj012773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:32:46 splunk3 sendmail[13008]: n31JWkR3013008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:33:46 splunk3 sendmail[13245]: n31JXk9g013245: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:34:46 splunk3 sendmail[13520]: n31JYkLX013520: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:35:10 splunk3 sendmail[13620]: n31JZAU6013620: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011935.n31JZAR7009050@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:35:10 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43037
|
|
Apr 1 12:35:10 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:35:10 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:35:10 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:35:10 splunk3 spamd[5605]: spamd: processing message <200904011935.n31JZAR7009050@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:35:12 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 12:35:12 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43037,mid=<200904011935.n31JZAR7009050@virt2.int.splunk.com>,bayes=0.169626697009246,autolearn=no
|
|
Apr 1 12:35:12 splunk3 sendmail[13621]: n31JZAU6013620: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:35:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:35:46 splunk3 sendmail[13773]: n31JZkkP013773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:35:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:36:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:36:46 splunk3 sendmail[14018]: n31Jak41014018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:37:46 splunk3 sendmail[14257]: n31JbkuI014257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:38:46 splunk3 sendmail[14497]: n31Jck0w014497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:39:46 splunk3 sendmail[14736]: n31Jdk9o014736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:40:11 splunk3 sendmail[14841]: n31JeBnt014841: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904011940.n31JeA8Z009682@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:40:11 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43093
|
|
Apr 1 12:40:11 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:40:11 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:40:11 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:40:11 splunk3 spamd[5605]: spamd: processing message <200904011940.n31JeA8Z009682@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:40:13 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 1 12:40:13 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43093,mid=<200904011940.n31JeA8Z009682@virt2.int.splunk.com>,bayes=0.169626697009246,autolearn=no
|
|
Apr 1 12:40:13 splunk3 sendmail[14842]: n31JeBnt014841: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:40:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:40:46 splunk3 sendmail[14990]: n31JekYA014990: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:40:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:41:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 12:41:46 splunk3 sendmail[15241]: n31JfkrQ015241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:42:46 splunk3 sendmail[15474]: n31Jgke8015474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:43:46 splunk3 sendmail[15715]: n31JhkAZ015715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:44:46 splunk3 sendmail[15949]: n31JikFN015949: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:45:11 splunk3 sendmail[16064]: n31JjBW6016064: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011945.n31JjBhA010296@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:45:11 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43149
|
|
Apr 1 12:45:11 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:45:11 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:45:11 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:45:11 splunk3 spamd[5605]: spamd: processing message <200904011945.n31JjBhA010296@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:45:13 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Apr 1 12:45:13 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43149,mid=<200904011945.n31JjBhA010296@virt2.int.splunk.com>,bayes=0.112635326165022,autolearn=no
|
|
Apr 1 12:45:13 splunk3 sendmail[16065]: n31JjBW6016064: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:45:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:45:46 splunk3 sendmail[16201]: n31Jjkvj016201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:45:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:46:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:46:46 splunk3 sendmail[16456]: n31JkkXb016456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:47:46 splunk3 sendmail[16696]: n31Jlk4I016696: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:48:46 splunk3 sendmail[16932]: n31Jmk55016932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:49:46 splunk3 sendmail[17170]: n31Jnk28017170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:50:12 splunk3 sendmail[17274]: n31JoCYP017274: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011950.n31JoBwB010905@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:50:12 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43205
|
|
Apr 1 12:50:12 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:50:12 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:50:12 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:50:12 splunk3 spamd[5605]: spamd: processing message <200904011950.n31JoBwB010905@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:50:14 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 12:50:14 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43205,mid=<200904011950.n31JoBwB010905@virt2.int.splunk.com>,bayes=0.112635326165022,autolearn=no
|
|
Apr 1 12:50:14 splunk3 sendmail[17275]: n31JoCYP017274: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:50:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:50:46 splunk3 sendmail[17427]: n31Jok74017427: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:50:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:51:09 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:51:46 splunk3 sendmail[17675]: n31JpkDP017675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:52:46 splunk3 sendmail[17910]: n31JqkXV017910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:53:46 splunk3 sendmail[18150]: n31Jrk9F018150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:54:46 splunk3 sendmail[18386]: n31JskMr018386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:55:12 splunk3 sendmail[18491]: n31JtCeD018491: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904011955.n31JtCMR011516@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 12:55:12 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43260
|
|
Apr 1 12:55:12 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:55:12 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:55:12 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:55:12 splunk3 spamd[5605]: spamd: processing message <200904011955.n31JtCMR011516@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 12:55:14 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 12:55:14 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43260,mid=<200904011955.n31JtCMR011516@virt2.int.splunk.com>,bayes=0.112635326165022,autolearn=no
|
|
Apr 1 12:55:14 splunk3 sendmail[18492]: n31JtCeD018491: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:55:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:55:46 splunk3 sendmail[18641]: n31Jtko5018641: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:55:59 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 12:56:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 12:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 12:56:46 splunk3 sendmail[18886]: n31JukAf018886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:57:00 splunk3 sendmail[18906]: n31Juuxo018906: from=<spamme@splunkit.com>, size=2746, class=0, nrcpts=1, msgid=<200904011956.n31Juuxo018906@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=18913046095.user.veloxzone.com.br [189.13.46.95] (may be forged)
|
|
Apr 1 12:57:00 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43287
|
|
Apr 1 12:57:00 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 12:57:00 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 12:57:00 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 12:57:00 splunk3 spamd[5605]: spamd: processing message <200904011956.n31Juuxo018906@splunk3.splunkit.com> for spamme:501
|
|
Apr 1 12:57:03 splunk3 spamd[5605]: spamd: identified spam (29.9/5.0) for spamme:501 in 2.9 seconds, 3158 bytes.
|
|
Apr 1 12:57:03 splunk3 spamd[5605]: spamd: result: Y 29 - AWL,BAYES_99,FORGED_RCVD_HELO,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.9,size=3158,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43287,mid=<200904011956.n31Juuxo018906@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 1 12:57:03 splunk3 sendmail[18932]: n31Juuxo018906: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:05, xdelay=00:00:03, mailer=local, pri=33080, dsn=2.0.0, stat=Sent
|
|
Apr 1 12:57:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 12:57:46 splunk3 sendmail[19131]: n31JvkH9019131: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:58:46 splunk3 sendmail[19364]: n31JwkKO019364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 12:59:46 splunk3 sendmail[19602]: n31JxkLN019602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:00:04 splunk3 sendmail[19723]: n31K04q5019723: from=root, size=291, class=0, nrcpts=1, msgid=<200904012000.n31K04q5019723@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 13:00:04 splunk3 sendmail[19727]: n31K04X7019727: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904012000.n31K04q5019723@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 13:00:04 splunk3 sendmail[19723]: n31K04q5019723: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31K04X7019727 Message accepted for delivery)
|
|
Apr 1 13:00:05 splunk3 sendmail[19728]: n31K04X7019727: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:00:06 splunk3 sendmail[19734]: n31K05qf019734: from=<3xMfTSRQKBqkPXXPUNJUNacb-WXaNYUhPXXPUN.LXVbYJVVNbYUdWTRc.LXV@alerts.bounces.google.com>, size=3391, class=0, nrcpts=1, msgid=<0016361e8960fc5967046683c20f@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 1 13:00:06 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43318
|
|
Apr 1 13:00:06 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:00:06 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 13:00:06 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 13:00:06 splunk3 sendmail[19757]: n31K05qf019734: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=33606, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:00:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:00:13 splunk3 sendmail[19781]: n31K0DPP019781: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012000.n31K0CRW012155@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:00:13 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43320
|
|
Apr 1 13:00:13 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:00:13 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 13:00:13 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 13:00:13 splunk3 sendmail[19782]: n31K0DPP019781: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:00:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:00:21 splunk3 sendmail[19833]: n31K0LTP019833: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904012000.n31K0LTP019833@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 13:00:21 splunk3 sendmail[19835]: n31K0LTP019833: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 13:00:21 splunk3 sendmail[19835]: n31K0LTP019833: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 13:00:21 splunk3 sendmail[19835]: n31K0LTP019833: n31K0LTP019835: postmaster notify: User unknown
|
|
Apr 1 13:00:23 splunk3 sendmail[19835]: n31K0LTP019835: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:00:46 splunk3 sendmail[19944]: n31K0kdV019944: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:00:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:01:01 splunk3 sendmail[20019]: n31K11Mu020019: from=root, size=443, class=0, nrcpts=1, msgid=<200904012001.n31K11Mu020019@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 13:01:01 splunk3 sendmail[20021]: n31K11ZF020021: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904012001.n31K11Mu020019@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 13:01:01 splunk3 sendmail[20019]: n31K11Mu020019: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31K11ZF020021 Message accepted for delivery)
|
|
Apr 1 13:01:03 splunk3 sendmail[20022]: n31K11ZF020021: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:01:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:01:46 splunk3 sendmail[20207]: n31K1k5D020207: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:02:46 splunk3 sendmail[20442]: n31K2kDf020442: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:03:46 splunk3 sendmail[20678]: n31K3kSf020678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:04:46 splunk3 sendmail[20913]: n31K4kjL020913: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:05:13 splunk3 sendmail[21015]: n31K5DA8021015: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012005.n31K5Dcf012834@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:05:13 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43383
|
|
Apr 1 13:05:13 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:05:13 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 13:05:13 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 13:05:13 splunk3 sendmail[21016]: n31K5DA8021015: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:05:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:05:46 splunk3 sendmail[21166]: n31K5kTv021166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:05:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:06:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:06:46 splunk3 sendmail[21411]: n31K6k3K021411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:07:46 splunk3 sendmail[21646]: n31K7k7r021646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:08:46 splunk3 sendmail[21886]: n31K8k3Y021886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:09:46 splunk3 sendmail[22129]: n31K9k7c022129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:10:02 splunk3 sendmail[22284]: n31KA2FY022284: from=root, size=292, class=0, nrcpts=1, msgid=<200904012010.n31KA2FY022284@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 13:10:02 splunk3 sendmail[22289]: n31KA2wo022289: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904012010.n31KA2FY022284@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 13:10:02 splunk3 sendmail[22284]: n31KA2FY022284: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31KA2wo022289 Message accepted for delivery)
|
|
Apr 1 13:10:04 splunk3 sendmail[22290]: n31KA2wo022289: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:10:14 splunk3 sendmail[22335]: n31KAE5g022335: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012010.n31KAD7w013452@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:10:14 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43440
|
|
Apr 1 13:10:14 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:10:14 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:10:14 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:10:14 splunk3 spamd[5605]: spamd: processing message <200904012010.n31KAD7w013452@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:10:17 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 1 13:10:17 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43440,mid=<200904012010.n31KAD7w013452@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:10:17 splunk3 sendmail[22336]: n31KAE5g022335: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:10:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:10:46 splunk3 sendmail[22487]: n31KAkRt022487: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:10:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:11:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 13:11:46 splunk3 sendmail[22737]: n31KBk5s022737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:12:46 splunk3 sendmail[22972]: n31KCk50022972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:13:46 splunk3 sendmail[23212]: n31KDklJ023212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:14:46 splunk3 sendmail[23444]: n31KEk11023444: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:15:15 splunk3 sendmail[23549]: n31KFFDj023549: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012015.n31KFEpE014247@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:15:15 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43495
|
|
Apr 1 13:15:15 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:15:15 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:15:15 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:15:15 splunk3 spamd[5605]: spamd: processing message <200904012015.n31KFEpE014247@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:15:17 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 13:15:17 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43495,mid=<200904012015.n31KFEpE014247@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:15:17 splunk3 sendmail[23550]: n31KFFDj023549: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:15:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:15:46 splunk3 sendmail[23698]: n31KFkRW023698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:15:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:16:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:16:46 splunk3 sendmail[23943]: n31KGkp7023943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:17:46 splunk3 sendmail[24180]: n31KHkOR024180: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:18:46 splunk3 sendmail[24418]: n31KIkRM024418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:19:46 splunk3 sendmail[24657]: n31KJks8024657: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:20:15 splunk3 sendmail[24763]: n31KKFUh024763: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012020.n31KKFRS014882@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:20:15 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43551
|
|
Apr 1 13:20:15 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:20:15 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:20:15 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:20:15 splunk3 spamd[5605]: spamd: processing message <200904012020.n31KKFRS014882@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:20:17 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 13:20:17 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43551,mid=<200904012020.n31KKFRS014882@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:20:17 splunk3 sendmail[24764]: n31KKFUh024763: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:20:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:20:46 splunk3 sendmail[24914]: n31KKkYc024914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:20:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:21:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:21:46 splunk3 sendmail[25158]: n31KLkD7025158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:22:46 splunk3 sendmail[25393]: n31KMkNO025393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:23:46 splunk3 sendmail[25637]: n31KNk03025637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:24:46 splunk3 sendmail[25870]: n31KOkgW025870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:25:15 splunk3 sendmail[25989]: n31KPF2u025989: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012025.n31KPFGQ015493@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:25:15 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43606
|
|
Apr 1 13:25:15 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:25:15 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:25:15 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:25:15 splunk3 spamd[5605]: spamd: processing message <200904012025.n31KPFGQ015493@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:25:18 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 13:25:18 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43606,mid=<200904012025.n31KPFGQ015493@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:25:18 splunk3 sendmail[25990]: n31KPF2u025989: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:25:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:25:46 splunk3 sendmail[26125]: n31KPkLA026125: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:25:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:26:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 13:26:46 splunk3 sendmail[26371]: n31KQkXb026371: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:27:46 splunk3 sendmail[26611]: n31KRk2T026611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:28:46 splunk3 sendmail[26842]: n31KSkZi026842: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:29:46 splunk3 sendmail[27082]: n31KTkIx027082: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:30:16 splunk3 sendmail[27205]: n31KUGCc027205: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012030.n31KUGkq016114@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:30:16 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43663
|
|
Apr 1 13:30:16 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:30:16 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:30:16 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:30:16 splunk3 spamd[5605]: spamd: processing message <200904012030.n31KUGkq016114@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:30:18 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 13:30:18 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43663,mid=<200904012030.n31KUGkq016114@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:30:18 splunk3 sendmail[27206]: n31KUGCc027205: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:30:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:30:46 splunk3 sendmail[27339]: n31KUk5f027339: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:30:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:31:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:31:46 splunk3 sendmail[27584]: n31KVk8B027584: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:32:46 splunk3 sendmail[27821]: n31KWk6N027821: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:33:46 splunk3 sendmail[28060]: n31KXkt7028060: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:34:46 splunk3 sendmail[28295]: n31KYkFn028295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:35:17 splunk3 sendmail[28413]: n31KZHp6028413: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012035.n31KZGLB016860@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:35:17 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43719
|
|
Apr 1 13:35:17 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:35:17 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:35:17 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:35:17 splunk3 spamd[5605]: spamd: processing message <200904012035.n31KZGLB016860@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:35:19 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 13:35:19 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43719,mid=<200904012035.n31KZGLB016860@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:35:19 splunk3 sendmail[28414]: n31KZHp6028413: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:35:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:35:46 splunk3 sendmail[28545]: n31KZkkg028545: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:35:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:36:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:36:46 splunk3 sendmail[28790]: n31Kakhi028790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:37:46 splunk3 sendmail[29030]: n31Kbkgq029030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:38:46 splunk3 sendmail[29269]: n31KckbY029269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:39:46 splunk3 sendmail[29508]: n31KdkGt029508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:40:17 splunk3 sendmail[29629]: n31KeHhs029629: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012040.n31KeH6t017490@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:40:17 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43774
|
|
Apr 1 13:40:17 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:40:17 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:40:17 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:40:17 splunk3 spamd[5605]: spamd: processing message <200904012040.n31KeH6t017490@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:40:19 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 1 13:40:19 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43774,mid=<200904012040.n31KeH6t017490@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:40:19 splunk3 sendmail[29630]: n31KeHhs029629: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:40:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:40:46 splunk3 sendmail[29765]: n31KekpJ029765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:40:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:41:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 13:41:46 splunk3 sendmail[30016]: n31KfkiR030016: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:42:46 splunk3 sendmail[30247]: n31KgkKr030247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:43:46 splunk3 sendmail[30486]: n31KhkFk030486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:44:46 splunk3 sendmail[30722]: n31Kikvg030722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:45:18 splunk3 sendmail[30843]: n31KjI0r030843: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012045.n31KjIAa018104@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:45:18 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43831
|
|
Apr 1 13:45:18 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:45:18 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:45:18 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:45:18 splunk3 spamd[5605]: spamd: processing message <200904012045.n31KjIAa018104@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:45:20 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 1 13:45:20 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43831,mid=<200904012045.n31KjIAa018104@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:45:20 splunk3 sendmail[30844]: n31KjI0r030843: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:45:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:45:46 splunk3 sendmail[30975]: n31KjkkT030975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:45:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:46:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:46:46 splunk3 sendmail[31219]: n31KkkIC031219: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:47:46 splunk3 sendmail[31458]: n31KlkE0031458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:48:46 splunk3 sendmail[31694]: n31Kmktk031694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:49:46 splunk3 sendmail[31929]: n31KnkIF031929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:50:19 splunk3 sendmail[32054]: n31KoJgO032054: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012050.n31KoI7l018717@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:50:19 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43886
|
|
Apr 1 13:50:19 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:50:19 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:50:19 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:50:19 splunk3 spamd[5605]: spamd: processing message <200904012050.n31KoI7l018717@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:50:21 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 13:50:21 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43886,mid=<200904012050.n31KoI7l018717@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:50:21 splunk3 sendmail[32056]: n31KoJgO032054: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:50:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:50:46 splunk3 sendmail[32187]: n31Kokwg032187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:50:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:51:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:51:46 splunk3 sendmail[32436]: n31KpkPH032436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:52:46 splunk3 sendmail[32669]: n31KqkG2032669: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:53:46 splunk3 sendmail[444]: n31Krk1B000444: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:54:46 splunk3 sendmail[678]: n31Ksk11000678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:55:00 splunk3 sendmail[719]: n31KsxKr000719: ruleset=check_rcpt, arg1=<s2288@mail2000.com.tw>, relay=118-167-128-1.dynamic.hinet.net [118.167.128.1], reject=550 5.7.1 <s2288@mail2000.com.tw>... Relaying denied
|
|
Apr 1 13:55:19 splunk3 sendmail[798]: n31KtJxf000798: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012055.n31KtJnx019332@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 13:55:19 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43942
|
|
Apr 1 13:55:19 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 13:55:19 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 13:55:19 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 13:55:19 splunk3 spamd[5605]: spamd: processing message <200904012055.n31KtJnx019332@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 13:55:21 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 13:55:21 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43942,mid=<200904012055.n31KtJnx019332@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 13:55:21 splunk3 sendmail[799]: n31KtJxf000798: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 13:55:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 13:55:46 splunk3 sendmail[931]: n31KtkqY000931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:55:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 13:56:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 13:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 13:56:46 splunk3 sendmail[1174]: n31KukT4001174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:57:46 splunk3 sendmail[1415]: n31Kvk65001415: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:58:46 splunk3 sendmail[1652]: n31Kwklg001652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 13:59:46 splunk3 sendmail[1892]: n31Kxkir001892: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:00:04 splunk3 sendmail[2019]: n31L04Kp002019: from=root, size=291, class=0, nrcpts=1, msgid=<200904012100.n31L04Kp002019@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 14:00:04 splunk3 sendmail[2023]: n31L04vB002023: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904012100.n31L04Kp002019@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 14:00:04 splunk3 sendmail[2019]: n31L04Kp002019: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31L04vB002023 Message accepted for delivery)
|
|
Apr 1 14:00:08 splunk3 sendmail[2024]: n31L04vB002023: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:04, xdelay=00:00:04, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:00:20 splunk3 sendmail[2105]: n31L0KKG002105: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012100.n31L0Jhi019974@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:00:20 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43998
|
|
Apr 1 14:00:20 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:00:20 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 14:00:20 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 14:00:20 splunk3 sendmail[2106]: n31L0KKG002105: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:00:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:00:27 splunk3 sendmail[2141]: n31L0RET002141: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904012100.n31L0RET002141@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 14:00:27 splunk3 sendmail[2143]: n31L0RET002141: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 14:00:27 splunk3 sendmail[2143]: n31L0RET002141: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 1 14:00:27 splunk3 sendmail[2143]: n31L0RET002141: n31L0RET002143: postmaster notify: User unknown
|
|
Apr 1 14:00:29 splunk3 sendmail[2143]: n31L0RET002143: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:00:46 splunk3 sendmail[2235]: n31L0ke3002235: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:00:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:01:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:01:12 splunk3 sendmail[2306]: n31L11KP002306: from=root, size=443, class=0, nrcpts=1, msgid=<200904012101.n31L11KP002306@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 14:01:12 splunk3 sendmail[2354]: n31L1Cvo002354: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904012101.n31L11KP002306@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 14:01:12 splunk3 sendmail[2306]: n31L11KP002306: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31L1Cvo002354 Message accepted for delivery)
|
|
Apr 1 14:01:13 splunk3 sendmail[2355]: n31L1Cvo002354: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:01:46 splunk3 sendmail[2495]: n31L1kHH002495: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:02:46 splunk3 sendmail[2740]: n31L2k9n002740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:03:46 splunk3 sendmail[2987]: n31L3kn9002987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:04:46 splunk3 sendmail[3230]: n31L4k1i003230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:05:21 splunk3 sendmail[3369]: n31L5LGY003369: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012105.n31L5KGW020656@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:05:21 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44062
|
|
Apr 1 14:05:21 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:05:21 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 14:05:21 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 14:05:21 splunk3 sendmail[3370]: n31L5LGY003369: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:05:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:05:47 splunk3 sendmail[3485]: n31L5lom003485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:05:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:06:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:06:47 splunk3 sendmail[3757]: n31L6ljI003757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:07:47 splunk3 sendmail[4002]: n31L7lHR004002: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:08:47 splunk3 sendmail[4250]: n31L8lN9004250: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:09:47 splunk3 sendmail[4502]: n31L9l3U004502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:10:02 splunk3 sendmail[4656]: n31LA2wY004656: from=root, size=292, class=0, nrcpts=1, msgid=<200904012110.n31LA2wY004656@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 14:10:02 splunk3 sendmail[4661]: n31LA2HJ004661: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904012110.n31LA2wY004656@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 14:10:02 splunk3 sendmail[4656]: n31LA2wY004656: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31LA2HJ004661 Message accepted for delivery)
|
|
Apr 1 14:10:03 splunk3 sendmail[4662]: n31LA2HJ004661: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:10:21 splunk3 sendmail[4744]: n31LALIt004744: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012110.n31LAL34021274@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:10:21 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44119
|
|
Apr 1 14:10:21 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:10:21 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:10:21 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:10:21 splunk3 spamd[5605]: spamd: processing message <200904012110.n31LAL34021274@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:10:23 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 14:10:23 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44119,mid=<200904012110.n31LAL34021274@virt2.int.splunk.com>,bayes=0.112627861909277,autolearn=no
|
|
Apr 1 14:10:23 splunk3 sendmail[4745]: n31LALIt004744: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:10:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:10:47 splunk3 sendmail[4858]: n31LAl7b004858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:10:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:11:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:11:12 splunk3 sendmail[4959]: n31LB9xi004959: from=<xtne@brandwine.com>, size=1043, class=0, nrcpts=1, msgid=<01c9b316$c440c000$483e0153@xtne>, proto=ESMTP, daemon=MTA, relay=72.v62.interkam.pl [83.1.62.72] (may be forged)
|
|
Apr 1 14:11:12 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44135
|
|
Apr 1 14:11:12 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:11:12 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:11:12 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:11:12 splunk3 spamd[5605]: spamd: processing message <01c9b316$c440c000$483e0153@xtne> for spamme:501
|
|
Apr 1 14:11:14 splunk3 spamd[5605]: spamd: identified spam (22.5/5.0) for spamme:501 in 1.8 seconds, 1349 bytes.
|
|
Apr 1 14:11:14 splunk3 spamd[5605]: spamd: result: Y 22 - BAYES_99,DNS_FROM_RFC_BOGUSMX,FORGED_RCVD_HELO,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_WS_SURBL scantime=1.8,size=1349,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44135,mid=<01c9b316$c440c000$483e0153@xtne>,bayes=0.999999929143009,autolearn=spam
|
|
Apr 1 14:11:14 splunk3 sendmail[4982]: n31LB9xi004959: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31268, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:11:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 14:11:47 splunk3 sendmail[5161]: n31LBlHb005161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:12:47 splunk3 sendmail[5402]: n31LClWt005402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:13:47 splunk3 sendmail[5641]: n31LDlFk005641: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:14:47 splunk3 sendmail[5877]: n31LEl4f005877: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:15:22 splunk3 sendmail[6013]: n31LFMJm006013: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012115.n31LFLo6022066@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:15:22 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44176
|
|
Apr 1 14:15:22 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:15:22 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:15:22 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:15:22 splunk3 spamd[5605]: spamd: processing message <200904012115.n31LFLo6022066@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:15:24 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 14:15:24 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44176,mid=<200904012115.n31LFLo6022066@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 14:15:24 splunk3 sendmail[6015]: n31LFMJm006013: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:15:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:15:47 splunk3 sendmail[6130]: n31LFlMV006130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:15:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:16:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:16:47 splunk3 sendmail[6373]: n31LGl4M006373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:17:47 splunk3 sendmail[6612]: n31LHlCN006612: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:18:47 splunk3 sendmail[6848]: n31LIlpZ006848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:19:47 splunk3 sendmail[7088]: n31LJluJ007088: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:20:23 splunk3 sendmail[7229]: n31LKMjv007229: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012120.n31LKMdY022701@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:20:23 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44232
|
|
Apr 1 14:20:23 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:20:23 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:20:23 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:20:23 splunk3 spamd[5605]: spamd: processing message <200904012120.n31LKMdY022701@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:20:25 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 1 14:20:25 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44232,mid=<200904012120.n31LKMdY022701@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 14:20:25 splunk3 sendmail[7230]: n31LKMjv007229: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:20:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:20:47 splunk3 sendmail[7344]: n31LKlMK007344: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:20:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:21:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:21:47 splunk3 sendmail[7601]: n31LLlrU007601: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:22:47 splunk3 sendmail[7835]: n31LMl6D007835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:23:47 splunk3 sendmail[8077]: n31LNlMf008077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:24:47 splunk3 sendmail[8309]: n31LOlJQ008309: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:25:23 splunk3 sendmail[8451]: n31LPN43008451: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012125.n31LPN2N023305@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:25:23 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44287
|
|
Apr 1 14:25:23 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:25:23 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:25:23 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:25:23 splunk3 spamd[5605]: spamd: processing message <200904012125.n31LPN2N023305@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:25:26 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 1 14:25:26 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44287,mid=<200904012125.n31LPN2N023305@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 14:25:26 splunk3 sendmail[8452]: n31LPN43008451: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:25:47 splunk3 sendmail[8563]: n31LPldw008563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:25:58 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:26:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 14:26:47 splunk3 sendmail[8810]: n31LQlTF008810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:27:47 splunk3 sendmail[9048]: n31LRld4009048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:28:47 splunk3 sendmail[9282]: n31LSlRZ009282: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:29:47 splunk3 sendmail[9526]: n31LTlVg009526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:30:24 splunk3 sendmail[9685]: n31LUOFi009685: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012130.n31LUN4X023960@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:30:24 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44352
|
|
Apr 1 14:30:24 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:30:24 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:30:24 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:30:24 splunk3 spamd[5605]: spamd: processing message <200904012130.n31LUN4X023960@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:30:26 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 14:30:26 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44352,mid=<200904012130.n31LUN4X023960@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 14:30:26 splunk3 sendmail[9687]: n31LUOFi009685: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:30:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:30:47 splunk3 sendmail[9788]: n31LUlCr009788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:30:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:31:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:31:47 splunk3 sendmail[10034]: n31LVln9010034: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:32:47 splunk3 sendmail[10271]: n31LWlcs010271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:33:47 splunk3 sendmail[10511]: n31LXl2G010511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:34:47 splunk3 sendmail[10745]: n31LYl6T010745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:35:24 splunk3 sendmail[10914]: n31LZOvn010914: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012135.n31LZO4V024703@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:35:24 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44407
|
|
Apr 1 14:35:24 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:35:24 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:35:24 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:35:24 splunk3 spamd[5605]: spamd: processing message <200904012135.n31LZO4V024703@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:35:26 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 1 14:35:26 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44407,mid=<200904012135.n31LZO4V024703@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 14:35:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:35:26 splunk3 sendmail[10915]: n31LZOvn010914: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:35:47 splunk3 sendmail[11000]: n31LZltj011000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:35:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:36:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:36:47 splunk3 sendmail[11244]: n31Lalq5011244: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:37:47 splunk3 sendmail[11482]: n31Lbl1J011482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:38:47 splunk3 sendmail[11720]: n31LclSe011720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:39:47 splunk3 sendmail[11960]: n31Ldl7p011960: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:40:25 splunk3 sendmail[12133]: n31LePpq012133: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012140.n31LeOpn025342@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:40:25 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44463
|
|
Apr 1 14:40:25 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:40:25 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:40:25 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:40:25 splunk3 spamd[5605]: spamd: processing message <200904012140.n31LeOpn025342@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:40:27 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 14:40:27 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44463,mid=<200904012140.n31LeOpn025342@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 14:40:27 splunk3 sendmail[12134]: n31LePpq012133: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:40:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:40:47 splunk3 sendmail[12216]: n31LelmT012216: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:40:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:41:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 14:41:47 splunk3 sendmail[12465]: n31LflGE012465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:42:47 splunk3 sendmail[12699]: n31LgluE012699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:43:47 splunk3 sendmail[12937]: n31Lhlki012937: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:44:47 splunk3 sendmail[13169]: n31Lil7n013169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:45:27 splunk3 sendmail[13376]: n31LjQqY013376: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012145.n31LjPc3025948@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:45:27 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44520
|
|
Apr 1 14:45:27 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:45:27 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:45:27 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:45:27 splunk3 spamd[5605]: spamd: processing message <200904012145.n31LjPc3025948@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:45:29 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 1 14:45:29 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44520,mid=<200904012145.n31LjPc3025948@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 14:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:45:29 splunk3 sendmail[13377]: n31LjQqY013376: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:45:47 splunk3 sendmail[13460]: n31LjlWf013460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:45:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:46:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:46:47 splunk3 sendmail[13705]: n31LklG1013705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:47:47 splunk3 sendmail[13947]: n31LllVu013947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:48:47 splunk3 sendmail[14182]: n31LmlOk014182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:49:47 splunk3 sendmail[14420]: n31Lnlcg014420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:50:27 splunk3 sendmail[14592]: n31LoRpM014592: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012150.n31LoRaT026567@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:50:27 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44575
|
|
Apr 1 14:50:27 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:50:27 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:50:27 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:50:27 splunk3 spamd[5605]: spamd: processing message <200904012150.n31LoRaT026567@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:50:29 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 1 14:50:29 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44575,mid=<200904012150.n31LoRaT026567@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 14:50:30 splunk3 sendmail[14593]: n31LoRpM014592: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:50:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:50:47 splunk3 sendmail[14677]: n31LolEf014677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:50:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:51:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:51:47 splunk3 sendmail[14922]: n31Lpl4X014922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:52:47 splunk3 sendmail[15156]: n31Lql6U015156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:53:47 splunk3 sendmail[15401]: n31Lrlrj015401: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:54:47 splunk3 sendmail[15637]: n31LslW8015637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:55:00 splunk3 sendmail[719]: n31KsxKr000719: timeout waiting for input from 118-167-128-1.dynamic.hinet.net during server cmd read
|
|
Apr 1 14:55:00 splunk3 sendmail[719]: n31KsxKr000719: lost input channel from 118-167-128-1.dynamic.hinet.net [118.167.128.1] to MTA after rcpt
|
|
Apr 1 14:55:00 splunk3 sendmail[719]: n31KsxKr000719: from=<aaa.xxx@mail2000.com.tw>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-167-128-1.dynamic.hinet.net [118.167.128.1]
|
|
Apr 1 14:55:28 splunk3 sendmail[15808]: n31LtScC015808: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012155.n31LtRxY027200@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 14:55:28 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44631
|
|
Apr 1 14:55:28 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 14:55:28 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 14:55:28 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 14:55:28 splunk3 spamd[5605]: spamd: processing message <200904012155.n31LtRxY027200@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 14:55:30 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 14:55:30 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44631,mid=<200904012155.n31LtRxY027200@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 14:55:30 splunk3 sendmail[15809]: n31LtScC015808: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 14:55:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 14:55:47 splunk3 sendmail[15891]: n31Ltl9U015891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:55:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 14:56:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 14:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 14:56:47 splunk3 sendmail[16136]: n31LulUr016136: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:57:47 splunk3 sendmail[16373]: n31LvlDD016373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:58:47 splunk3 sendmail[16604]: n31LwlYG016604: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 14:59:47 splunk3 sendmail[16841]: n31LxlJ1016841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:00:02 splunk3 sendmail[16969]: n31M025Y016969: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904012200.n31M025Y016969@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 15:00:03 splunk3 sendmail[16971]: n31M025Y016969: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 15:00:03 splunk3 sendmail[16971]: n31M025Y016969: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 15:00:03 splunk3 sendmail[16971]: n31M025Y016969: n31M035Y016971: postmaster notify: User unknown
|
|
Apr 1 15:00:04 splunk3 sendmail[16971]: n31M035Y016971: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:00:04 splunk3 sendmail[16994]: n31M04a4016994: from=root, size=291, class=0, nrcpts=1, msgid=<200904012200.n31M04a4016994@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 15:00:04 splunk3 sendmail[16998]: n31M04W5016998: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904012200.n31M04a4016994@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 15:00:04 splunk3 sendmail[16994]: n31M04a4016994: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31M04W5016998 Message accepted for delivery)
|
|
Apr 1 15:00:05 splunk3 sendmail[17003]: n31M04W5016998: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:00:29 splunk3 sendmail[17099]: n31M0TEl017099: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012200.n31M0SpJ027811@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:00:29 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44695
|
|
Apr 1 15:00:29 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:00:29 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 15:00:29 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 15:00:29 splunk3 sendmail[17100]: n31M0TEl017099: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:00:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:00:47 splunk3 sendmail[17182]: n31M0lvd017182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:00:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:01:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:01:12 splunk3 sendmail[17254]: n31M11LX017254: from=root, size=443, class=0, nrcpts=1, msgid=<200904012201.n31M11LX017254@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 15:01:12 splunk3 sendmail[17302]: n31M1CJG017302: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904012201.n31M11LX017254@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 15:01:12 splunk3 sendmail[17254]: n31M11LX017254: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31M1CJG017302 Message accepted for delivery)
|
|
Apr 1 15:01:14 splunk3 sendmail[17303]: n31M1CJG017302: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:01:47 splunk3 sendmail[17444]: n31M1lTJ017444: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:02:47 splunk3 sendmail[17679]: n31M2lpM017679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:03:47 splunk3 sendmail[17918]: n31M3lB8017918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:04:47 splunk3 sendmail[18152]: n31M4lHm018152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:05:29 splunk3 sendmail[18340]: n31M5T7a018340: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012205.n31M5Tr2028516@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:05:29 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44752
|
|
Apr 1 15:05:29 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:05:29 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 15:05:29 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 15:05:29 splunk3 sendmail[18341]: n31M5T7a018340: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:05:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:05:47 splunk3 sendmail[18407]: n31M5lrF018407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:05:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:06:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:06:47 splunk3 sendmail[18648]: n31M6loO018648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:07:47 splunk3 sendmail[18888]: n31M7lFP018888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:08:47 splunk3 sendmail[19127]: n31M8ljn019127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:09:47 splunk3 sendmail[19369]: n31M9lN5019369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:10:03 splunk3 sendmail[19524]: n31MA3Xk019524: from=root, size=292, class=0, nrcpts=1, msgid=<200904012210.n31MA3Xk019524@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 15:10:03 splunk3 sendmail[19529]: n31MA3HI019529: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904012210.n31MA3Xk019524@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 15:10:03 splunk3 sendmail[19524]: n31MA3Xk019524: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31MA3HI019529 Message accepted for delivery)
|
|
Apr 1 15:10:04 splunk3 sendmail[19530]: n31MA3HI019529: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:10:30 splunk3 sendmail[19661]: n31MAU3b019661: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012210.n31MAUQg029111@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:10:30 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44808
|
|
Apr 1 15:10:30 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:10:30 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:10:30 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:10:30 splunk3 spamd[5605]: spamd: processing message <200904012210.n31MAUQg029111@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:10:32 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 15:10:32 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44808,mid=<200904012210.n31MAUQg029111@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 15:10:32 splunk3 sendmail[19662]: n31MAU3b019661: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:10:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:10:47 splunk3 sendmail[19727]: n31MAlXh019727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:10:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:11:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 15:11:47 splunk3 sendmail[19977]: n31MBlu1019977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:12:47 splunk3 sendmail[20213]: n31MClt0020213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:13:47 splunk3 sendmail[20454]: n31MDlmO020454: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:14:47 splunk3 sendmail[20689]: n31MElkQ020689: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:15:00 splunk3 sendmail[20748]: n31MF0lM020748: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012215.n31MF0xt029828@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:15:00 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44853
|
|
Apr 1 15:15:00 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:15:00 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:15:00 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:15:00 splunk3 spamd[5605]: spamd: processing message <200904012215.n31MF0xt029828@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:15:02 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 15:15:02 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44853,mid=<200904012215.n31MF0xt029828@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 15:15:02 splunk3 sendmail[20749]: n31MF0lM020748: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:15:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:15:47 splunk3 sendmail[20942]: n31MFlS2020942: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:15:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:16:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:16:47 splunk3 sendmail[21186]: n31MGl4Q021186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:17:47 splunk3 sendmail[21425]: n31MHlPY021425: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:18:47 splunk3 sendmail[21660]: n31MIlNO021660: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:19:47 splunk3 sendmail[21899]: n31MJlZJ021899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:20:01 splunk3 sendmail[21955]: n31MK1Od021955: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012220.n31MK0aD030449@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:20:01 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44909
|
|
Apr 1 15:20:01 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:20:01 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:20:01 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:20:01 splunk3 spamd[5605]: spamd: processing message <200904012220.n31MK0aD030449@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:20:03 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 15:20:03 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44909,mid=<200904012220.n31MK0aD030449@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 15:20:03 splunk3 sendmail[21956]: n31MK1Od021955: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:20:47 splunk3 sendmail[22154]: n31MKlve022154: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:20:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:21:08 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:21:47 splunk3 sendmail[22403]: n31MLleD022403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:22:47 splunk3 sendmail[22639]: n31MMlUE022639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:23:47 splunk3 sendmail[22883]: n31MNlTj022883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:24:47 splunk3 sendmail[23117]: n31MOlt0023117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:25:01 splunk3 sendmail[23176]: n31MP1Rr023176: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012225.n31MP1Aj031082@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:25:01 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44964
|
|
Apr 1 15:25:01 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:25:01 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:25:01 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:25:01 splunk3 spamd[5605]: spamd: processing message <200904012225.n31MP1Aj031082@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:25:03 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 15:25:03 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44964,mid=<200904012225.n31MP1Aj031082@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 15:25:03 splunk3 sendmail[23177]: n31MP1Rr023176: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:25:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:25:47 splunk3 sendmail[23371]: n31MPlYs023371: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:25:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:26:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 15:26:47 splunk3 sendmail[23615]: n31MQlOJ023615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:27:47 splunk3 sendmail[23850]: n31MRlJG023850: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:28:47 splunk3 sendmail[24085]: n31MSlk2024085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:29:47 splunk3 sendmail[24323]: n31MTlS0024323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:30:02 splunk3 sendmail[24386]: n31MU2Qq024386: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012230.n31MU18E031696@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:30:02 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45021
|
|
Apr 1 15:30:02 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:30:02 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:30:02 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:30:02 splunk3 spamd[5605]: spamd: processing message <200904012230.n31MU18E031696@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:30:04 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 15:30:04 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45021,mid=<200904012230.n31MU18E031696@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 15:30:04 splunk3 sendmail[24387]: n31MU2Qq024386: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:30:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:30:47 splunk3 sendmail[24580]: n31MUldH024580: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:30:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:31:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:31:47 splunk3 sendmail[24826]: n31MVlIO024826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:32:47 splunk3 sendmail[25062]: n31MWlSA025062: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:33:47 splunk3 sendmail[25298]: n31MXlAw025298: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:34:47 splunk3 sendmail[25532]: n31MYlRM025532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:35:02 splunk3 sendmail[25594]: n31MZ2jS025594: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012235.n31MZ2nb032485@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:35:02 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45076
|
|
Apr 1 15:35:02 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:35:02 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:35:02 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:35:02 splunk3 spamd[5605]: spamd: processing message <200904012235.n31MZ2nb032485@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:35:04 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 15:35:04 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45076,mid=<200904012235.n31MZ2nb032485@virt2.int.splunk.com>,bayes=0.112620398474721,autolearn=no
|
|
Apr 1 15:35:04 splunk3 sendmail[25596]: n31MZ2jS025594: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:35:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:35:47 splunk3 sendmail[25788]: n31MZlEa025788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:35:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:36:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:36:47 splunk3 sendmail[26032]: n31Mal15026032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:37:47 splunk3 sendmail[26271]: n31MblRL026271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:38:47 splunk3 sendmail[26511]: n31McltS026511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:39:47 splunk3 sendmail[26750]: n31MdlnU026750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:40:03 splunk3 sendmail[26810]: n31Me3xd026810: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904012240.n31Me3nQ000650@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:40:03 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45132
|
|
Apr 1 15:40:03 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:40:03 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:40:03 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:40:03 splunk3 spamd[5605]: spamd: processing message <200904012240.n31Me3nQ000650@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:40:06 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1302 bytes.
|
|
Apr 1 15:40:06 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45132,mid=<200904012240.n31Me3nQ000650@virt2.int.splunk.com>,bayes=0.0665554984863833,autolearn=no
|
|
Apr 1 15:40:06 splunk3 sendmail[26811]: n31Me3xd026810: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:40:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:40:47 splunk3 sendmail[27005]: n31Melgo027005: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:40:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:41:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 15:41:47 splunk3 sendmail[27254]: n31MflHW027254: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:42:47 splunk3 sendmail[27490]: n31Mgl45027490: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:43:47 splunk3 sendmail[27729]: n31MhlsG027729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:44:47 splunk3 sendmail[27965]: n31Mileu027965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:45:03 splunk3 sendmail[28025]: n31Mj3dP028025: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012245.n31Mj324001270@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:45:03 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45188
|
|
Apr 1 15:45:03 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:45:03 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:45:03 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:45:03 splunk3 spamd[5605]: spamd: processing message <200904012245.n31Mj324001270@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:45:05 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1305 bytes.
|
|
Apr 1 15:45:05 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45188,mid=<200904012245.n31Mj324001270@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 15:45:05 splunk3 sendmail[28026]: n31Mj3dP028025: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:45:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:45:47 splunk3 sendmail[28218]: n31MjlIt028218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:45:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:46:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:46:47 splunk3 sendmail[28461]: n31MklOS028461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:47:47 splunk3 sendmail[28699]: n31Mll5U028699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:48:47 splunk3 sendmail[28931]: n31Mmln9028931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:49:47 splunk3 sendmail[29169]: n31MnlsD029169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:50:04 splunk3 sendmail[29253]: n31Mo40U029253: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012250.n31Mo4ep001906@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:50:04 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45243
|
|
Apr 1 15:50:04 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:50:04 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:50:04 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:50:04 splunk3 spamd[5605]: spamd: processing message <200904012250.n31Mo4ep001906@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:50:07 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1305 bytes.
|
|
Apr 1 15:50:07 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45243,mid=<200904012250.n31Mo4ep001906@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 15:50:07 splunk3 sendmail[29254]: n31Mo40U029253: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:50:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:50:47 splunk3 sendmail[29426]: n31Mol2t029426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:50:57 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:51:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:51:47 splunk3 sendmail[29674]: n31MplEx029674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:52:47 splunk3 sendmail[29908]: n31MqlOn029908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:53:47 splunk3 sendmail[30151]: n31Mrl83030151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:54:47 splunk3 sendmail[30384]: n31Msl12030384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:55:05 splunk3 sendmail[30465]: n31Mt5cf030465: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012255.n31Mt5Gt002528@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 15:55:05 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45299
|
|
Apr 1 15:55:05 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 15:55:05 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 15:55:05 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 15:55:05 splunk3 spamd[5605]: spamd: processing message <200904012255.n31Mt5Gt002528@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 15:55:07 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 15:55:07 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45299,mid=<200904012255.n31Mt5Gt002528@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 15:55:07 splunk3 sendmail[30466]: n31Mt5cf030465: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 15:55:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 15:55:47 splunk3 sendmail[30637]: n31MtlKl030637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:55:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 15:56:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 15:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 15:56:47 splunk3 sendmail[30885]: n31MulQB030885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:57:47 splunk3 sendmail[31124]: n31Mvlv6031124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:58:47 splunk3 sendmail[31360]: n31Mwlmv031360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 15:59:47 splunk3 sendmail[31599]: n31MxlbA031599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:00:04 splunk3 sendmail[31744]: n31N04Nn031744: from=root, size=291, class=0, nrcpts=1, msgid=<200904012300.n31N04Nn031744@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 16:00:05 splunk3 sendmail[31748]: n31N04AK031748: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904012300.n31N04Nn031744@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 16:00:05 splunk3 sendmail[31744]: n31N04Nn031744: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31N04AK031748 Message accepted for delivery)
|
|
Apr 1 16:00:06 splunk3 sendmail[31753]: n31N06KI031753: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012300.n31N05IU003163@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:00:06 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45356
|
|
Apr 1 16:00:06 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:00:06 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 16:00:06 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 16:00:06 splunk3 sendmail[31754]: n31N06KI031753: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:00:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:00:06 splunk3 sendmail[31749]: n31N04AK031748: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:00:08 splunk3 sendmail[31771]: n31N08bc031771: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904012300.n31N08bc031771@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 16:00:08 splunk3 sendmail[31773]: n31N08bc031771: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 16:00:08 splunk3 sendmail[31773]: n31N08bc031771: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 16:00:08 splunk3 sendmail[31773]: n31N08bc031771: n31N08bc031773: postmaster notify: User unknown
|
|
Apr 1 16:00:10 splunk3 sendmail[31773]: n31N08bc031773: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:00:47 splunk3 sendmail[31939]: n31N0lBP031939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:00:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:01:03 splunk3 sendmail[32007]: n31N11mY032007: from=root, size=443, class=0, nrcpts=1, msgid=<200904012301.n31N11mY032007@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 16:01:03 splunk3 sendmail[32010]: n31N13XV032010: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904012301.n31N11mY032007@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 16:01:03 splunk3 sendmail[32007]: n31N11mY032007: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31N13XV032010 Message accepted for delivery)
|
|
Apr 1 16:01:05 splunk3 sendmail[32012]: n31N13XV032010: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:01:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:01:47 splunk3 sendmail[32196]: n31N1lX6032196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:02:47 splunk3 sendmail[32432]: n31N2lkl032432: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:03:47 splunk3 sendmail[32672]: n31N3lJ3032672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:04:47 splunk3 sendmail[440]: n31N4lFu000440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:05:07 splunk3 sendmail[523]: n31N57oB000523: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012305.n31N57Da003849@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:05:07 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45420
|
|
Apr 1 16:05:07 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:05:07 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 16:05:07 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 16:05:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:05:07 splunk3 sendmail[524]: n31N57oB000523: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:05:47 splunk3 sendmail[694]: n31N5lN8000694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:05:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:06:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:06:47 splunk3 sendmail[936]: n31N6lAC000936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:07:47 splunk3 sendmail[1176]: n31N7lGx001176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:08:47 splunk3 sendmail[1414]: n31N8lmP001414: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:09:47 splunk3 sendmail[1655]: n31N9lT7001655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:10:02 splunk3 sendmail[1813]: n31NA2fo001813: from=root, size=292, class=0, nrcpts=1, msgid=<200904012310.n31NA2fo001813@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 16:10:02 splunk3 sendmail[1818]: n31NA2fR001818: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904012310.n31NA2fo001813@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 16:10:02 splunk3 sendmail[1813]: n31NA2fo001813: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n31NA2fR001818 Message accepted for delivery)
|
|
Apr 1 16:10:03 splunk3 sendmail[1819]: n31NA2fR001818: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:10:08 splunk3 sendmail[1844]: n31NA8rt001844: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012310.n31NA8Nw004464@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:10:08 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45476
|
|
Apr 1 16:10:08 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:10:08 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:10:08 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:10:08 splunk3 spamd[5605]: spamd: processing message <200904012310.n31NA8Nw004464@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:10:10 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 1 16:10:10 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45476,mid=<200904012310.n31NA8Nw004464@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 16:10:10 splunk3 sendmail[1845]: n31NA8rt001844: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:10:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:10:47 splunk3 sendmail[2018]: n31NAl49002018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:10:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:11:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 16:11:47 splunk3 sendmail[2267]: n31NBlLX002267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:12:47 splunk3 sendmail[2503]: n31NClsP002503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:13:47 splunk3 sendmail[2751]: n31NDl74002751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:14:47 splunk3 sendmail[2998]: n31NElaW002998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:15:09 splunk3 sendmail[3101]: n31NF957003101: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012315.n31NF9PQ005265@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:15:09 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45533
|
|
Apr 1 16:15:09 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:15:09 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:15:09 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:15:09 splunk3 spamd[5605]: spamd: processing message <200904012315.n31NF9PQ005265@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:15:11 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 1 16:15:11 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45533,mid=<200904012315.n31NF9PQ005265@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 16:15:11 splunk3 sendmail[3102]: n31NF957003101: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:15:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:15:47 splunk3 sendmail[3256]: n31NFlF7003256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:15:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:16:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:16:48 splunk3 sendmail[3499]: n31NGmNQ003499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:17:48 splunk3 sendmail[3770]: n31NHmTe003770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:18:48 splunk3 sendmail[4012]: n31NImZs004012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:19:48 splunk3 sendmail[4262]: n31NJmnc004262: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:20:10 splunk3 sendmail[4376]: n31NKAQk004376: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012320.n31NK9OC005901@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:20:10 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45589
|
|
Apr 1 16:20:10 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:20:10 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:20:10 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:20:10 splunk3 spamd[5605]: spamd: processing message <200904012320.n31NK9OC005901@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:20:12 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 16:20:12 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45589,mid=<200904012320.n31NK9OC005901@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 16:20:12 splunk3 sendmail[4377]: n31NKAQk004376: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:20:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:20:48 splunk3 sendmail[4529]: n31NKmAi004529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:20:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:21:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:21:48 splunk3 sendmail[4775]: n31NLmCe004775: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:22:48 splunk3 sendmail[5019]: n31NMmMw005019: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:23:48 splunk3 sendmail[5298]: n31NNmGs005298: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:24:48 splunk3 sendmail[5538]: n31NOmoI005538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:25:11 splunk3 sendmail[5651]: n31NPBYO005651: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012325.n31NPBHc006516@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:25:11 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45652
|
|
Apr 1 16:25:11 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:25:11 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:25:11 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:25:11 splunk3 spamd[5605]: spamd: processing message <200904012325.n31NPBHc006516@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:25:13 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 1 16:25:13 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45652,mid=<200904012325.n31NPBHc006516@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 16:25:13 splunk3 sendmail[5652]: n31NPBYO005651: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:25:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:25:48 splunk3 sendmail[5793]: n31NPmaH005793: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:25:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:26:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 16:26:48 splunk3 sendmail[6037]: n31NQmNO006037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:27:48 splunk3 sendmail[6276]: n31NRmLB006276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:28:48 splunk3 sendmail[6511]: n31NSmtK006511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:29:48 splunk3 sendmail[6748]: n31NTmdK006748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:30:11 splunk3 sendmail[6865]: n31NUBBN006865: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012330.n31NUB1H007138@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:30:11 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45709
|
|
Apr 1 16:30:11 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:30:11 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:30:11 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:30:11 splunk3 spamd[5605]: spamd: processing message <200904012330.n31NUB1H007138@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:30:14 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 1 16:30:14 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45709,mid=<200904012330.n31NUB1H007138@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 16:30:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:30:14 splunk3 sendmail[6866]: n31NUBBN006865: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:30:48 splunk3 sendmail[7004]: n31NUmIT007004: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:30:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:31:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:31:48 splunk3 sendmail[7251]: n31NVmZO007251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:32:48 splunk3 sendmail[7488]: n31NWmSM007488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:33:48 splunk3 sendmail[7736]: n31NXmqk007736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:34:48 splunk3 sendmail[7969]: n31NYm4V007969: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:35:12 splunk3 sendmail[8082]: n31NZCtg008082: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012335.n31NZC7u007884@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:35:12 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45764
|
|
Apr 1 16:35:12 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:35:12 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:35:12 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:35:12 splunk3 spamd[5605]: spamd: processing message <200904012335.n31NZC7u007884@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:35:14 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 16:35:14 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45764,mid=<200904012335.n31NZC7u007884@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 16:35:14 splunk3 sendmail[8083]: n31NZCtg008082: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:35:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:35:48 splunk3 sendmail[8223]: n31NZmkg008223: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:35:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:36:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:36:48 splunk3 sendmail[8463]: n31NamsW008463: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:37:48 splunk3 sendmail[8701]: n31NbmHF008701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:38:48 splunk3 sendmail[8940]: n31NcmQx008940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:39:48 splunk3 sendmail[9177]: n31NdmlS009177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:40:13 splunk3 sendmail[9292]: n31NeCrl009292: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012340.n31NeCK2008515@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:40:13 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45820
|
|
Apr 1 16:40:13 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:40:13 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:40:13 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:40:13 splunk3 spamd[5605]: spamd: processing message <200904012340.n31NeCK2008515@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:40:15 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 16:40:15 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45820,mid=<200904012340.n31NeCK2008515@virt2.int.splunk.com>,bayes=0.169609006465265,autolearn=no
|
|
Apr 1 16:40:15 splunk3 sendmail[9293]: n31NeCrl009292: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:40:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:40:48 splunk3 sendmail[9431]: n31NemHw009431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:40:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:41:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 16:41:48 splunk3 sendmail[9691]: n31NfmmR009691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:42:11 splunk3 sendmail[9788]: n31NgBHE009788: from=<30_vTSRQKBuwUccUZSOZSfhg-bcfSdZmUccUZS.QcagdOaaSgdZibYWh.Qca@alerts.bounces.google.com>, size=2852, class=0, nrcpts=1, msgid=<001485f91dd248e98e046686dd90@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.188]
|
|
Apr 1 16:42:11 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45840
|
|
Apr 1 16:42:11 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:42:11 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:42:11 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:42:11 splunk3 spamd[5605]: spamd: processing message <001485f91dd248e98e046686dd90@google.com> for spamme:501
|
|
Apr 1 16:42:13 splunk3 spamd[5605]: spamd: clean message (-2.4/5.0) for spamme:501 in 1.3 seconds, 3282 bytes.
|
|
Apr 1 16:42:13 splunk3 spamd[5605]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.3,size=3282,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45840,mid=<001485f91dd248e98e046686dd90@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Apr 1 16:42:13 splunk3 sendmail[9789]: n31NgBHE009788: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33063, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:42:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:42:48 splunk3 sendmail[9933]: n31Ngmld009933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:43:48 splunk3 sendmail[10169]: n31NhmAE010169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:44:48 splunk3 sendmail[10405]: n31Nim6q010405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:45:13 splunk3 sendmail[10533]: n31NjD0H010533: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012345.n31NjDoD009130@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:45:13 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45878
|
|
Apr 1 16:45:13 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:45:13 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:45:13 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:45:13 splunk3 spamd[5605]: spamd: processing message <200904012345.n31NjDoD009130@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:45:15 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 1 16:45:15 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45878,mid=<200904012345.n31NjDoD009130@virt2.int.splunk.com>,bayes=0.169647006528402,autolearn=no
|
|
Apr 1 16:45:15 splunk3 sendmail[10534]: n31NjD0H010533: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:45:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:45:48 splunk3 sendmail[10659]: n31NjmKw010659: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:45:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:46:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:46:48 splunk3 sendmail[10902]: n31Nkm5O010902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:47:48 splunk3 sendmail[11143]: n31NlmNG011143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:48:19 splunk3 sendmail[11260]: n31NmGNi011260: from=<wrothsom_1952@HAWKINSSERVICECO.COM>, size=1905, class=0, nrcpts=1, msgid=<200904012348.n31NmGNi011260@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=97-117-243-22.phnx.qwest.net [97.117.243.22]
|
|
Apr 1 16:48:19 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45909
|
|
Apr 1 16:48:19 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:48:19 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:48:19 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:48:19 splunk3 spamd[5605]: spamd: processing message <200904012348.n31NmGNi011260@splunk3.splunkit.com> for spamme:501
|
|
Apr 1 16:48:25 splunk3 spamd[5605]: spamd: identified spam (30.2/5.0) for spamme:501 in 6.4 seconds, 2342 bytes.
|
|
Apr 1 16:48:25 splunk3 spamd[5605]: spamd: result: Y 30 - BAYES_95,HELO_DYNAMIC_IPADDR2,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=6.4,size=2342,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45909,mid=<200904012348.n31NmGNi011260@splunk3.splunkit.com>,bayes=0.966527474177397,autolearn=spam
|
|
Apr 1 16:48:25 splunk3 sendmail[11278]: n31NmGNi011260: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:06, mailer=local, pri=32235, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:48:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:48:48 splunk3 sendmail[11384]: n31Nmmtg011384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:49:48 splunk3 sendmail[11637]: n31Nnmve011637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:50:14 splunk3 sendmail[11756]: n31NoEjr011756: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904012350.n31NoEhs009744@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:50:14 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45934
|
|
Apr 1 16:50:14 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:50:14 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:50:14 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:50:14 splunk3 spamd[5605]: spamd: processing message <200904012350.n31NoEhs009744@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:50:16 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 16:50:16 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45934,mid=<200904012350.n31NoEhs009744@virt2.int.splunk.com>,bayes=0.16963816153854,autolearn=no
|
|
Apr 1 16:50:16 splunk3 sendmail[11757]: n31NoEjr011756: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:50:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:50:48 splunk3 sendmail[11893]: n31NomJ6011893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:50:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:51:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:51:48 splunk3 sendmail[12141]: n31Npm4h012141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:52:48 splunk3 sendmail[12377]: n31NqmfE012377: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:53:48 splunk3 sendmail[12620]: n31NrmiI012620: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:54:48 splunk3 sendmail[12854]: n31Nsm1w012854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:55:15 splunk3 sendmail[12968]: n31NtFjZ012968: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904012355.n31NtExa010350@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 16:55:15 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45990
|
|
Apr 1 16:55:15 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 16:55:15 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 16:55:15 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 16:55:15 splunk3 spamd[5605]: spamd: processing message <200904012355.n31NtExa010350@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 16:55:18 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 16:55:18 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45990,mid=<200904012355.n31NtExa010350@virt2.int.splunk.com>,bayes=0.112645181726778,autolearn=no
|
|
Apr 1 16:55:18 splunk3 sendmail[12969]: n31NtFjZ012968: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 16:55:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 16:55:48 splunk3 sendmail[13107]: n31NtmJg013107: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:55:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 16:56:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 16:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 16:56:48 splunk3 sendmail[13389]: n31NumGD013389: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:57:48 splunk3 sendmail[13628]: n31NvmcL013628: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:58:48 splunk3 sendmail[13863]: n31NwmA5013863: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 16:59:48 splunk3 sendmail[14103]: n31NxmBt014103: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:00:04 splunk3 sendmail[14231]: n320048P014231: from=root, size=291, class=0, nrcpts=1, msgid=<200904020000.n320048P014231@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 17:00:04 splunk3 sendmail[14236]: n32004At014236: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020000.n320048P014231@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 17:00:04 splunk3 sendmail[14231]: n320048P014231: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32004At014236 Message accepted for delivery)
|
|
Apr 1 17:00:06 splunk3 sendmail[14237]: n32004At014236: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:00:14 splunk3 sendmail[14288]: n3200EoU014288: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904020000.n3200EoU014288@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 17:00:14 splunk3 sendmail[14290]: n3200EoU014288: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 17:00:14 splunk3 sendmail[14290]: n3200EoU014288: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 17:00:14 splunk3 sendmail[14290]: n3200EoU014288: n3200EoU014290: postmaster notify: User unknown
|
|
Apr 1 17:00:15 splunk3 sendmail[14303]: n3200FTA014303: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020000.n3200Fqb010986@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:00:15 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46054
|
|
Apr 1 17:00:15 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:00:15 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 17:00:15 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 17:00:15 splunk3 sendmail[14290]: n3200EoU014290: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:00:15 splunk3 sendmail[14304]: n3200FTA014303: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:00:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:00:48 splunk3 sendmail[14443]: n3200mbt014443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:00:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:01:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:01:12 splunk3 sendmail[14499]: n32011LQ014499: from=root, size=443, class=0, nrcpts=1, msgid=<200904020001.n32011LQ014499@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 17:01:12 splunk3 sendmail[14544]: n3201Cbw014544: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020001.n32011LQ014499@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 17:01:12 splunk3 sendmail[14499]: n32011LQ014499: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3201Cbw014544 Message accepted for delivery)
|
|
Apr 1 17:01:13 splunk3 sendmail[14545]: n3201Cbw014544: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:01:48 splunk3 sendmail[14703]: n3201mMv014703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:02:48 splunk3 sendmail[14940]: n3202mtr014940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:03:48 splunk3 sendmail[15177]: n3203mQQ015177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:04:48 splunk3 sendmail[15411]: n3204mQ3015411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:05:16 splunk3 sendmail[15528]: n3205GTO015528: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020005.n3205GYJ011667@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:05:16 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46111
|
|
Apr 1 17:05:16 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:05:16 splunk3 spamd[5605]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 17:05:16 splunk3 spamd[5605]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 17:05:16 splunk3 sendmail[15529]: n3205GTO015528: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:05:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:05:48 splunk3 sendmail[15665]: n3205mae015665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:05:56 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:06:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:06:48 splunk3 sendmail[15908]: n3206mWt015908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:07:48 splunk3 sendmail[16146]: n3207mTg016146: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:08:48 splunk3 sendmail[16385]: n3208mhU016385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:09:48 splunk3 sendmail[16626]: n3209mOB016626: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:10:02 splunk3 sendmail[16763]: n320A2P5016763: from=root, size=292, class=0, nrcpts=1, msgid=<200904020010.n320A2P5016763@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 17:10:02 splunk3 sendmail[16768]: n320A2qw016768: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020010.n320A2P5016763@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 17:10:02 splunk3 sendmail[16763]: n320A2P5016763: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n320A2qw016768 Message accepted for delivery)
|
|
Apr 1 17:10:04 splunk3 sendmail[16769]: n320A2qw016768: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:10:16 splunk3 sendmail[16845]: n320AGr6016845: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020010.n320AGo0012276@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:10:16 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46167
|
|
Apr 1 17:10:16 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:10:16 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:10:16 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:10:16 splunk3 spamd[5605]: spamd: processing message <200904020010.n320AGo0012276@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:10:18 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 17:10:18 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46167,mid=<200904020010.n320AGo0012276@virt2.int.splunk.com>,bayes=0.112645181726778,autolearn=no
|
|
Apr 1 17:10:18 splunk3 sendmail[16846]: n320AGr6016845: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:10:48 splunk3 sendmail[16982]: n320AmJr016982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:10:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:11:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 17:11:48 splunk3 sendmail[17230]: n320BmaU017230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:12:48 splunk3 sendmail[17466]: n320Cmcx017466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:13:48 splunk3 sendmail[17702]: n320DmOp017702: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:14:48 splunk3 sendmail[17938]: n320EmfD017938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:15:17 splunk3 sendmail[18052]: n320FH65018052: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020015.n320FGUI013078@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:15:17 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46224
|
|
Apr 1 17:15:17 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:15:17 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:15:17 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:15:17 splunk3 spamd[5605]: spamd: processing message <200904020015.n320FGUI013078@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:15:19 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 17:15:19 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46224,mid=<200904020015.n320FGUI013078@virt2.int.splunk.com>,bayes=0.112645181726778,autolearn=no
|
|
Apr 1 17:15:19 splunk3 sendmail[18053]: n320FH65018052: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:15:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:15:48 splunk3 sendmail[18192]: n320Fmt1018192: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:15:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:16:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:16:48 splunk3 sendmail[18437]: n320GmhC018437: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:17:48 splunk3 sendmail[18676]: n320HmbW018676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:18:48 splunk3 sendmail[18910]: n320ImEh018910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:19:48 splunk3 sendmail[19150]: n320JmjH019150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:20:18 splunk3 sendmail[19285]: n320KI1k019285: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020020.n320KHwF013708@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:20:18 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46279
|
|
Apr 1 17:20:18 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:20:18 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:20:18 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:20:18 splunk3 spamd[5605]: spamd: processing message <200904020020.n320KHwF013708@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:20:20 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 1 17:20:20 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46279,mid=<200904020020.n320KHwF013708@virt2.int.splunk.com>,bayes=0.112645181726778,autolearn=no
|
|
Apr 1 17:20:20 splunk3 sendmail[19286]: n320KI1k019285: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:20:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:20:48 splunk3 sendmail[19407]: n320KmAf019407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:20:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:21:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:21:48 splunk3 sendmail[19653]: n320LmvC019653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:22:48 splunk3 sendmail[19889]: n320MmCf019889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:23:48 splunk3 sendmail[20131]: n320Nml3020131: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:24:48 splunk3 sendmail[20362]: n320OmQM020362: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:25:19 splunk3 sendmail[20495]: n320PJoa020495: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020025.n320PIQT014316@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:25:19 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46335
|
|
Apr 1 17:25:19 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:25:19 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:25:19 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:25:19 splunk3 spamd[5605]: spamd: processing message <200904020025.n320PIQT014316@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:25:21 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 17:25:21 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46335,mid=<200904020025.n320PIQT014316@virt2.int.splunk.com>,bayes=0.112645181726778,autolearn=no
|
|
Apr 1 17:25:21 splunk3 sendmail[20496]: n320PJoa020495: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:25:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:25:48 splunk3 sendmail[20614]: n320PmP1020614: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:25:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:26:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 17:26:48 splunk3 sendmail[20858]: n320QmZB020858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:27:29 splunk3 sendmail[21021]: n320RTWM021021: from=<3cQbUSRQKBpU5DD5A3zA3GIH-CDG3EAN5DD5A3.1DBHEzBB3HEAJC97I.1DB@alerts.bounces.google.com>, size=10633, class=0, nrcpts=1, msgid=<000e0cd6ab704c224f0466877faf@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.160]
|
|
Apr 1 17:27:29 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46358
|
|
Apr 1 17:27:29 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:27:29 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:27:29 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:27:29 splunk3 spamd[5605]: spamd: processing message <000e0cd6ab704c224f0466877faf@google.com> for spamme:501
|
|
Apr 1 17:27:32 splunk3 spamd[5605]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.4 seconds, 11062 bytes.
|
|
Apr 1 17:27:32 splunk3 spamd[5605]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.4,size=11062,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46358,mid=<000e0cd6ab704c224f0466877faf@google.com>,bayes=1.11022302462516e-16,autolearn=ham
|
|
Apr 1 17:27:32 splunk3 sendmail[21022]: n320RTWM021021: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=40843, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:27:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:27:48 splunk3 sendmail[21105]: n320RmbJ021105: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:28:48 splunk3 sendmail[21339]: n320Sm1F021339: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:29:48 splunk3 sendmail[21577]: n320Tm1k021577: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:30:20 splunk3 sendmail[21710]: n320UKDx021710: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020030.n320UJTq014940@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:30:20 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46393
|
|
Apr 1 17:30:20 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:30:20 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:30:20 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:30:20 splunk3 spamd[5605]: spamd: processing message <200904020030.n320UJTq014940@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:30:22 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 17:30:22 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46393,mid=<200904020030.n320UJTq014940@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 17:30:22 splunk3 sendmail[21711]: n320UKDx021710: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:30:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:30:48 splunk3 sendmail[21833]: n320UmYA021833: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:30:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:31:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:31:48 splunk3 sendmail[22079]: n320VmHK022079: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:32:48 splunk3 sendmail[22315]: n320WmhL022315: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:33:48 splunk3 sendmail[22554]: n320XmiE022554: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:34:48 splunk3 sendmail[22790]: n320YmAI022790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:35:20 splunk3 sendmail[22923]: n320ZKMJ022923: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020035.n320ZKnY015684@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:35:20 splunk3 spamd[5605]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46448
|
|
Apr 1 17:35:20 splunk3 spamd[5605]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:35:20 splunk3 spamd[5605]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:35:20 splunk3 spamd[5605]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:35:20 splunk3 spamd[5605]: spamd: processing message <200904020035.n320ZKnY015684@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:35:22 splunk3 spamd[5605]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 17:35:22 splunk3 spamd[5605]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46448,mid=<200904020035.n320ZKnY015684@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 17:35:22 splunk3 sendmail[22924]: n320ZKMJ022923: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:35:22 splunk3 spamd[3033]: prefork: child states: BI
|
|
Apr 1 17:35:22 splunk3 spamd[3033]: spamd: handled cleanup of child pid 5605 due to SIGCHLD
|
|
Apr 1 17:35:22 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 22930
|
|
Apr 1 17:35:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:35:48 splunk3 sendmail[23045]: n320Zm47023045: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:35:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:36:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:36:48 splunk3 sendmail[23288]: n320amkm023288: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:37:48 splunk3 sendmail[23528]: n320bm1J023528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:38:48 splunk3 sendmail[23766]: n320cmSx023766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:39:48 splunk3 sendmail[24004]: n320dmDs024004: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:40:21 splunk3 sendmail[24141]: n320eKrG024141: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020040.n320eK5N016324@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:40:21 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46504
|
|
Apr 1 17:40:21 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:40:21 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:40:21 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:40:21 splunk3 spamd[22930]: spamd: processing message <200904020040.n320eK5N016324@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:40:23 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 17:40:23 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46504,mid=<200904020040.n320eK5N016324@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 17:40:23 splunk3 sendmail[24142]: n320eKrG024141: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:40:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:40:48 splunk3 sendmail[24260]: n320emO0024260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:40:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:41:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 17:41:48 splunk3 sendmail[24510]: n320fmgw024510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:42:48 splunk3 sendmail[24745]: n320gmUn024745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:43:48 splunk3 sendmail[24982]: n320hmOa024982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:44:48 splunk3 sendmail[25217]: n320imSF025217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:45:21 splunk3 sendmail[25348]: n320jLWZ025348: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020045.n320jLgQ016934@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:45:21 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46560
|
|
Apr 1 17:45:21 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:45:21 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:45:21 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:45:21 splunk3 spamd[22930]: spamd: processing message <200904020045.n320jLgQ016934@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:45:23 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 17:45:23 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46560,mid=<200904020045.n320jLgQ016934@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 17:45:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:45:23 splunk3 sendmail[25349]: n320jLWZ025348: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:45:48 splunk3 sendmail[25467]: n320jmL9025467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:45:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:46:07 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:46:48 splunk3 sendmail[25709]: n320kmPR025709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:47:48 splunk3 sendmail[25950]: n320lmjG025950: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:48:48 splunk3 sendmail[26186]: n320mm8C026186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:49:48 splunk3 sendmail[26424]: n320nmbf026424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:50:22 splunk3 sendmail[26559]: n320oLLj026559: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020050.n320oLnT017546@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:50:22 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46616
|
|
Apr 1 17:50:22 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:50:22 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:50:22 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:50:22 splunk3 spamd[22930]: spamd: processing message <200904020050.n320oLnT017546@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:50:24 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 17:50:24 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46616,mid=<200904020050.n320oLnT017546@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 17:50:24 splunk3 sendmail[26560]: n320oLLj026559: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:50:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:50:48 splunk3 sendmail[26681]: n320omJ5026681: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:50:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:51:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:51:48 splunk3 sendmail[26928]: n320pmCq026928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:52:48 splunk3 sendmail[27161]: n320qmdx027161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:53:48 splunk3 sendmail[27405]: n320rmuP027405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:54:48 splunk3 sendmail[27639]: n320smE7027639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:55:22 splunk3 sendmail[27792]: n320tMRb027792: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020055.n320tMRS018152@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 17:55:22 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46671
|
|
Apr 1 17:55:22 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 17:55:22 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 17:55:22 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 17:55:22 splunk3 spamd[22930]: spamd: processing message <200904020055.n320tMRS018152@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 17:55:24 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 17:55:24 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46671,mid=<200904020055.n320tMRS018152@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 17:55:24 splunk3 sendmail[27793]: n320tMRb027792: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 17:55:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 17:55:48 splunk3 sendmail[27895]: n320tmuG027895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:55:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 17:56:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 17:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 17:56:48 splunk3 sendmail[28139]: n320umYA028139: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:57:48 splunk3 sendmail[28379]: n320vmiw028379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:58:48 splunk3 sendmail[28613]: n320wmdc028613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 17:59:48 splunk3 sendmail[28849]: n320xmIO028849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:00:04 splunk3 sendmail[28977]: n32104gi028977: from=root, size=291, class=0, nrcpts=1, msgid=<200904020100.n32104gi028977@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 18:00:04 splunk3 sendmail[28981]: n32104tG028981: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020100.n32104gi028977@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 18:00:04 splunk3 sendmail[28977]: n32104gi028977: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32104tG028981 Message accepted for delivery)
|
|
Apr 1 18:00:05 splunk3 sendmail[28982]: n32104tG028981: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:00:20 splunk3 sendmail[29053]: n3210Jln029053: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904020100.n3210Jln029053@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 18:00:20 splunk3 sendmail[29055]: n3210Jln029053: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 18:00:20 splunk3 sendmail[29055]: n3210Jln029053: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 18:00:20 splunk3 sendmail[29055]: n3210Jln029053: n3210Kln029055: postmaster notify: User unknown
|
|
Apr 1 18:00:21 splunk3 sendmail[29055]: n3210Kln029055: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:00:23 splunk3 sendmail[29086]: n3210NMV029086: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020100.n3210NrB018791@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:00:23 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46736
|
|
Apr 1 18:00:23 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:00:23 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 18:00:23 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 18:00:23 splunk3 sendmail[29087]: n3210NMV029086: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:00:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:00:48 splunk3 sendmail[29188]: n3210mRv029188: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:00:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:01:04 splunk3 sendmail[29242]: n321112q029242: from=root, size=443, class=0, nrcpts=1, msgid=<200904020101.n321112q029242@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 18:01:04 splunk3 sendmail[29266]: n32114n8029266: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020101.n321112q029242@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 18:01:04 splunk3 sendmail[29242]: n321112q029242: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32114n8029266 Message accepted for delivery)
|
|
Apr 1 18:01:06 splunk3 sendmail[29267]: n32114n8029266: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:01:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:01:48 splunk3 sendmail[29447]: n3211mbM029447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:02:48 splunk3 sendmail[29684]: n3212mRh029684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:03:48 splunk3 sendmail[29920]: n3213mgP029920: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:04:48 splunk3 sendmail[30155]: n3214mlF030155: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:05:23 splunk3 sendmail[30303]: n3215NAf030303: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020105.n3215NhZ019469@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:05:23 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46793
|
|
Apr 1 18:05:23 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:05:23 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 18:05:23 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 18:05:23 splunk3 sendmail[30304]: n3215NAf030303: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:05:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:05:48 splunk3 sendmail[30409]: n3215mx6030409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:05:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:06:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:06:48 splunk3 sendmail[30649]: n3216mvh030649: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:07:48 splunk3 sendmail[30889]: n3217mOm030889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:08:48 splunk3 sendmail[31128]: n3218mVf031128: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:09:48 splunk3 sendmail[31368]: n3219mIq031368: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:10:02 splunk3 sendmail[31508]: n321A2qY031508: from=root, size=292, class=0, nrcpts=1, msgid=<200904020110.n321A2qY031508@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 18:10:02 splunk3 sendmail[31513]: n321A2a7031513: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020110.n321A2qY031508@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 18:10:02 splunk3 sendmail[31508]: n321A2qY031508: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n321A2a7031513 Message accepted for delivery)
|
|
Apr 1 18:10:03 splunk3 sendmail[31514]: n321A2a7031513: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:10:24 splunk3 sendmail[31626]: n321AO2n031626: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020110.n321AOH6020083@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:10:24 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46849
|
|
Apr 1 18:10:24 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:10:24 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:10:24 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:10:24 splunk3 spamd[22930]: spamd: processing message <200904020110.n321AOH6020083@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:10:26 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 18:10:26 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46849,mid=<200904020110.n321AOH6020083@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:10:26 splunk3 sendmail[31627]: n321AO2n031626: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:10:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:10:48 splunk3 sendmail[31727]: n321AmCu031727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:10:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:11:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 18:11:48 splunk3 sendmail[31977]: n321BmDm031977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:12:48 splunk3 sendmail[32213]: n321CmAQ032213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:13:48 splunk3 sendmail[32450]: n321DmW1032450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:14:48 splunk3 sendmail[32685]: n321EmQe032685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:15:25 splunk3 sendmail[368]: n321FOaH000368: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020115.n321FOgc020877@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:15:25 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46906
|
|
Apr 1 18:15:25 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:15:25 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:15:25 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:15:25 splunk3 spamd[22930]: spamd: processing message <200904020115.n321FOgc020877@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:15:27 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 18:15:27 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46906,mid=<200904020115.n321FOgc020877@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:15:27 splunk3 sendmail[369]: n321FOaH000368: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:15:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:15:48 splunk3 sendmail[470]: n321FmEI000470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:15:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:16:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:16:48 splunk3 sendmail[712]: n321Gmem000712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:17:48 splunk3 sendmail[951]: n321Hm3t000951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:18:48 splunk3 sendmail[1186]: n321ImAZ001186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:19:48 splunk3 sendmail[1426]: n321Jm0o001426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:20:25 splunk3 sendmail[1578]: n321KPmr001578: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020120.n321KPjd021515@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:20:25 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46961
|
|
Apr 1 18:20:25 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:20:25 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:20:25 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:20:25 splunk3 spamd[22930]: spamd: processing message <200904020120.n321KPjd021515@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:20:28 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 18:20:28 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46961,mid=<200904020120.n321KPjd021515@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:20:28 splunk3 sendmail[1579]: n321KPmr001578: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:20:48 splunk3 sendmail[1682]: n321Kma5001682: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:20:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:21:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:21:48 splunk3 sendmail[1930]: n321LmJE001930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:22:48 splunk3 sendmail[2167]: n321MmU1002167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:23:48 splunk3 sendmail[2411]: n321NmNs002411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:24:48 splunk3 sendmail[2651]: n321OmRb002651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:25:28 splunk3 sendmail[2830]: n321PSho002830: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020125.n321PQhn022123@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:25:28 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47017
|
|
Apr 1 18:25:28 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:25:28 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:25:28 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:25:28 splunk3 spamd[22930]: spamd: processing message <200904020125.n321PQhn022123@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:25:32 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1308 bytes.
|
|
Apr 1 18:25:32 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47017,mid=<200904020125.n321PQhn022123@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:25:32 splunk3 sendmail[2831]: n321PSho002830: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:25:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:25:48 splunk3 sendmail[2917]: n321Pmwt002917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:25:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:26:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 18:26:48 splunk3 sendmail[3171]: n321Qm50003171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:27:48 splunk3 sendmail[3409]: n321RmBX003409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:28:48 splunk3 sendmail[3664]: n321SmfK003664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:29:49 splunk3 sendmail[3912]: n321Tnc7003912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:30:29 splunk3 sendmail[4093]: n321US86004093: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020130.n321USjP022749@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:30:29 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47074
|
|
Apr 1 18:30:29 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:30:29 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:30:29 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:30:29 splunk3 spamd[22930]: spamd: processing message <200904020130.n321USjP022749@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:30:32 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 3.2 seconds, 1308 bytes.
|
|
Apr 1 18:30:32 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=3.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47074,mid=<200904020130.n321USjP022749@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:30:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:30:32 splunk3 sendmail[4094]: n321US86004093: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:30:49 splunk3 sendmail[4181]: n321UnQI004181: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:30:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:31:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:31:49 splunk3 sendmail[4442]: n321VnZo004442: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:32:49 splunk3 sendmail[4681]: n321WnWs004681: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:33:49 splunk3 sendmail[4927]: n321Xnvx004927: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:34:49 splunk3 sendmail[5197]: n321YneY005197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:35:29 splunk3 sendmail[5370]: n321ZTsr005370: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020135.n321ZT4A023546@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:35:29 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47129
|
|
Apr 1 18:35:29 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:35:29 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:35:29 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:35:29 splunk3 spamd[22930]: spamd: processing message <200904020135.n321ZT4A023546@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:35:31 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 18:35:31 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47129,mid=<200904020135.n321ZT4A023546@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:35:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:35:31 splunk3 sendmail[5371]: n321ZTsr005370: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:35:49 splunk3 sendmail[5456]: n321Znke005456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:35:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:36:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:36:49 splunk3 sendmail[5699]: n321andM005699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:37:49 splunk3 sendmail[5939]: n321bn8f005939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:38:49 splunk3 sendmail[6179]: n321cnv7006179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:39:49 splunk3 sendmail[6419]: n321dnBN006419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:40:29 splunk3 sendmail[6591]: n321eTLE006591: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020140.n321eTvP024156@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:40:30 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47185
|
|
Apr 1 18:40:30 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:40:30 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:40:30 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:40:30 splunk3 spamd[22930]: spamd: processing message <200904020140.n321eTvP024156@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:40:32 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 18:40:32 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47185,mid=<200904020140.n321eTvP024156@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:40:32 splunk3 sendmail[6592]: n321eTLE006591: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:40:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:40:49 splunk3 sendmail[6675]: n321enXO006675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:40:55 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:41:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 18:41:49 splunk3 sendmail[6921]: n321fnBY006921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:42:49 splunk3 sendmail[7157]: n321gnls007157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:43:49 splunk3 sendmail[7395]: n321hnNB007395: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:44:49 splunk3 sendmail[7639]: n321inM9007639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:45:30 splunk3 sendmail[7809]: n321jUmi007809: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020145.n321jUtF024790@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:45:30 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47241
|
|
Apr 1 18:45:30 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:45:30 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:45:30 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:45:30 splunk3 spamd[22930]: spamd: processing message <200904020145.n321jUtF024790@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:45:32 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 18:45:32 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47241,mid=<200904020145.n321jUtF024790@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:45:32 splunk3 sendmail[7810]: n321jUmi007809: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:45:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:45:49 splunk3 sendmail[7891]: n321jnC4007891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:45:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:46:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:46:49 splunk3 sendmail[8135]: n321knwE008135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:47:49 splunk3 sendmail[8375]: n321ln7w008375: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:48:49 splunk3 sendmail[8606]: n321mnRw008606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:49:49 splunk3 sendmail[8844]: n321nn80008844: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:50:00 splunk3 sendmail[8884]: n321o0LR008884: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020150.n321o0FS025307@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:50:00 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47285
|
|
Apr 1 18:50:00 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:50:00 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:50:00 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:50:00 splunk3 spamd[22930]: spamd: processing message <200904020150.n321o0FS025307@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:50:02 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 18:50:02 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47285,mid=<200904020150.n321o0FS025307@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:50:02 splunk3 sendmail[8885]: n321o0LR008884: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:50:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:50:49 splunk3 sendmail[9100]: n321onBm009100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:50:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:51:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:51:49 splunk3 sendmail[9347]: n321pn6t009347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:52:49 splunk3 sendmail[9593]: n321qnQR009593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:53:49 splunk3 sendmail[9838]: n321rn9E009838: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:54:49 splunk3 sendmail[10072]: n321snY7010072: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:55:01 splunk3 sendmail[10114]: n321t14Y010114: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020155.n321t17T025915@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 18:55:01 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47341
|
|
Apr 1 18:55:01 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 18:55:01 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 18:55:01 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 18:55:01 splunk3 spamd[22930]: spamd: processing message <200904020155.n321t17T025915@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 18:55:03 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 18:55:03 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47341,mid=<200904020155.n321t17T025915@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 18:55:03 splunk3 sendmail[10115]: n321t14Y010114: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 18:55:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 18:55:49 splunk3 sendmail[10325]: n321tnHK010325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:55:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 18:56:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 18:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 18:56:49 splunk3 sendmail[10570]: n321un0P010570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:57:49 splunk3 sendmail[10810]: n321vnQG010810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:58:49 splunk3 sendmail[11046]: n321wna7011046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 18:59:49 splunk3 sendmail[11284]: n321xniG011284: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:00:03 splunk3 sendmail[11402]: n32203qg011402: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020200.n32201Cr026575@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:00:03 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47397
|
|
Apr 1 19:00:03 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:00:03 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 19:00:03 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 19:00:03 splunk3 sendmail[11403]: n32203qg011402: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:00:04 splunk3 sendmail[11415]: n32204ua011415: from=root, size=291, class=0, nrcpts=1, msgid=<200904020200.n32204ua011415@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 19:00:04 splunk3 sendmail[11419]: n32204Gq011419: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020200.n32204ua011415@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 19:00:04 splunk3 sendmail[11415]: n32204ua011415: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32204Gq011419 Message accepted for delivery)
|
|
Apr 1 19:00:05 splunk3 sendmail[11420]: n32204Gq011419: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:00:25 splunk3 sendmail[11511]: n3220PUv011511: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904020200.n3220PUv011511@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 19:00:25 splunk3 sendmail[11513]: n3220PUv011511: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 19:00:25 splunk3 sendmail[11513]: n3220PUv011511: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 19:00:25 splunk3 sendmail[11513]: n3220PUv011511: n3220PUv011513: postmaster notify: User unknown
|
|
Apr 1 19:00:27 splunk3 sendmail[11513]: n3220PUv011513: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:00:49 splunk3 sendmail[11623]: n3220nW4011623: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:00:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:01:04 splunk3 sendmail[11674]: n32211uM011674: from=root, size=443, class=0, nrcpts=1, msgid=<200904020201.n32211uM011674@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 19:01:04 splunk3 sendmail[11698]: n32214PY011698: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020201.n32211uM011674@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 19:01:04 splunk3 sendmail[11674]: n32211uM011674: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32214PY011698 Message accepted for delivery)
|
|
Apr 1 19:01:06 splunk3 sendmail[11699]: n32214PY011698: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:01:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:01:49 splunk3 sendmail[11883]: n3221nDu011883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:02:49 splunk3 sendmail[12118]: n3222nTK012118: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:03:49 splunk3 sendmail[12355]: n3223nWe012355: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:04:49 splunk3 sendmail[12590]: n3224nXC012590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:05:03 splunk3 sendmail[12655]: n32253es012655: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020205.n322532b027284@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:05:03 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47462
|
|
Apr 1 19:05:03 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:05:03 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 19:05:03 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 19:05:03 splunk3 sendmail[12656]: n32253es012655: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:05:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:05:49 splunk3 sendmail[12845]: n3225nKY012845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:05:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:06:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:06:49 splunk3 sendmail[13086]: n3226ngG013086: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:07:49 splunk3 sendmail[13363]: n3227n33013363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:08:49 splunk3 sendmail[13603]: n3228ntA013603: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:09:49 splunk3 sendmail[13841]: n3229nsK013841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:10:03 splunk3 sendmail[14001]: n322A3Eu014001: from=root, size=292, class=0, nrcpts=1, msgid=<200904020210.n322A3Eu014001@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 19:10:03 splunk3 sendmail[14006]: n322A3l9014006: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020210.n322A3Eu014001@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 19:10:03 splunk3 sendmail[14001]: n322A3Eu014001: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n322A3l9014006 Message accepted for delivery)
|
|
Apr 1 19:10:04 splunk3 sendmail[14007]: n322A3l9014006: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:10:04 splunk3 sendmail[14011]: n322A4n0014011: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020210.n322A3FQ027895@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:10:04 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47518
|
|
Apr 1 19:10:04 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:10:04 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:10:04 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:10:04 splunk3 spamd[22930]: spamd: processing message <200904020210.n322A3FQ027895@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:10:06 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 1 19:10:06 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47518,mid=<200904020210.n322A3FQ027895@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 19:10:06 splunk3 sendmail[14012]: n322A4n0014011: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:10:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:10:49 splunk3 sendmail[14200]: n322An8A014200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:10:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:11:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 19:11:49 splunk3 sendmail[14449]: n322Bnf1014449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:12:49 splunk3 sendmail[14686]: n322CnAR014686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:13:49 splunk3 sendmail[14924]: n322Dn5p014924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:14:49 splunk3 sendmail[15161]: n322Enlv015161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:15:05 splunk3 sendmail[15225]: n322F5Ml015225: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020215.n322F4Wt028695@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:15:05 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47575
|
|
Apr 1 19:15:05 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:15:05 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:15:05 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:15:05 splunk3 spamd[22930]: spamd: processing message <200904020215.n322F4Wt028695@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:15:07 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 19:15:07 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47575,mid=<200904020215.n322F4Wt028695@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 19:15:07 splunk3 sendmail[15228]: n322F5Ml015225: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:15:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:15:49 splunk3 sendmail[15415]: n322FnF5015415: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:15:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:16:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:16:49 splunk3 sendmail[15655]: n322Gn7u015655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:17:49 splunk3 sendmail[15895]: n322HnDD015895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:18:49 splunk3 sendmail[16130]: n322InIH016130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:19:49 splunk3 sendmail[16370]: n322Jn8M016370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:20:05 splunk3 sendmail[16437]: n322K5dU016437: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020220.n322K5qo029326@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:20:05 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47631
|
|
Apr 1 19:20:05 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:20:05 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:20:05 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:20:05 splunk3 spamd[22930]: spamd: processing message <200904020220.n322K5qo029326@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:20:07 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 1 19:20:07 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47631,mid=<200904020220.n322K5qo029326@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 19:20:07 splunk3 sendmail[16438]: n322K5dU016437: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:20:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:20:49 splunk3 sendmail[16625]: n322KneG016625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:20:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:21:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:21:49 splunk3 sendmail[16873]: n322LncU016873: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:22:49 splunk3 sendmail[17109]: n322Mnv9017109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:23:49 splunk3 sendmail[17350]: n322NntJ017350: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:24:49 splunk3 sendmail[17585]: n322Ono9017585: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:25:06 splunk3 sendmail[17651]: n322P68Z017651: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020225.n322P5jC029934@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:25:06 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47686
|
|
Apr 1 19:25:06 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:25:06 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:25:06 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:25:06 splunk3 spamd[22930]: spamd: processing message <200904020225.n322P5jC029934@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:25:08 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 19:25:08 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47686,mid=<200904020225.n322P5jC029934@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 19:25:08 splunk3 sendmail[17652]: n322P68Z017651: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:25:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:25:49 splunk3 sendmail[17839]: n322Pnt7017839: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:25:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:26:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 19:26:49 splunk3 sendmail[18085]: n322QnJT018085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:27:49 splunk3 sendmail[18323]: n322RnR7018323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:28:49 splunk3 sendmail[18559]: n322SnEC018559: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:29:49 splunk3 sendmail[18798]: n322Tn0N018798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:30:06 splunk3 sendmail[18880]: n322U6lf018880: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020230.n322U6WW030555@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:30:06 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47743
|
|
Apr 1 19:30:06 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:30:06 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:30:06 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:30:06 splunk3 spamd[22930]: spamd: processing message <200904020230.n322U6WW030555@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:30:08 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 19:30:08 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47743,mid=<200904020230.n322U6WW030555@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 19:30:08 splunk3 sendmail[18881]: n322U6lf018880: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:30:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:30:49 splunk3 sendmail[19052]: n322UnuS019052: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:30:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:31:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:31:49 splunk3 sendmail[19300]: n322VnnI019300: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:32:49 splunk3 sendmail[19537]: n322WnSh019537: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:33:49 splunk3 sendmail[19777]: n322Xnae019777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:34:49 splunk3 sendmail[20011]: n322YnMJ020011: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:35:07 splunk3 sendmail[20095]: n322Z7Hh020095: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020235.n322Z6VJ031302@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:35:07 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47798
|
|
Apr 1 19:35:07 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:35:07 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:35:07 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:35:07 splunk3 spamd[22930]: spamd: processing message <200904020235.n322Z6VJ031302@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:35:09 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 19:35:09 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47798,mid=<200904020235.n322Z6VJ031302@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 19:35:09 splunk3 sendmail[20096]: n322Z7Hh020095: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:35:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:35:49 splunk3 sendmail[20267]: n322Znip020267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:35:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:36:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:36:49 splunk3 sendmail[20509]: n322an3K020509: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:37:49 splunk3 sendmail[20747]: n322bnE2020747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:38:49 splunk3 sendmail[20986]: n322cnog020986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:39:49 splunk3 sendmail[21225]: n322dnb9021225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:40:08 splunk3 sendmail[21310]: n322e8an021310: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020240.n322e75O031934@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:40:08 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47854
|
|
Apr 1 19:40:08 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:40:08 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:40:08 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:40:08 splunk3 spamd[22930]: spamd: processing message <200904020240.n322e75O031934@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:40:10 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1308 bytes.
|
|
Apr 1 19:40:10 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47854,mid=<200904020240.n322e75O031934@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 19:40:10 splunk3 sendmail[21311]: n322e8an021310: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:40:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:40:49 splunk3 sendmail[21481]: n322enpd021481: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:40:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:41:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 19:41:49 splunk3 sendmail[21729]: n322fnj6021729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:42:49 splunk3 sendmail[21966]: n322gno3021966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:43:49 splunk3 sendmail[22205]: n322hn9u022205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:44:49 splunk3 sendmail[22439]: n322indK022439: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:45:08 splunk3 sendmail[22521]: n322j8FP022521: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020245.n322j8MW032546@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:45:08 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47910
|
|
Apr 1 19:45:08 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:45:08 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:45:08 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:45:08 splunk3 spamd[22930]: spamd: processing message <200904020245.n322j8MW032546@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:45:10 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 19:45:10 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47910,mid=<200904020245.n322j8MW032546@virt2.int.splunk.com>,bayes=0.112677427348583,autolearn=no
|
|
Apr 1 19:45:10 splunk3 sendmail[22522]: n322j8FP022521: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:45:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:45:49 splunk3 sendmail[22693]: n322jna5022693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:45:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:46:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:46:49 splunk3 sendmail[22937]: n322kn3g022937: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:47:49 splunk3 sendmail[23178]: n322lnlb023178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:48:49 splunk3 sendmail[23413]: n322mnJ6023413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:49:49 splunk3 sendmail[23651]: n322nnx2023651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:50:09 splunk3 sendmail[23740]: n322o9Nc023740: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904020250.n322o8lT000689@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:50:09 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47966
|
|
Apr 1 19:50:09 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:50:09 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:50:09 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:50:09 splunk3 spamd[22930]: spamd: processing message <200904020250.n322o8lT000689@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:50:11 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1302 bytes.
|
|
Apr 1 19:50:11 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47966,mid=<200904020250.n322o8lT000689@virt2.int.splunk.com>,bayes=0.0665926964172617,autolearn=no
|
|
Apr 1 19:50:11 splunk3 sendmail[23741]: n322o9Nc023740: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:50:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:50:49 splunk3 sendmail[23911]: n322onDX023911: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:50:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:51:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:51:49 splunk3 sendmail[24156]: n322pne1024156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:52:49 splunk3 sendmail[24393]: n322qnh7024393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:53:49 splunk3 sendmail[24636]: n322rnee024636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:54:49 splunk3 sendmail[24870]: n322snsD024870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:55:09 splunk3 sendmail[24967]: n322t9TM024967: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020255.n322t93d001308@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 19:55:09 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48029
|
|
Apr 1 19:55:09 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 19:55:09 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 19:55:09 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 19:55:09 splunk3 spamd[22930]: spamd: processing message <200904020255.n322t93d001308@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 19:55:11 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1305 bytes.
|
|
Apr 1 19:55:11 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48029,mid=<200904020255.n322t93d001308@virt2.int.splunk.com>,bayes=0.169676157471126,autolearn=no
|
|
Apr 1 19:55:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 19:55:11 splunk3 sendmail[24968]: n322t9TM024967: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 19:55:49 splunk3 sendmail[25124]: n322tnED025124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:55:54 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 19:56:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 19:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 19:56:49 splunk3 sendmail[25370]: n322unof025370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:57:49 splunk3 sendmail[25609]: n322vn4W025609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:58:49 splunk3 sendmail[25843]: n322wngu025843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 19:59:49 splunk3 sendmail[26082]: n322xnRM026082: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:00:01 splunk3 sendmail[26153]: n32301Qp026153: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904020300.n32301Qp026153@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 20:00:01 splunk3 sendmail[26155]: n32301Qp026153: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 20:00:01 splunk3 sendmail[26155]: n32301Qp026153: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 20:00:01 splunk3 sendmail[26155]: n32301Qp026153: n32301Qp026155: postmaster notify: User unknown
|
|
Apr 1 20:00:02 splunk3 sendmail[26155]: n32301Qp026155: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:00:04 splunk3 sendmail[26238]: n32304gc026238: from=root, size=291, class=0, nrcpts=1, msgid=<200904020300.n32304gc026238@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 20:00:04 splunk3 sendmail[26242]: n32304kV026242: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020300.n32304gc026238@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 20:00:04 splunk3 sendmail[26238]: n32304gc026238: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32304kV026242 Message accepted for delivery)
|
|
Apr 1 20:00:06 splunk3 sendmail[26243]: n32304kV026242: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:00:10 splunk3 sendmail[26264]: n3230Aw5026264: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020300.n32309Yr001969@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:00:10 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48094
|
|
Apr 1 20:00:10 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:00:10 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 20:00:10 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 20:00:10 splunk3 sendmail[26265]: n3230Aw5026264: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:00:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:00:49 splunk3 sendmail[26422]: n3230nG4026422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:00:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:01:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:01:12 splunk3 sendmail[26499]: n32312KZ026499: from=root, size=443, class=0, nrcpts=1, msgid=<200904020301.n32312KZ026499@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 20:01:12 splunk3 sendmail[26542]: n3231C0X026542: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020301.n32312KZ026499@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 20:01:12 splunk3 sendmail[26499]: n32312KZ026499: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3231C0X026542 Message accepted for delivery)
|
|
Apr 1 20:01:13 splunk3 sendmail[26543]: n3231C0X026542: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:01:49 splunk3 sendmail[26684]: n3231nYd026684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:02:49 splunk3 sendmail[26919]: n3232nrD026919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:03:49 splunk3 sendmail[27159]: n3233nbN027159: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:04:49 splunk3 sendmail[27393]: n3234nQI027393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:05:11 splunk3 sendmail[27506]: n3235BOB027506: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020305.n3235BHM002663@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:05:11 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48151
|
|
Apr 1 20:05:11 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:05:11 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 20:05:11 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 20:05:11 splunk3 sendmail[27507]: n3235BOB027506: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:05:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:05:49 splunk3 sendmail[27646]: n3235nRQ027646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:05:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:06:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:06:49 splunk3 sendmail[27888]: n3236nM6027888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:07:49 splunk3 sendmail[28128]: n3237nnN028128: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:08:49 splunk3 sendmail[28369]: n3238ngp028369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:09:31 splunk3 sendmail[28528]: n3239SwB028528: from=<spamme@splunkit.com>, size=2753, class=0, nrcpts=1, msgid=<200904020309.n3239SwB028528@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=78-105-7-96.zone3.bethere.co.uk [78.105.7.96]
|
|
Apr 1 20:09:31 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48193
|
|
Apr 1 20:09:31 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:09:31 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 20:09:31 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 20:09:31 splunk3 sendmail[28552]: n3239SwB028528: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:02, xdelay=00:00:00, mailer=local, pri=33087, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:09:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:09:49 splunk3 sendmail[28613]: n3239nr6028613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:10:02 splunk3 sendmail[28782]: n323A2Di028782: from=root, size=292, class=0, nrcpts=1, msgid=<200904020310.n323A2Di028782@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 20:10:02 splunk3 sendmail[28787]: n323A2GK028787: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020310.n323A2Di028782@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 20:10:02 splunk3 sendmail[28782]: n323A2Di028782: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n323A2GK028787 Message accepted for delivery)
|
|
Apr 1 20:10:03 splunk3 sendmail[28788]: n323A2GK028787: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:10:12 splunk3 sendmail[28830]: n323AC39028830: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020310.n323ACd5003282@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:10:12 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48208
|
|
Apr 1 20:10:12 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:10:12 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:10:12 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:10:12 splunk3 spamd[22930]: spamd: processing message <200904020310.n323ACd5003282@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:10:14 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 1 20:10:14 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48208,mid=<200904020310.n323ACd5003282@virt2.int.splunk.com>,bayes=0.169676157471126,autolearn=no
|
|
Apr 1 20:10:14 splunk3 sendmail[28831]: n323AC39028830: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:10:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:10:49 splunk3 sendmail[28972]: n323Anc0028972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:10:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:11:06 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 20:11:49 splunk3 sendmail[29220]: n323Bndx029220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:12:49 splunk3 sendmail[29455]: n323CnGg029455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:13:49 splunk3 sendmail[29693]: n323DnI1029693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:14:49 splunk3 sendmail[29929]: n323En8w029929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:15:12 splunk3 sendmail[30041]: n323FCvM030041: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020315.n323FCeG004081@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:15:12 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48265
|
|
Apr 1 20:15:12 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:15:12 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:15:12 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:15:12 splunk3 spamd[22930]: spamd: processing message <200904020315.n323FCeG004081@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:15:14 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 20:15:14 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48265,mid=<200904020315.n323FCeG004081@virt2.int.splunk.com>,bayes=0.169676157471126,autolearn=no
|
|
Apr 1 20:15:14 splunk3 sendmail[30042]: n323FCvM030041: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:15:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:15:49 splunk3 sendmail[30185]: n323FnCF030185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:15:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:16:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:16:49 splunk3 sendmail[30426]: n323GnOD030426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:17:49 splunk3 sendmail[30668]: n323HnBZ030668: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:18:49 splunk3 sendmail[30902]: n323Inmm030902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:19:49 splunk3 sendmail[31140]: n323JnSj031140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:20:13 splunk3 sendmail[31256]: n323KDeN031256: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020320.n323KDje004722@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:20:13 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48320
|
|
Apr 1 20:20:13 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:20:13 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:20:13 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:20:13 splunk3 spamd[22930]: spamd: processing message <200904020320.n323KDje004722@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:20:15 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 20:20:15 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48320,mid=<200904020320.n323KDje004722@virt2.int.splunk.com>,bayes=0.169676157471126,autolearn=no
|
|
Apr 1 20:20:15 splunk3 sendmail[31257]: n323KDeN031256: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:20:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:20:49 splunk3 sendmail[31396]: n323KnGA031396: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:20:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:21:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:21:49 splunk3 sendmail[31643]: n323LnfT031643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:22:35 splunk3 sendmail[17052]: n322MXWC017052: SYSERR(root): collect: read timeout on connection from ABTS-North-Dynamic-216.37.162.122.airtelbroadband.in, from=<fqkcyci@blondesydneyescorts.com>
|
|
Apr 1 20:22:35 splunk3 sendmail[17052]: n322MXWC017052: from=<fqkcyci@blondesydneyescorts.com>, size=0, class=0, nrcpts=1, proto=ESMTP, daemon=MTA, relay=ABTS-North-Dynamic-216.37.162.122.airtelbroadband.in [122.162.37.216] (may be forged)
|
|
Apr 1 20:22:49 splunk3 sendmail[31880]: n323MnQs031880: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:23:49 splunk3 sendmail[32123]: n323Nn07032123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:24:49 splunk3 sendmail[32360]: n323OnvX032360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:25:14 splunk3 sendmail[32473]: n323PERS032473: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020325.n323PDSZ005333@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:25:14 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48376
|
|
Apr 1 20:25:14 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:25:14 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:25:14 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:25:14 splunk3 spamd[22930]: spamd: processing message <200904020325.n323PDSZ005333@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:25:16 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1305 bytes.
|
|
Apr 1 20:25:16 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48376,mid=<200904020325.n323PDSZ005333@virt2.int.splunk.com>,bayes=0.169676157471126,autolearn=no
|
|
Apr 1 20:25:16 splunk3 sendmail[32474]: n323PERS032473: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:25:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:25:49 splunk3 sendmail[32613]: n323PnYk032613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:25:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:26:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 20:26:49 splunk3 sendmail[389]: n323Qnac000389: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:27:49 splunk3 sendmail[627]: n323Rn4p000627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:28:49 splunk3 sendmail[862]: n323Sn14000862: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:29:49 splunk3 sendmail[1103]: n323Tnkg001103: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:30:14 splunk3 sendmail[1216]: n323UEI9001216: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020330.n323UErb005955@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:30:14 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48432
|
|
Apr 1 20:30:14 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:30:14 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:30:14 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:30:14 splunk3 spamd[22930]: spamd: processing message <200904020330.n323UErb005955@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:30:16 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 1 20:30:16 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48432,mid=<200904020330.n323UErb005955@virt2.int.splunk.com>,bayes=0.169676157471126,autolearn=no
|
|
Apr 1 20:30:16 splunk3 sendmail[1217]: n323UEI9001216: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:30:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:30:49 splunk3 sendmail[1358]: n323Un93001358: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:30:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:31:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:31:49 splunk3 sendmail[1606]: n323Vna5001606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:32:49 splunk3 sendmail[1842]: n323Wnkq001842: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:33:49 splunk3 sendmail[2084]: n323Xnr6002084: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:34:15 splunk3 sendmail[2185]: n323YEF3002185: from=<spammeldung@trustedmart.de>, size=3405, class=0, nrcpts=1, msgid=<20090402013236.5174.qmail@michel>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=dsl9-137.express.oricom.ca [64.18.185.137]
|
|
Apr 1 20:34:15 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48473
|
|
Apr 1 20:34:15 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:34:15 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:34:15 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:34:15 splunk3 spamd[22930]: spamd: processing message <20090402013236.5174.qmail@michel> for spamme:501
|
|
Apr 1 20:34:17 splunk3 spamd[22930]: spamd: identified spam (31.0/5.0) for spamme:501 in 1.8 seconds, 3700 bytes.
|
|
Apr 1 20:34:17 splunk3 spamd[22930]: spamd: result: Y 30 - ADDRESS_IN_SUBJECT,BAYES_99,DATE_IN_FUTURE_12_24,FORGED_MUA_OUTLOOK,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,NO_DNS_FOR_FROM,SUBJ_HAS_UNIQ_ID,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=1.8,size=3700,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48473,mid=<20090402013236.5174.qmail@michel>,bayes=1,autolearn=spam
|
|
Apr 1 20:34:17 splunk3 sendmail[2188]: n323YEF3002185: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33604, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:34:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:34:49 splunk3 sendmail[2324]: n323Yn3C002324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:35:15 splunk3 sendmail[2438]: n323ZFuG002438: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020335.n323ZFcq006703@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:35:15 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48489
|
|
Apr 1 20:35:15 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:35:15 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:35:15 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:35:15 splunk3 spamd[22930]: spamd: processing message <200904020335.n323ZFcq006703@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:35:17 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 1 20:35:17 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48489,mid=<200904020335.n323ZFcq006703@virt2.int.splunk.com>,bayes=0.169670795291319,autolearn=no
|
|
Apr 1 20:35:17 splunk3 sendmail[2439]: n323ZFuG002438: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:35:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:35:38 splunk3 sendmail[2537]: n323ZZct002537: from=<hqkojrw@brainspinepro.com>, size=1094, class=0, nrcpts=1, msgid=<01c9b34c$78a90900$cd81fb5e@hqkojrw>, proto=ESMTP, daemon=MTA, relay=[94.251.129.205]
|
|
Apr 1 20:35:38 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48493
|
|
Apr 1 20:35:38 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:35:38 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:35:38 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:35:38 splunk3 spamd[22930]: spamd: processing message <01c9b34c$78a90900$cd81fb5e@hqkojrw> for spamme:501
|
|
Apr 1 20:35:40 splunk3 spamd[22930]: spamd: identified spam (19.9/5.0) for spamme:501 in 2.2 seconds, 1381 bytes.
|
|
Apr 1 20:35:40 splunk3 spamd[22930]: spamd: result: Y 19 - BAYES_95,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_WS_SURBL scantime=2.2,size=1381,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48493,mid=<01c9b34c$78a90900$cd81fb5e@hqkojrw>,bayes=0.973284096869702,autolearn=spam
|
|
Apr 1 20:35:40 splunk3 sendmail[2543]: n323ZZct002537: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31287, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:35:40 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:35:49 splunk3 sendmail[2588]: n323ZnT3002588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:35:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:36:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:36:49 splunk3 sendmail[2844]: n323anCw002844: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:37:49 splunk3 sendmail[3092]: n323bnuv003092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:38:49 splunk3 sendmail[3335]: n323cnNs003335: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:39:49 splunk3 sendmail[3592]: n323dnuD003592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:40:16 splunk3 sendmail[3735]: n323eGt4003735: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020340.n323eFw2007338@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:40:16 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48546
|
|
Apr 1 20:40:16 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:40:16 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:40:16 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:40:16 splunk3 spamd[22930]: spamd: processing message <200904020340.n323eFw2007338@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:40:18 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 1 20:40:18 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48546,mid=<200904020340.n323eFw2007338@virt2.int.splunk.com>,bayes=0.169661950923239,autolearn=no
|
|
Apr 1 20:40:18 splunk3 sendmail[3736]: n323eGt4003735: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:40:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:40:49 splunk3 sendmail[3857]: n323enm7003857: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:40:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:41:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 20:41:50 splunk3 sendmail[4120]: n323fo7m004120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:42:50 splunk3 sendmail[4373]: n323gohq004373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:43:50 splunk3 sendmail[4613]: n323ho2i004613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:44:50 splunk3 sendmail[4846]: n323iomC004846: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:45:16 splunk3 sendmail[4988]: n323jGjt004988: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020345.n323jGAh007949@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:45:16 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48602
|
|
Apr 1 20:45:16 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:45:16 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:45:16 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:45:16 splunk3 spamd[22930]: spamd: processing message <200904020345.n323jGAh007949@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:45:18 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1305 bytes.
|
|
Apr 1 20:45:18 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48602,mid=<200904020345.n323jGAh007949@virt2.int.splunk.com>,bayes=0.169661950923239,autolearn=no
|
|
Apr 1 20:45:18 splunk3 sendmail[4989]: n323jGjt004988: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:45:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:45:50 splunk3 sendmail[5111]: n323joiD005111: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:45:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:46:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:46:50 splunk3 sendmail[5393]: n323ko0w005393: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:47:50 splunk3 sendmail[5632]: n323lok2005632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:48:50 splunk3 sendmail[5867]: n323moRc005867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:49:50 splunk3 sendmail[6106]: n323noSQ006106: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:50:17 splunk3 sendmail[6238]: n323oH6f006238: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020350.n323oHLU008565@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:50:17 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48658
|
|
Apr 1 20:50:17 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:50:17 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:50:17 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:50:17 splunk3 spamd[22930]: spamd: processing message <200904020350.n323oHLU008565@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:50:19 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 1 20:50:19 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48658,mid=<200904020350.n323oHLU008565@virt2.int.splunk.com>,bayes=0.169661950923239,autolearn=no
|
|
Apr 1 20:50:19 splunk3 sendmail[6239]: n323oH6f006238: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:50:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:50:50 splunk3 sendmail[6363]: n323ooo9006363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:50:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:51:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:51:50 splunk3 sendmail[6609]: n323poJ9006609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:52:50 splunk3 sendmail[6845]: n323qo7j006845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:53:50 splunk3 sendmail[7089]: n323roap007089: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:54:50 splunk3 sendmail[7322]: n323sobI007322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:55:18 splunk3 sendmail[7456]: n323tI2e007456: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020355.n323tIhg009181@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 20:55:18 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48713
|
|
Apr 1 20:55:18 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 20:55:18 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 20:55:18 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 20:55:18 splunk3 spamd[22930]: spamd: processing message <200904020355.n323tIhg009181@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 20:55:20 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 1 20:55:20 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48713,mid=<200904020355.n323tIhg009181@virt2.int.splunk.com>,bayes=0.169661950923239,autolearn=no
|
|
Apr 1 20:55:20 splunk3 sendmail[7457]: n323tI2e007456: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 20:55:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 20:55:50 splunk3 sendmail[7585]: n323towm007585: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:55:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 20:56:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 20:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 20:56:50 splunk3 sendmail[7830]: n323uoOA007830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:57:50 splunk3 sendmail[8069]: n323votl008069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:58:50 splunk3 sendmail[8302]: n323woxi008302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 20:59:50 splunk3 sendmail[8543]: n323xoDF008543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:00:04 splunk3 sendmail[8669]: n32404P3008669: from=root, size=291, class=0, nrcpts=1, msgid=<200904020400.n32404P3008669@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 21:00:04 splunk3 sendmail[8673]: n32404q3008673: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020400.n32404P3008669@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 21:00:04 splunk3 sendmail[8669]: n32404P3008669: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32404q3008673 Message accepted for delivery)
|
|
Apr 1 21:00:05 splunk3 sendmail[8674]: n32404q3008673: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:00:07 splunk3 sendmail[8709]: n32407cd008709: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904020400.n32407cd008709@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 21:00:07 splunk3 sendmail[8711]: n32407cd008709: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 21:00:07 splunk3 sendmail[8711]: n32407cd008709: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 1 21:00:07 splunk3 sendmail[8711]: n32407cd008709: n32407cd008711: postmaster notify: User unknown
|
|
Apr 1 21:00:09 splunk3 sendmail[8711]: n32407cd008711: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:00:19 splunk3 sendmail[8762]: n3240ISA008762: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020400.n3240IsW009819@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:00:19 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48777
|
|
Apr 1 21:00:19 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:00:19 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 21:00:19 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 21:00:19 splunk3 sendmail[8763]: n3240ISA008762: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:00:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:00:50 splunk3 sendmail[8883]: n3240oor008883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:00:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:01:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:01:11 splunk3 sendmail[8956]: n32411NY008956: from=root, size=443, class=0, nrcpts=1, msgid=<200904020401.n32411NY008956@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 21:01:11 splunk3 sendmail[9002]: n3241BLS009002: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020401.n32411NY008956@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 21:01:11 splunk3 sendmail[8956]: n32411NY008956: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3241BLS009002 Message accepted for delivery)
|
|
Apr 1 21:01:13 splunk3 sendmail[9003]: n3241BLS009002: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:01:50 splunk3 sendmail[9141]: n3241oq4009141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:02:50 splunk3 sendmail[9376]: n3242ol6009376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:03:50 splunk3 sendmail[9625]: n3243oGW009625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:04:50 splunk3 sendmail[9860]: n3244oQ3009860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:05:19 splunk3 sendmail[9991]: n3245Jel009991: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020405.n3245Jql010496@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:05:19 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48833
|
|
Apr 1 21:05:19 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:05:19 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 21:05:19 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 21:05:19 splunk3 sendmail[9992]: n3245Jel009991: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:05:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:05:50 splunk3 sendmail[10113]: n3245okH010113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:05:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:06:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:06:50 splunk3 sendmail[10356]: n3246oSm010356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:07:50 splunk3 sendmail[10595]: n3247oEp010595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:08:50 splunk3 sendmail[10834]: n3248oWC010834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:09:50 splunk3 sendmail[11075]: n3249owr011075: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:10:03 splunk3 sendmail[11233]: n324A3Ok011233: from=root, size=292, class=0, nrcpts=1, msgid=<200904020410.n324A3Ok011233@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 21:10:03 splunk3 sendmail[11238]: n324A3Fn011238: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020410.n324A3Ok011233@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 21:10:03 splunk3 sendmail[11233]: n324A3Ok011233: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n324A3Fn011238 Message accepted for delivery)
|
|
Apr 1 21:10:04 splunk3 sendmail[11239]: n324A3Fn011238: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:10:20 splunk3 sendmail[11315]: n324AK46011315: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020410.n324AJXi011108@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:10:20 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48890
|
|
Apr 1 21:10:20 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:10:20 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:10:20 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:10:20 splunk3 spamd[22930]: spamd: processing message <200904020410.n324AJXi011108@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:10:22 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 21:10:22 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48890,mid=<200904020410.n324AJXi011108@virt2.int.splunk.com>,bayes=0.112665488954646,autolearn=no
|
|
Apr 1 21:10:22 splunk3 sendmail[11332]: n324AK46011315: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:10:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:10:50 splunk3 sendmail[11434]: n324AoCO011434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:10:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:11:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 21:11:50 splunk3 sendmail[11683]: n324BoU8011683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:12:50 splunk3 sendmail[11918]: n324CoAl011918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:13:50 splunk3 sendmail[12167]: n324DomP012167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:14:50 splunk3 sendmail[12403]: n324EonH012403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:15:20 splunk3 sendmail[12546]: n324FK4P012546: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020415.n324FKpw011905@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:15:20 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48947
|
|
Apr 1 21:15:20 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:15:20 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:15:20 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:15:20 splunk3 spamd[22930]: spamd: processing message <200904020415.n324FKpw011905@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:15:22 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 21:15:22 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48947,mid=<200904020415.n324FKpw011905@virt2.int.splunk.com>,bayes=0.112665488954646,autolearn=no
|
|
Apr 1 21:15:22 splunk3 sendmail[12547]: n324FK4P012546: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:15:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:15:50 splunk3 sendmail[12654]: n324FoPG012654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:15:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:16:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:16:50 splunk3 sendmail[12904]: n324GoQa012904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:17:50 splunk3 sendmail[13136]: n324Ho75013136: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:18:50 splunk3 sendmail[13423]: n324Io9u013423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:18:58 splunk3 sendmail[13442]: n324Iuac013442: from=<tomf@freshdrop.net>, size=5734, class=0, nrcpts=1, msgid=<181c019dbc12$74ffdced$e0836f50@freshdrop.net>, proto=ESMTP, daemon=MTA, relay=[123.169.76.15]
|
|
Apr 1 21:18:58 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48982
|
|
Apr 1 21:18:58 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:18:58 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:18:58 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:18:58 splunk3 spamd[22930]: spamd: processing message <181c019dbc12$74ffdced$e0836f50@freshdrop.net> for spamme:501
|
|
Apr 1 21:19:00 splunk3 spamd[22930]: spamd: identified spam (32.4/5.0) for spamme:501 in 2.2 seconds, 6000 bytes.
|
|
Apr 1 21:19:00 splunk3 spamd[22930]: spamd: result: Y 32 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.2,size=6000,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48982,mid=<181c019dbc12$74ffdced$e0836f50@freshdrop.net>,bayes=1,autolearn=spam
|
|
Apr 1 21:19:00 splunk3 sendmail[13448]: n324Iuac013442: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=35911, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:19:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:19:50 splunk3 sendmail[13666]: n324Jomi013666: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:20:23 splunk3 sendmail[13801]: n324KNtW013801: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020420.n324KKm2012549@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:20:23 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49003
|
|
Apr 1 21:20:23 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:20:23 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:20:23 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:20:23 splunk3 spamd[22930]: spamd: processing message <200904020420.n324KKm2012549@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:20:25 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 1 21:20:25 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49003,mid=<200904020420.n324KKm2012549@virt2.int.splunk.com>,bayes=0.112661015456111,autolearn=no
|
|
Apr 1 21:20:25 splunk3 sendmail[13802]: n324KNtW013801: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:20:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:20:50 splunk3 sendmail[13922]: n324KoZj013922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:20:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:21:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:21:50 splunk3 sendmail[14168]: n324Loel014168: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:22:50 splunk3 sendmail[14402]: n324MoYC014402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:23:50 splunk3 sendmail[14646]: n324No3u014646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:24:50 splunk3 sendmail[14881]: n324OoVf014881: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:25:24 splunk3 sendmail[15017]: n324POte015017: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020425.n324PNZ4013151@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:25:24 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49059
|
|
Apr 1 21:25:24 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:25:25 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:25:25 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:25:25 splunk3 spamd[22930]: spamd: processing message <200904020425.n324PNZ4013151@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:25:27 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 21:25:27 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49059,mid=<200904020425.n324PNZ4013151@virt2.int.splunk.com>,bayes=0.112661015456111,autolearn=no
|
|
Apr 1 21:25:27 splunk3 sendmail[15018]: n324POte015017: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:25:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:25:50 splunk3 sendmail[15136]: n324Pou0015136: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:25:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:26:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 21:26:50 splunk3 sendmail[15379]: n324Qo4d015379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:27:50 splunk3 sendmail[15620]: n324Row5015620: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:28:50 splunk3 sendmail[15854]: n324So7u015854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:28:53 splunk3 sendmail[15856]: n324SqjQ015856: from=<3BD_USRQKBmEFNNFKD9KDQSR-MNQDOKXFNNFKD.BNLRO9LLDROKTMJHS.BNL@alerts.bounces.google.com>, size=8024, class=0, nrcpts=1, msgid=<0016e643461292cc3f04668ade0d@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.184]
|
|
Apr 1 21:28:53 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49094
|
|
Apr 1 21:28:53 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:28:53 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:28:53 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:28:53 splunk3 spamd[22930]: spamd: processing message <0016e643461292cc3f04668ade0d@google.com> for spamme:501
|
|
Apr 1 21:28:56 splunk3 spamd[22930]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.8 seconds, 8454 bytes.
|
|
Apr 1 21:28:56 splunk3 spamd[22930]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.8,size=8454,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49094,mid=<0016e643461292cc3f04668ade0d@google.com>,bayes=0,autolearn=ham
|
|
Apr 1 21:28:56 splunk3 sendmail[15858]: n324SqjQ015856: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:03, mailer=local, pri=38235, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:28:56 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:29:50 splunk3 sendmail[16099]: n324ToiM016099: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:30:25 splunk3 sendmail[16253]: n324UPMa016253: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020430.n324UPxR013779@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:30:25 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49117
|
|
Apr 1 21:30:25 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:30:25 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:30:25 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:30:25 splunk3 spamd[22930]: spamd: processing message <200904020430.n324UPxR013779@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:30:27 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 1 21:30:27 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49117,mid=<200904020430.n324UPxR013779@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 21:30:27 splunk3 sendmail[16254]: n324UPMa016253: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:30:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:30:50 splunk3 sendmail[16354]: n324Uok9016354: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:30:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:31:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:31:50 splunk3 sendmail[16600]: n324Vo2Q016600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:32:50 splunk3 sendmail[16835]: n324Wo7L016835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:33:50 splunk3 sendmail[17072]: n324Xo1x017072: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:34:50 splunk3 sendmail[17307]: n324YoqO017307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:35:25 splunk3 sendmail[17457]: n324ZPJj017457: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020435.n324ZPkm014524@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:35:25 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49172
|
|
Apr 1 21:35:25 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:35:25 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:35:25 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:35:25 splunk3 spamd[22930]: spamd: processing message <200904020435.n324ZPkm014524@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:35:27 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 1 21:35:27 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49172,mid=<200904020435.n324ZPkm014524@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 21:35:27 splunk3 sendmail[17458]: n324ZPJj017457: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:35:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:35:50 splunk3 sendmail[17562]: n324ZoW7017562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:35:53 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:36:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:36:50 splunk3 sendmail[17803]: n324aon4017803: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:37:50 splunk3 sendmail[18042]: n324bo8A018042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:38:50 splunk3 sendmail[18283]: n324co7G018283: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:39:50 splunk3 sendmail[18521]: n324dorT018521: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:40:26 splunk3 sendmail[18675]: n324eQJI018675: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020440.n324ePbf015158@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:40:26 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49228
|
|
Apr 1 21:40:26 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:40:26 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:40:26 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:40:26 splunk3 spamd[22930]: spamd: processing message <200904020440.n324ePbf015158@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:40:28 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 21:40:28 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49228,mid=<200904020440.n324ePbf015158@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 21:40:28 splunk3 sendmail[18676]: n324eQJI018675: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:40:50 splunk3 sendmail[18777]: n324eoJi018777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:40:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:41:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 21:41:50 splunk3 sendmail[19027]: n324fokQ019027: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:42:50 splunk3 sendmail[19262]: n324goF7019262: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:43:50 splunk3 sendmail[19500]: n324houN019500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:44:50 splunk3 sendmail[19736]: n324ioZB019736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:45:26 splunk3 sendmail[19890]: n324jQAd019890: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020445.n324jQ0j015767@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:45:26 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49284
|
|
Apr 1 21:45:26 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:45:26 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:45:26 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:45:26 splunk3 spamd[22930]: spamd: processing message <200904020445.n324jQ0j015767@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:45:28 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 21:45:28 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49284,mid=<200904020445.n324jQ0j015767@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 21:45:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:45:28 splunk3 sendmail[19891]: n324jQAd019890: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:45:50 splunk3 sendmail[19991]: n324joW8019991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:45:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:46:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:46:50 splunk3 sendmail[20232]: n324ko1o020232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:47:50 splunk3 sendmail[20474]: n324loUh020474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:48:50 splunk3 sendmail[20710]: n324moa4020710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:49:50 splunk3 sendmail[20947]: n324noJN020947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:50:27 splunk3 sendmail[21100]: n324oQCG021100: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020450.n324oQJh016380@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:50:27 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49340
|
|
Apr 1 21:50:27 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:50:27 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:50:27 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:50:27 splunk3 spamd[22930]: spamd: processing message <200904020450.n324oQJh016380@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:50:29 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 1 21:50:29 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49340,mid=<200904020450.n324oQJh016380@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 21:50:29 splunk3 sendmail[21101]: n324oQCG021100: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:50:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:50:50 splunk3 sendmail[21206]: n324ooHv021206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:50:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:51:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:51:50 splunk3 sendmail[21449]: n324poO3021449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:52:50 splunk3 sendmail[21685]: n324qoAL021685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:53:50 splunk3 sendmail[21929]: n324roPr021929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:54:50 splunk3 sendmail[22166]: n324sotL022166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:55:27 splunk3 sendmail[22319]: n324tReZ022319: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020455.n324tRGN017009@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 21:55:27 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49395
|
|
Apr 1 21:55:27 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 21:55:27 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 21:55:27 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 21:55:27 splunk3 spamd[22930]: spamd: processing message <200904020455.n324tRGN017009@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 21:55:29 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 21:55:29 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49395,mid=<200904020455.n324tRGN017009@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 21:55:29 splunk3 sendmail[22320]: n324tReZ022319: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 21:55:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 21:55:50 splunk3 sendmail[22426]: n324toYL022426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:55:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 21:56:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 21:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 21:56:50 splunk3 sendmail[22662]: n324uofV022662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:57:50 splunk3 sendmail[22902]: n324voSr022902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:58:50 splunk3 sendmail[23139]: n324wofg023139: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 21:59:50 splunk3 sendmail[23378]: n324xoTM023378: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:00:04 splunk3 sendmail[23506]: n325040x023506: from=root, size=291, class=0, nrcpts=1, msgid=<200904020500.n325040x023506@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 22:00:05 splunk3 sendmail[23510]: n32504LH023510: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020500.n325040x023506@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 22:00:05 splunk3 sendmail[23506]: n325040x023506: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32504LH023510 Message accepted for delivery)
|
|
Apr 1 22:00:06 splunk3 sendmail[23511]: n32504LH023510: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:00:13 splunk3 sendmail[23547]: n3250DlK023547: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904020500.n3250DlK023547@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 22:00:13 splunk3 sendmail[23549]: n3250DlK023547: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 22:00:13 splunk3 sendmail[23549]: n3250DlK023547: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 1 22:00:13 splunk3 sendmail[23549]: n3250DlK023547: n3250DlK023549: postmaster notify: User unknown
|
|
Apr 1 22:00:14 splunk3 sendmail[23549]: n3250DlK023549: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:00:28 splunk3 sendmail[23618]: n3250SlL023618: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020500.n3250RVo017628@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:00:28 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49459
|
|
Apr 1 22:00:28 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:00:28 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 22:00:28 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 22:00:28 splunk3 sendmail[23619]: n3250SlL023618: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:00:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:00:50 splunk3 sendmail[23724]: n3250oAL023724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:00:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:01:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:01:07 splunk3 sendmail[23773]: n32511k5023773: from=root, size=443, class=0, nrcpts=1, msgid=<200904020501.n32511k5023773@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 22:01:07 splunk3 sendmail[23800]: n32517tU023800: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020501.n32511k5023773@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 22:01:07 splunk3 sendmail[23773]: n32511k5023773: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32517tU023800 Message accepted for delivery)
|
|
Apr 1 22:01:08 splunk3 sendmail[23801]: n32517tU023800: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:01:50 splunk3 sendmail[23978]: n3251osb023978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:02:50 splunk3 sendmail[24215]: n3252ong024215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:03:50 splunk3 sendmail[24452]: n3253o0f024452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:04:50 splunk3 sendmail[24685]: n3254oEM024685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:05:28 splunk3 sendmail[24837]: n3255SM1024837: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020505.n3255Sc7018336@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:05:28 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49515
|
|
Apr 1 22:05:28 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:05:28 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 22:05:28 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 22:05:28 splunk3 sendmail[24838]: n3255SM1024837: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:05:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:05:50 splunk3 sendmail[24942]: n3255oFm024942: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:05:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:06:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:06:50 splunk3 sendmail[25179]: n3256oub025179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:07:50 splunk3 sendmail[25417]: n3257ovC025417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:08:50 splunk3 sendmail[25658]: n3258oCJ025658: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:09:50 splunk3 sendmail[25899]: n3259oEb025899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:10:02 splunk3 sendmail[26040]: n325A2PQ026040: from=root, size=292, class=0, nrcpts=1, msgid=<200904020510.n325A2PQ026040@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 22:10:02 splunk3 sendmail[26045]: n325A2x2026045: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020510.n325A2PQ026040@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 22:10:02 splunk3 sendmail[26040]: n325A2PQ026040: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n325A2x2026045 Message accepted for delivery)
|
|
Apr 1 22:10:03 splunk3 sendmail[26046]: n325A2x2026045: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:10:29 splunk3 sendmail[26154]: n325ATh3026154: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020510.n325ATXZ018934@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:10:29 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49572
|
|
Apr 1 22:10:29 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:10:29 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:10:29 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:10:29 splunk3 spamd[22930]: spamd: processing message <200904020510.n325ATXZ018934@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:10:31 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 22:10:31 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49572,mid=<200904020510.n325ATXZ018934@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:10:31 splunk3 sendmail[26156]: n325ATh3026154: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:10:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:10:50 splunk3 sendmail[26261]: n325AoaY026261: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:10:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:11:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 22:11:50 splunk3 sendmail[26506]: n325BoIQ026506: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:12:50 splunk3 sendmail[26741]: n325CotJ026741: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:13:50 splunk3 sendmail[26980]: n325DosV026980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:14:50 splunk3 sendmail[27217]: n325EoSL027217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:15:30 splunk3 sendmail[27390]: n325FUpW027390: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020515.n325FTbE019749@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:15:30 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49629
|
|
Apr 1 22:15:30 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:15:30 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:15:30 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:15:30 splunk3 spamd[22930]: spamd: processing message <200904020515.n325FTbE019749@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:15:32 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 22:15:32 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49629,mid=<200904020515.n325FTbE019749@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:15:32 splunk3 sendmail[27391]: n325FUpW027390: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:15:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:15:50 splunk3 sendmail[27474]: n325Fo6G027474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:15:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:16:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:16:50 splunk3 sendmail[27713]: n325GoNg027713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:17:50 splunk3 sendmail[27952]: n325HoHx027952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:18:50 splunk3 sendmail[28187]: n325Ioeb028187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:19:50 splunk3 sendmail[28426]: n325Jop5028426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:20:00 splunk3 sendmail[28470]: n325K0kq028470: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020520.n325K0kV020266@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:20:00 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49672
|
|
Apr 1 22:20:00 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:20:00 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:20:00 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:20:00 splunk3 spamd[22930]: spamd: processing message <200904020520.n325K0kV020266@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:20:02 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 22:20:02 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49672,mid=<200904020520.n325K0kV020266@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:20:02 splunk3 sendmail[28471]: n325K0kq028470: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:20:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:20:50 splunk3 sendmail[28685]: n325Ko8B028685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:20:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:21:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:21:50 splunk3 sendmail[28929]: n325Lo6J028929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:22:50 splunk3 sendmail[29162]: n325Mos1029162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:23:50 splunk3 sendmail[29406]: n325NotV029406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:24:50 splunk3 sendmail[29638]: n325Oore029638: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:25:01 splunk3 sendmail[29684]: n325P1oF029684: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020525.n325P0L4020898@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:25:01 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49728
|
|
Apr 1 22:25:01 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:25:01 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:25:01 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:25:01 splunk3 spamd[22930]: spamd: processing message <200904020525.n325P0L4020898@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:25:03 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 1 22:25:03 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49728,mid=<200904020525.n325P0L4020898@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:25:03 splunk3 sendmail[29685]: n325P1oF029684: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:25:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:25:50 splunk3 sendmail[29895]: n325Poas029895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:25:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:26:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 22:26:50 splunk3 sendmail[30135]: n325QoYA030135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:27:50 splunk3 sendmail[30373]: n325Rodv030373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:28:50 splunk3 sendmail[30612]: n325SobZ030612: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:29:50 splunk3 sendmail[30851]: n325ToYO030851: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:30:01 splunk3 sendmail[30892]: n325U11w030892: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020530.n325U1Qj021557@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:30:01 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49784
|
|
Apr 1 22:30:01 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:30:01 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:30:01 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:30:01 splunk3 spamd[22930]: spamd: processing message <200904020530.n325U1Qj021557@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:30:05 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 3.5 seconds, 1308 bytes.
|
|
Apr 1 22:30:05 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=3.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49784,mid=<200904020530.n325U1Qj021557@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:30:05 splunk3 sendmail[30893]: n325U11w030892: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:30:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:30:50 splunk3 sendmail[31112]: n325UodF031112: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:30:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:31:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:31:50 splunk3 sendmail[31352]: n325VoV1031352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:32:50 splunk3 sendmail[31590]: n325Woj2031590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:33:50 splunk3 sendmail[31830]: n325XobQ031830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:34:50 splunk3 sendmail[32063]: n325Yojc032063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:35:02 splunk3 sendmail[32111]: n325Z2Tv032111: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020535.n325Z1LO022303@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:35:02 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49840
|
|
Apr 1 22:35:02 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:35:02 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:35:02 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:35:02 splunk3 spamd[22930]: spamd: processing message <200904020535.n325Z1LO022303@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:35:04 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 22:35:04 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49840,mid=<200904020535.n325Z1LO022303@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:35:04 splunk3 sendmail[32112]: n325Z2Tv032111: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:35:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:35:50 splunk3 sendmail[32322]: n325ZoKT032322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:35:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:36:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:36:50 splunk3 sendmail[32561]: n325aoMC032561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:37:50 splunk3 sendmail[333]: n325boYF000333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:38:50 splunk3 sendmail[572]: n325co1e000572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:39:50 splunk3 sendmail[810]: n325do2Z000810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:40:02 splunk3 sendmail[858]: n325e22a000858: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020540.n325e2OI022913@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:40:02 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49896
|
|
Apr 1 22:40:02 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:40:02 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:40:02 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:40:02 splunk3 spamd[22930]: spamd: processing message <200904020540.n325e2OI022913@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:40:04 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 1 22:40:04 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49896,mid=<200904020540.n325e2OI022913@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:40:04 splunk3 sendmail[859]: n325e22a000858: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:40:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:40:50 splunk3 sendmail[1070]: n325eod4001070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:40:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:41:05 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 22:41:50 splunk3 sendmail[1314]: n325fosh001314: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:42:50 splunk3 sendmail[1549]: n325goCA001549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:43:50 splunk3 sendmail[1790]: n325hov3001790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:44:50 splunk3 sendmail[2028]: n325ioLC002028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:45:03 splunk3 sendmail[2074]: n325j3n8002074: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020545.n325j35o023573@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:45:03 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49952
|
|
Apr 1 22:45:03 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:45:03 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:45:03 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:45:03 splunk3 spamd[22930]: spamd: processing message <200904020545.n325j35o023573@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:45:06 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 1 22:45:06 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49952,mid=<200904020545.n325j35o023573@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:45:06 splunk3 sendmail[2075]: n325j3n8002074: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:45:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:45:50 splunk3 sendmail[2285]: n325joTl002285: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:45:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:46:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:46:50 splunk3 sendmail[2524]: n325koTO002524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:47:50 splunk3 sendmail[2778]: n325lotR002778: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:48:50 splunk3 sendmail[3022]: n325moNn003022: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:49:50 splunk3 sendmail[3265]: n325noAl003265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:50:04 splunk3 sendmail[3314]: n325o3Z0003314: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020550.n325o3lX024192@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:50:04 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50008
|
|
Apr 1 22:50:04 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:50:04 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:50:04 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:50:04 splunk3 spamd[22930]: spamd: processing message <200904020550.n325o3lX024192@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:50:06 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 22:50:06 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50008,mid=<200904020550.n325o3lX024192@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:50:06 splunk3 sendmail[3316]: n325o3Z0003314: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:50:51 splunk3 sendmail[3527]: n325opxu003527: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:50:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:51:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:51:51 splunk3 sendmail[3798]: n325pplf003798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:52:51 splunk3 sendmail[4041]: n325qp9A004041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:53:51 splunk3 sendmail[4297]: n325rpdr004297: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:54:51 splunk3 sendmail[4540]: n325spB8004540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:55:04 splunk3 sendmail[4604]: n325t4TQ004604: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020555.n325t49x024799@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 22:55:05 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50063
|
|
Apr 1 22:55:05 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 22:55:05 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 22:55:05 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 22:55:05 splunk3 spamd[22930]: spamd: processing message <200904020555.n325t49x024799@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 22:55:07 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 22:55:07 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50063,mid=<200904020555.n325t49x024799@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 22:55:07 splunk3 sendmail[4605]: n325t4TQ004604: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 22:55:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 22:55:51 splunk3 sendmail[4798]: n325tpRi004798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:55:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 22:56:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 22:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 22:56:51 splunk3 sendmail[5047]: n325upaF005047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:57:51 splunk3 sendmail[5322]: n325vp0R005322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:58:51 splunk3 sendmail[5562]: n325wpCk005562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 22:59:51 splunk3 sendmail[5800]: n325xpDg005800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:00:04 splunk3 sendmail[5927]: n32604e6005927: from=root, size=291, class=0, nrcpts=1, msgid=<200904020600.n32604e6005927@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 23:00:04 splunk3 sendmail[5931]: n32604Vv005931: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020600.n32604e6005927@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 23:00:04 splunk3 sendmail[5927]: n32604e6005927: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32604Vv005931 Message accepted for delivery)
|
|
Apr 1 23:00:05 splunk3 sendmail[5937]: n32605SZ005937: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020600.n32605KH025442@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:00:05 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50121
|
|
Apr 1 23:00:05 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:00:05 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 23:00:05 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 23:00:05 splunk3 sendmail[5932]: n32604Vv005931: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:00:05 splunk3 sendmail[5938]: n32605SZ005937: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:00:19 splunk3 sendmail[5992]: n3260IK3005992: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904020600.n3260IK3005992@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 23:00:19 splunk3 sendmail[5994]: n3260IK3005992: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 1 23:00:19 splunk3 sendmail[5994]: n3260IK3005992: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 1 23:00:19 splunk3 sendmail[5994]: n3260IK3005992: n3260JK3005994: postmaster notify: User unknown
|
|
Apr 1 23:00:20 splunk3 sendmail[5994]: n3260JK3005994: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:00:51 splunk3 sendmail[6144]: n3260pe2006144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:00:52 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:01:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:01:08 splunk3 sendmail[6197]: n32611CO006197: from=root, size=443, class=0, nrcpts=1, msgid=<200904020601.n32611CO006197@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 23:01:08 splunk3 sendmail[6222]: n326182o006222: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020601.n32611CO006197@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 23:01:08 splunk3 sendmail[6197]: n32611CO006197: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n326182o006222 Message accepted for delivery)
|
|
Apr 1 23:01:09 splunk3 sendmail[6223]: n326182o006222: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:01:51 splunk3 sendmail[6400]: n3261p7a006400: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:02:51 splunk3 sendmail[6635]: n3262pST006635: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:03:51 splunk3 sendmail[6876]: n3263p5Q006876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:04:51 splunk3 sendmail[7111]: n3264pke007111: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:05:06 splunk3 sendmail[7175]: n32656ND007175: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020605.n32655fA026128@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:05:06 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50184
|
|
Apr 1 23:05:06 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:05:06 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 1 23:05:06 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 1 23:05:06 splunk3 sendmail[7176]: n32656ND007175: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:05:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:05:51 splunk3 sendmail[7370]: n3265p3T007370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:05:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:06:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:06:51 splunk3 sendmail[7615]: n3266pTa007615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:07:51 splunk3 sendmail[7853]: n3267pUH007853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:08:51 splunk3 sendmail[8095]: n3268pqb008095: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:09:51 splunk3 sendmail[8334]: n3269pxN008334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:10:02 splunk3 sendmail[8476]: n326A2tP008476: from=root, size=292, class=0, nrcpts=1, msgid=<200904020610.n326A2tP008476@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 1 23:10:02 splunk3 sendmail[8481]: n326A2jX008481: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020610.n326A2tP008476@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 1 23:10:02 splunk3 sendmail[8476]: n326A2tP008476: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n326A2jX008481 Message accepted for delivery)
|
|
Apr 1 23:10:03 splunk3 sendmail[8482]: n326A2jX008481: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:10:06 splunk3 sendmail[8503]: n326A6Xu008503: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020610.n326A6mp026743@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:10:06 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50241
|
|
Apr 1 23:10:06 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:10:06 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:10:06 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:10:06 splunk3 spamd[22930]: spamd: processing message <200904020610.n326A6mp026743@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:10:08 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 23:10:08 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50241,mid=<200904020610.n326A6mp026743@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:10:08 splunk3 sendmail[8504]: n326A6Xu008503: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:10:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:10:51 splunk3 sendmail[8697]: n326Ap94008697: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:10:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:11:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 23:11:51 splunk3 sendmail[8941]: n326BpuL008941: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:12:51 splunk3 sendmail[9176]: n326Cp8u009176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:13:51 splunk3 sendmail[9412]: n326Dp90009412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:14:51 splunk3 sendmail[9658]: n326Epi2009658: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:15:07 splunk3 sendmail[9724]: n326F73w009724: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020615.n326F7IK027537@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:15:07 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50298
|
|
Apr 1 23:15:07 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:15:07 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:15:07 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:15:07 splunk3 spamd[22930]: spamd: processing message <200904020615.n326F7IK027537@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:15:09 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 23:15:09 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50298,mid=<200904020615.n326F7IK027537@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:15:09 splunk3 sendmail[9725]: n326F73w009724: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:15:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:15:51 splunk3 sendmail[9917]: n326FpYk009917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:15:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:16:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:16:51 splunk3 sendmail[10153]: n326Gpf3010153: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:17:51 splunk3 sendmail[10391]: n326HpXO010391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:18:51 splunk3 sendmail[10627]: n326Ip2U010627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:19:51 splunk3 sendmail[10866]: n326JpHI010866: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:20:07 splunk3 sendmail[10932]: n326K7Jh010932: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020620.n326K7pr028169@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:20:07 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50353
|
|
Apr 1 23:20:07 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:20:07 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:20:07 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:20:07 splunk3 spamd[22930]: spamd: processing message <200904020620.n326K7pr028169@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:20:09 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 1 23:20:09 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50353,mid=<200904020620.n326K7pr028169@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:20:09 splunk3 sendmail[10933]: n326K7Jh010932: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:20:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:20:51 splunk3 sendmail[11125]: n326Kp18011125: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:20:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:21:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:21:51 splunk3 sendmail[11368]: n326LpV0011368: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:22:51 splunk3 sendmail[11604]: n326MpbX011604: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:23:51 splunk3 sendmail[11848]: n326NpTi011848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:24:51 splunk3 sendmail[12082]: n326Opp4012082: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:25:08 splunk3 sendmail[12148]: n326P8HZ012148: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020625.n326P8uD028776@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:25:08 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50409
|
|
Apr 1 23:25:08 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:25:08 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:25:08 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:25:08 splunk3 spamd[22930]: spamd: processing message <200904020625.n326P8uD028776@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:25:10 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 23:25:10 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50409,mid=<200904020625.n326P8uD028776@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:25:10 splunk3 sendmail[12165]: n326P8HZ012148: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:25:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:25:51 splunk3 sendmail[12341]: n326PpWY012341: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:25:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:26:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 23:26:51 splunk3 sendmail[12578]: n326QpiW012578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:27:51 splunk3 sendmail[12815]: n326RpVu012815: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:28:51 splunk3 sendmail[13049]: n326SpNr013049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:29:51 splunk3 sendmail[13318]: n326TpVC013318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:30:09 splunk3 sendmail[13409]: n326U9f1013409: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020630.n326U9ls029391@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:30:09 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50465
|
|
Apr 1 23:30:09 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:30:09 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:30:09 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:30:09 splunk3 spamd[22930]: spamd: processing message <200904020630.n326U9ls029391@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:30:11 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 1 23:30:11 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50465,mid=<200904020630.n326U9ls029391@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:30:11 splunk3 sendmail[13410]: n326U9f1013409: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:30:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:30:51 splunk3 sendmail[13585]: n326UpRM013585: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:30:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:31:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:31:51 splunk3 sendmail[13827]: n326Vp0m013827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:32:51 splunk3 sendmail[14063]: n326WpBJ014063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:33:51 splunk3 sendmail[14302]: n326Xp5p014302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:34:51 splunk3 sendmail[14535]: n326Ypk4014535: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:35:09 splunk3 sendmail[14618]: n326Z9uq014618: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020635.n326Z9WH030145@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:35:09 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50521
|
|
Apr 1 23:35:09 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:35:09 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:35:09 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:35:10 splunk3 spamd[22930]: spamd: processing message <200904020635.n326Z9WH030145@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:35:12 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 1 23:35:12 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50521,mid=<200904020635.n326Z9WH030145@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:35:12 splunk3 sendmail[14619]: n326Z9uq014618: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:35:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:35:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:35:51 splunk3 sendmail[14795]: n326Zpdl014795: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:36:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:36:51 splunk3 sendmail[15033]: n326apt8015033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:37:51 splunk3 sendmail[15272]: n326bprD015272: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:38:51 splunk3 sendmail[15513]: n326cpmi015513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:39:51 splunk3 sendmail[15753]: n326dpo1015753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:40:10 splunk3 sendmail[15838]: n326eAN8015838: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020640.n326eAYq030776@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:40:10 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50576
|
|
Apr 1 23:40:10 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:40:10 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:40:10 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:40:10 splunk3 spamd[22930]: spamd: processing message <200904020640.n326eAYq030776@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:40:12 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.9 seconds, 1308 bytes.
|
|
Apr 1 23:40:12 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.9,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50576,mid=<200904020640.n326eAYq030776@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:40:12 splunk3 sendmail[15840]: n326eAN8015838: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:40:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:40:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:40:51 splunk3 sendmail[16014]: n326epcY016014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:41:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 23:41:51 splunk3 sendmail[16253]: n326fpOl016253: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:42:51 splunk3 sendmail[16486]: n326gp4B016486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:43:51 splunk3 sendmail[16724]: n326hpBx016724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:44:51 splunk3 sendmail[16960]: n326ipRH016960: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:45:10 splunk3 sendmail[17043]: n326jA7L017043: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020645.n326jALc031394@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:45:11 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50633
|
|
Apr 1 23:45:11 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:45:11 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:45:11 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:45:11 splunk3 spamd[22930]: spamd: processing message <200904020645.n326jALc031394@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:45:13 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 1 23:45:13 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50633,mid=<200904020645.n326jALc031394@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:45:13 splunk3 sendmail[17044]: n326jA7L017043: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:45:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:45:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:45:51 splunk3 sendmail[17217]: n326jpVg017217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:46:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:46:51 splunk3 sendmail[17454]: n326kpEH017454: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:47:51 splunk3 sendmail[17691]: n326lpcM017691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:48:51 splunk3 sendmail[17925]: n326mp9F017925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:49:51 splunk3 sendmail[18164]: n326npTr018164: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:50:11 splunk3 sendmail[18250]: n326oBFI018250: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020650.n326oBOF032006@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:50:11 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50688
|
|
Apr 1 23:50:11 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:50:11 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:50:11 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:50:11 splunk3 spamd[22930]: spamd: processing message <200904020650.n326oBOF032006@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:50:13 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 1 23:50:13 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50688,mid=<200904020650.n326oBOF032006@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:50:13 splunk3 sendmail[18251]: n326oBFI018250: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:50:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:50:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:50:51 splunk3 sendmail[18426]: n326opCg018426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:51:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:51:51 splunk3 sendmail[18670]: n326pp2S018670: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:52:51 splunk3 sendmail[18904]: n326qpxo018904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:53:51 splunk3 sendmail[19156]: n326rpUV019156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:54:51 splunk3 sendmail[19390]: n326spCD019390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:55:12 splunk3 sendmail[19473]: n326tCGs019473: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020655.n326tBMs032611@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 1 23:55:12 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50744
|
|
Apr 1 23:55:12 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:55:12 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:55:12 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:55:12 splunk3 spamd[22930]: spamd: processing message <200904020655.n326tBMs032611@virt2.int.splunk.com> for spamme:501
|
|
Apr 1 23:55:14 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 1 23:55:14 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50744,mid=<200904020655.n326tBMs032611@virt2.int.splunk.com>,bayes=0.11269325761108,autolearn=no
|
|
Apr 1 23:55:14 splunk3 sendmail[19474]: n326tCGs019473: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:55:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:55:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 1 23:55:51 splunk3 sendmail[19646]: n326tpBW019646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:56:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 1 23:56:21 splunk3 sendmail[19767]: n326uLdZ019767: from=<3lGHUSRQKBhQ08805yu5yBDC-78By95I08805y.w86C9u66yC95E742D.w86@alerts.bounces.google.com>, size=4022, class=0, nrcpts=1, msgid=<00163698966ffa00d504668ced39@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.185]
|
|
Apr 1 23:56:21 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50763
|
|
Apr 1 23:56:21 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 1 23:56:21 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 1 23:56:21 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 1 23:56:21 splunk3 spamd[22930]: spamd: processing message <00163698966ffa00d504668ced39@google.com> for spamme:501
|
|
Apr 1 23:56:23 splunk3 spamd[22930]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.0 seconds, 4452 bytes.
|
|
Apr 1 23:56:23 splunk3 spamd[22930]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.0,size=4452,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50763,mid=<00163698966ffa00d504668ced39@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Apr 1 23:56:23 splunk3 sendmail[19768]: n326uLdZ019767: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=34233, dsn=2.0.0, stat=Sent
|
|
Apr 1 23:56:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 1 23:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 1 23:56:51 splunk3 sendmail[19893]: n326upHh019893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:57:51 splunk3 sendmail[20132]: n326vpMp020132: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:58:51 splunk3 sendmail[20368]: n326wpVI020368: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 1 23:59:51 splunk3 sendmail[20607]: n326xpnd020607: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:00:04 splunk3 sendmail[20731]: n32704Sb020731: from=root, size=291, class=0, nrcpts=1, msgid=<200904020700.n32704Sb020731@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 00:00:04 splunk3 sendmail[20735]: n327045a020735: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020700.n32704Sb020731@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 00:00:04 splunk3 sendmail[20731]: n32704Sb020731: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n327045a020735 Message accepted for delivery)
|
|
Apr 2 00:00:05 splunk3 sendmail[20736]: n327045a020735: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:00:12 splunk3 sendmail[20762]: n3270CB5020762: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904020700.n3270Cug000799@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:00:12 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50802
|
|
Apr 2 00:00:12 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:00:12 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 00:00:12 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 00:00:12 splunk3 sendmail[20763]: n3270CB5020762: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:00:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:00:24 splunk3 sendmail[20831]: n3270Oil020831: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904020700.n3270Oil020831@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 00:00:24 splunk3 sendmail[20833]: n3270Oil020831: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 00:00:24 splunk3 sendmail[20833]: n3270Oil020831: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 00:00:24 splunk3 sendmail[20833]: n3270Oil020831: n3270Oil020833: postmaster notify: User unknown
|
|
Apr 2 00:00:26 splunk3 sendmail[20833]: n3270Oil020833: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:00:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:00:51 splunk3 sendmail[20952]: n3270pif020952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:01:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:01:08 splunk3 sendmail[21002]: n32711BT021002: from=root, size=443, class=0, nrcpts=1, msgid=<200904020701.n32711BT021002@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 00:01:08 splunk3 sendmail[21043]: n32718jf021043: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020701.n32711BT021002@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 00:01:08 splunk3 sendmail[21002]: n32711BT021002: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32718jf021043 Message accepted for delivery)
|
|
Apr 2 00:01:10 splunk3 sendmail[21044]: n32718jf021043: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:01:51 splunk3 sendmail[21205]: n3271pYm021205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:02:51 splunk3 sendmail[21439]: n3272prf021439: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:03:51 splunk3 sendmail[21678]: n3273pOG021678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:04:51 splunk3 sendmail[21912]: n3274pxZ021912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:05:13 splunk3 sendmail[22013]: n3275Dvq022013: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020705.n3275D9Z001497@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:05:13 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50865
|
|
Apr 2 00:05:13 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:05:13 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 00:05:13 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 00:05:13 splunk3 sendmail[22014]: n3275Dvq022013: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:05:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:05:51 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:05:51 splunk3 sendmail[22172]: n3275paF022172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:06:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:06:51 splunk3 sendmail[22409]: n3276pCi022409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:07:51 splunk3 sendmail[22648]: n3277pp6022648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:08:51 splunk3 sendmail[22888]: n3278prn022888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:09:51 splunk3 sendmail[23128]: n3279pCs023128: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:10:03 splunk3 sendmail[23271]: n327A3hE023271: from=root, size=292, class=0, nrcpts=1, msgid=<200904020710.n327A3hE023271@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 00:10:03 splunk3 sendmail[23285]: n327A3FK023285: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020710.n327A3hE023271@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 00:10:03 splunk3 sendmail[23271]: n327A3hE023271: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n327A3FK023285 Message accepted for delivery)
|
|
Apr 2 00:10:04 splunk3 sendmail[23293]: n327A3FK023285: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:10:14 splunk3 sendmail[23333]: n327AEmv023333: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020710.n327AD9g002128@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:10:14 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50922
|
|
Apr 2 00:10:14 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:10:14 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:10:14 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:10:14 splunk3 spamd[22930]: spamd: processing message <200904020710.n327AD9g002128@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:10:16 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1305 bytes.
|
|
Apr 2 00:10:16 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50922,mid=<200904020710.n327AD9g002128@virt2.int.splunk.com>,bayes=0.169732567562019,autolearn=no
|
|
Apr 2 00:10:16 splunk3 sendmail[23334]: n327AEmv023333: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:10:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:10:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:10:51 splunk3 sendmail[23492]: n327Apgl023492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:11:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 00:11:51 splunk3 sendmail[23736]: n327BpGU023736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:12:51 splunk3 sendmail[23971]: n327CplV023971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:13:51 splunk3 sendmail[24210]: n327DpV7024210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:14:51 splunk3 sendmail[24445]: n327Ep2C024445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:15:14 splunk3 sendmail[24545]: n327FEI2024545: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020715.n327FEKF002929@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:15:14 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50978
|
|
Apr 2 00:15:14 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:15:14 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:15:14 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:15:14 splunk3 spamd[22930]: spamd: processing message <200904020715.n327FEKF002929@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:15:16 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 00:15:16 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50978,mid=<200904020715.n327FEKF002929@virt2.int.splunk.com>,bayes=0.169732567562019,autolearn=no
|
|
Apr 2 00:15:16 splunk3 sendmail[24546]: n327FEI2024545: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:15:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:15:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:15:51 splunk3 sendmail[24704]: n327FphK024704: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:16:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:16:51 splunk3 sendmail[24940]: n327GpJ6024940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:17:51 splunk3 sendmail[25178]: n327HpTZ025178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:18:51 splunk3 sendmail[25412]: n327Ip8l025412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:19:51 splunk3 sendmail[25649]: n327JpMf025649: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:20:15 splunk3 sendmail[25751]: n327KFcI025751: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020720.n327KEAK003558@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:20:15 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51034
|
|
Apr 2 00:20:15 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:20:15 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:20:15 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:20:15 splunk3 spamd[22930]: spamd: processing message <200904020720.n327KEAK003558@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:20:17 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 2 00:20:17 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51034,mid=<200904020720.n327KEAK003558@virt2.int.splunk.com>,bayes=0.169732567562019,autolearn=no
|
|
Apr 2 00:20:17 splunk3 sendmail[25752]: n327KFcI025751: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:20:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:20:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:20:51 splunk3 sendmail[25909]: n327Kpe5025909: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:21:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:21:51 splunk3 sendmail[26152]: n327LpCK026152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:22:51 splunk3 sendmail[26386]: n327Mphs026386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:23:51 splunk3 sendmail[26629]: n327NppB026629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:24:51 splunk3 sendmail[26864]: n327Oph0026864: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:25:15 splunk3 sendmail[26965]: n327PFES026965: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020725.n327PFFI004174@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:25:15 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51089
|
|
Apr 2 00:25:15 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:25:15 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:25:15 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:25:15 splunk3 spamd[22930]: spamd: processing message <200904020725.n327PFFI004174@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:25:18 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 00:25:18 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51089,mid=<200904020725.n327PFFI004174@virt2.int.splunk.com>,bayes=0.169732567562019,autolearn=no
|
|
Apr 2 00:25:18 splunk3 sendmail[26966]: n327PFES026965: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:25:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:25:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:25:51 splunk3 sendmail[27123]: n327PpMi027123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:26:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 00:26:35 splunk3 sendmail[27288]: n327QW3e027288: from=<spamme@splunkit.com>, size=2754, class=0, nrcpts=1, msgid=<200904020726.n327QW3e027288@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=host-92-8-39-244.as43234.net [92.8.39.244] (may be forged)
|
|
Apr 2 00:26:35 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51112
|
|
Apr 2 00:26:35 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:26:35 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:26:35 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:26:35 splunk3 spamd[22930]: spamd: processing message <200904020726.n327QW3e027288@splunk3.splunkit.com> for spamme:501
|
|
Apr 2 00:26:38 splunk3 spamd[22930]: spamd: identified spam (32.1/5.0) for spamme:501 in 2.7 seconds, 3165 bytes.
|
|
Apr 2 00:26:38 splunk3 spamd[22930]: spamd: result: Y 32 - BAYES_99,FORGED_RCVD_HELO,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.7,size=3165,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51112,mid=<200904020726.n327QW3e027288@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 2 00:26:38 splunk3 sendmail[27306]: n327QW3e027288: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:03, mailer=local, pri=33087, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:26:38 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:26:51 splunk3 sendmail[27370]: n327Qp89027370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:27:51 splunk3 sendmail[27607]: n327Rpl0027607: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:28:51 splunk3 sendmail[27844]: n327Spn8027844: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:29:51 splunk3 sendmail[28083]: n327Tpps028083: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:30:16 splunk3 sendmail[28185]: n327UG97028185: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020730.n327UGac004798@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:30:16 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51147
|
|
Apr 2 00:30:16 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:30:16 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:30:16 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:30:16 splunk3 spamd[22930]: spamd: processing message <200904020730.n327UGac004798@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:30:18 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 2 00:30:18 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51147,mid=<200904020730.n327UGac004798@virt2.int.splunk.com>,bayes=0.169723722883313,autolearn=no
|
|
Apr 2 00:30:18 splunk3 sendmail[28186]: n327UG97028185: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:30:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:30:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:30:51 splunk3 sendmail[28341]: n327Upli028341: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:31:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:31:51 splunk3 sendmail[28583]: n327Vph0028583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:32:51 splunk3 sendmail[28819]: n327Wpmn028819: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:33:51 splunk3 sendmail[29059]: n327Xp0c029059: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:34:51 splunk3 sendmail[29291]: n327YpwK029291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:35:16 splunk3 sendmail[29394]: n327ZGbk029394: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020735.n327ZGS2005546@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:35:16 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51202
|
|
Apr 2 00:35:16 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:35:16 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:35:16 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:35:16 splunk3 spamd[22930]: spamd: processing message <200904020735.n327ZGS2005546@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:35:18 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 00:35:18 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51202,mid=<200904020735.n327ZGS2005546@virt2.int.splunk.com>,bayes=0.169723722883313,autolearn=no
|
|
Apr 2 00:35:18 splunk3 sendmail[29395]: n327ZGbk029394: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:35:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:35:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:35:51 splunk3 sendmail[29552]: n327ZphQ029552: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:36:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:36:51 splunk3 sendmail[29788]: n327apEo029788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:37:51 splunk3 sendmail[30023]: n327bpB9030023: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:38:51 splunk3 sendmail[30264]: n327cp0P030264: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:39:51 splunk3 sendmail[30503]: n327dpH2030503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:40:17 splunk3 sendmail[30607]: n327eHTC030607: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020740.n327eGrP006177@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:40:17 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51258
|
|
Apr 2 00:40:17 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:40:17 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:40:17 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:40:17 splunk3 spamd[22930]: spamd: processing message <200904020740.n327eGrP006177@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:40:19 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 00:40:19 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51258,mid=<200904020740.n327eGrP006177@virt2.int.splunk.com>,bayes=0.169723722883313,autolearn=no
|
|
Apr 2 00:40:19 splunk3 sendmail[30608]: n327eHTC030607: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:40:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:40:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:40:51 splunk3 sendmail[30765]: n327ephk030765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:41:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 00:41:51 splunk3 sendmail[31007]: n327fpM0031007: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:42:51 splunk3 sendmail[31243]: n327gpid031243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:43:44 splunk3 sendmail[31461]: n327hiqX031461: from=<3sGzUSRQKBjsdlldibXiboqp-klobmivdlldib.ZljpmXjjbpmirkhfq.Zlj@alerts.bounces.google.com>, size=2924, class=0, nrcpts=1, msgid=<0016364ed0d072901604668d976a@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 2 00:43:44 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51301
|
|
Apr 2 00:43:44 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:43:44 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:43:44 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:43:44 splunk3 spamd[22930]: spamd: processing message <0016364ed0d072901604668d976a@google.com> for spamme:501
|
|
Apr 2 00:43:46 splunk3 spamd[22930]: spamd: clean message (-2.4/5.0) for spamme:501 in 1.7 seconds, 3358 bytes.
|
|
Apr 2 00:43:46 splunk3 spamd[22930]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.7,size=3358,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51301,mid=<0016364ed0d072901604668d976a@google.com>,bayes=1.11022302462516e-16,autolearn=ham
|
|
Apr 2 00:43:46 splunk3 sendmail[31463]: n327hiqX031461: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33139, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:43:46 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:43:51 splunk3 sendmail[31486]: n327hpUY031486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:44:51 splunk3 sendmail[31722]: n327ip8n031722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:45:17 splunk3 sendmail[31827]: n327jHIV031827: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020745.n327jHAD006793@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:45:17 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51316
|
|
Apr 2 00:45:17 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:45:17 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:45:17 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:45:17 splunk3 spamd[22930]: spamd: processing message <200904020745.n327jHAD006793@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:45:20 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 00:45:20 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51316,mid=<200904020745.n327jHAD006793@virt2.int.splunk.com>,bayes=0.169761706004701,autolearn=no
|
|
Apr 2 00:45:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:45:20 splunk3 sendmail[31835]: n327jHIV031827: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:45:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:45:51 splunk3 sendmail[31982]: n327jpgs031982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:46:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:46:51 splunk3 sendmail[32220]: n327kpca032220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:47:51 splunk3 sendmail[32461]: n327lp9g032461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:48:51 splunk3 sendmail[32695]: n327mpBk032695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:49:51 splunk3 sendmail[466]: n327npr4000466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:50:18 splunk3 sendmail[587]: n327oIII000587: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020750.n327oH5G007404@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:50:18 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51371
|
|
Apr 2 00:50:18 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:50:18 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:50:18 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:50:18 splunk3 spamd[22930]: spamd: processing message <200904020750.n327oH5G007404@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:50:20 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 2 00:50:20 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51371,mid=<200904020750.n327oH5G007404@virt2.int.splunk.com>,bayes=0.169761706004701,autolearn=no
|
|
Apr 2 00:50:20 splunk3 sendmail[588]: n327oIII000587: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:50:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:50:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:50:51 splunk3 sendmail[726]: n327opFR000726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:51:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:51:51 splunk3 sendmail[966]: n327pp1D000966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:52:22 splunk3 sendmail[1046]: n327qC5J001046: from=<spammertjes@bonfrer.com>, size=6394, class=0, nrcpts=1, msgid=<20090402145215.5603.qmail@Vadik>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=[88.215.190.83]
|
|
Apr 2 00:52:22 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51399
|
|
Apr 2 00:52:22 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:52:22 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:52:22 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:52:22 splunk3 spamd[22930]: spamd: processing message <20090402145215.5603.qmail@Vadik> for spamme:501
|
|
Apr 2 00:52:27 splunk3 spamd[22930]: spamd: identified spam (26.2/5.0) for spamme:501 in 4.9 seconds, 6635 bytes.
|
|
Apr 2 00:52:27 splunk3 spamd[22930]: spamd: result: Y 26 - AWL,BAYES_99,DRUGS_ERECTILE,DRUG_ED_CAPS,HTML_90_100,HTML_FONT_FACE_BAD,HTML_MESSAGE,MIME_HTML_ONLY,NO_REAL_NAME,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_JP_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=4.9,size=6635,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51399,mid=<20090402145215.5603.qmail@Vadik>,bayes=1,autolearn=spam
|
|
Apr 2 00:52:27 splunk3 sendmail[1086]: n327qC5J001046: to=<spamme@splunkit.com>, delay=00:00:09, xdelay=00:00:05, mailer=local, pri=36603, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:52:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:52:51 splunk3 sendmail[1206]: n327qp4Z001206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:53:51 splunk3 sendmail[1452]: n327rpr7001452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:54:51 splunk3 sendmail[1689]: n327spEQ001689: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:55:18 splunk3 sendmail[1806]: n327tIcB001806: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020755.n327tIdv008018@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 00:55:18 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51428
|
|
Apr 2 00:55:18 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 00:55:18 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 00:55:18 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 00:55:18 splunk3 spamd[22930]: spamd: processing message <200904020755.n327tIdv008018@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 00:55:20 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 2 00:55:20 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51428,mid=<200904020755.n327tIdv008018@virt2.int.splunk.com>,bayes=0.169752861204034,autolearn=no
|
|
Apr 2 00:55:20 splunk3 sendmail[1807]: n327tIcB001806: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 00:55:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 00:55:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 00:55:51 splunk3 sendmail[1947]: n327tpLx001947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:56:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 00:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 00:56:51 splunk3 sendmail[2189]: n327up3F002189: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:57:51 splunk3 sendmail[2426]: n327vpco002426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:58:51 splunk3 sendmail[2668]: n327wpKJ002668: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 00:59:51 splunk3 sendmail[2918]: n327xpQr002918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:00:00 splunk3 sendmail[2975]: n3280088002975: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904020800.n3280088002975@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 01:00:00 splunk3 sendmail[2977]: n3280088002975: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 01:00:00 splunk3 sendmail[2977]: n3280088002975: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 2 01:00:00 splunk3 sendmail[2977]: n3280088002975: n3280088002977: postmaster notify: User unknown
|
|
Apr 2 01:00:01 splunk3 sendmail[2977]: n3280088002977: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:00:04 splunk3 sendmail[3081]: n32804q7003081: from=root, size=291, class=0, nrcpts=1, msgid=<200904020800.n32804q7003081@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 01:00:04 splunk3 sendmail[3085]: n32804L1003085: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020800.n32804q7003081@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 01:00:04 splunk3 sendmail[3081]: n32804q7003081: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32804L1003085 Message accepted for delivery)
|
|
Apr 2 01:00:06 splunk3 sendmail[3086]: n32804L1003085: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:00:19 splunk3 sendmail[3144]: n3280Jc3003144: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020800.n3280IHA008653@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:00:19 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51500
|
|
Apr 2 01:00:19 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:00:19 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 01:00:19 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 01:00:19 splunk3 sendmail[3145]: n3280Jc3003144: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:00:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:00:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:00:52 splunk3 sendmail[3273]: n3280p8X003273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:01:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:01:14 splunk3 sendmail[3327]: n32812Ja003327: from=root, size=443, class=0, nrcpts=1, msgid=<200904020801.n32812Ja003327@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 01:01:14 splunk3 sendmail[3388]: n3281ENt003388: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020801.n32812Ja003327@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 01:01:14 splunk3 sendmail[3327]: n32812Ja003327: to=root, ctladdr=root (0/0), delay=00:00:12, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3281ENt003388 Message accepted for delivery)
|
|
Apr 2 01:01:15 splunk3 sendmail[3389]: n3281ENt003388: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:01:52 splunk3 sendmail[3529]: n3281qr7003529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:02:52 splunk3 sendmail[3792]: n3282qqJ003792: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:03:52 splunk3 sendmail[4043]: n3283qju004043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:04:52 splunk3 sendmail[4287]: n3284qNc004287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:05:19 splunk3 sendmail[4430]: n3285JUj004430: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020805.n3285JHr009335@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:05:20 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51557
|
|
Apr 2 01:05:20 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:05:20 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 01:05:20 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 01:05:20 splunk3 sendmail[4431]: n3285JUj004430: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:05:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:05:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:05:52 splunk3 sendmail[4555]: n3285qGU004555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:06:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:06:52 splunk3 sendmail[4794]: n3286qWR004794: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:07:52 splunk3 sendmail[5043]: n3287qnG005043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:08:52 splunk3 sendmail[5322]: n3288qjG005322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:09:52 splunk3 sendmail[5565]: n3289qut005565: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:10:02 splunk3 sendmail[5734]: n328A2v9005734: from=root, size=292, class=0, nrcpts=1, msgid=<200904020810.n328A2v9005734@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 01:10:02 splunk3 sendmail[5739]: n328A2io005739: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020810.n328A2v9005734@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 01:10:02 splunk3 sendmail[5734]: n328A2v9005734: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n328A2io005739 Message accepted for delivery)
|
|
Apr 2 01:10:03 splunk3 sendmail[5740]: n328A2io005739: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:10:20 splunk3 sendmail[5803]: n328AKv3005803: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904020810.n328AKlD009949@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:10:20 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51613
|
|
Apr 2 01:10:20 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:10:20 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:10:20 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:10:20 splunk3 spamd[22930]: spamd: processing message <200904020810.n328AKlD009949@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:10:22 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 01:10:22 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51613,mid=<200904020810.n328AKlD009949@virt2.int.splunk.com>,bayes=0.169752861204034,autolearn=no
|
|
Apr 2 01:10:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:10:22 splunk3 sendmail[5804]: n328AKv3005803: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:10:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:10:52 splunk3 sendmail[5930]: n328Aqnx005930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:11:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 01:11:52 splunk3 sendmail[6173]: n328Bq38006173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:12:52 splunk3 sendmail[6407]: n328CqwM006407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:13:52 splunk3 sendmail[6647]: n328Dqb5006647: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:14:52 splunk3 sendmail[6883]: n328Eq8R006883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:15:20 splunk3 sendmail[7012]: n328FKmn007012: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020815.n328FKfS010740@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:15:20 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51670
|
|
Apr 2 01:15:20 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:15:20 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:15:20 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:15:20 splunk3 spamd[22930]: spamd: processing message <200904020815.n328FKfS010740@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:15:22 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 01:15:22 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51670,mid=<200904020815.n328FKfS010740@virt2.int.splunk.com>,bayes=0.112742809227236,autolearn=no
|
|
Apr 2 01:15:22 splunk3 sendmail[7013]: n328FKmn007012: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:15:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:15:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:15:52 splunk3 sendmail[7143]: n328FqUC007143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:16:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:16:52 splunk3 sendmail[7379]: n328Gq8k007379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:17:52 splunk3 sendmail[7630]: n328HqqC007630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:18:46 splunk3 sendmail[7591]: n328HgR0007591: from=<tsung_lup@domainnews.com>, size=5728, class=0, nrcpts=1, msgid=<f434019dba59$2c7ca414$71f1f615@domainnews.com>, proto=ESMTP, daemon=MTA, relay=224-173.static.ew.hu [212.108.224.173]
|
|
Apr 2 01:18:46 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51703
|
|
Apr 2 01:18:46 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:18:46 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:18:46 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:18:46 splunk3 spamd[22930]: spamd: processing message <f434019dba59$2c7ca414$71f1f615@domainnews.com> for spamme:501
|
|
Apr 2 01:18:48 splunk3 spamd[22930]: spamd: identified spam (33.4/5.0) for spamme:501 in 1.8 seconds, 6040 bytes.
|
|
Apr 2 01:18:48 splunk3 spamd[22930]: spamd: result: Y 33 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=1.8,size=6040,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51703,mid=<f434019dba59$2c7ca414$71f1f615@domainnews.com>,bayes=1,autolearn=spam
|
|
Apr 2 01:18:48 splunk3 sendmail[7845]: n328HgR0007591: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:02, mailer=local, pri=35939, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:18:48 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:18:52 splunk3 sendmail[7868]: n328Iqvr007868: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:19:52 splunk3 sendmail[8107]: n328Jq5o008107: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:20:21 splunk3 sendmail[8243]: n328KLwN008243: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020820.n328KK9a011373@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:20:21 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51726
|
|
Apr 2 01:20:21 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:20:21 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:20:21 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:20:21 splunk3 spamd[22930]: spamd: processing message <200904020820.n328KK9a011373@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:20:23 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 01:20:23 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51726,mid=<200904020820.n328KK9a011373@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 01:20:23 splunk3 sendmail[8244]: n328KLwN008243: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:20:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:20:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:20:52 splunk3 sendmail[8370]: n328KqOl008370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:21:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:21:52 splunk3 sendmail[8610]: n328Lqxo008610: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:22:52 splunk3 sendmail[8845]: n328MqJP008845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:23:52 splunk3 sendmail[9087]: n328Nqmg009087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:24:52 splunk3 sendmail[9322]: n328Oq8O009322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:25:21 splunk3 sendmail[9454]: n328PLhK009454: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020825.n328PLKc011982@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:25:21 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51782
|
|
Apr 2 01:25:21 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:25:21 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:25:21 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:25:21 splunk3 spamd[22930]: spamd: processing message <200904020825.n328PLKc011982@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:25:24 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 2 01:25:24 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51782,mid=<200904020825.n328PLKc011982@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 01:25:24 splunk3 sendmail[9455]: n328PLhK009454: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:25:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:25:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:25:52 splunk3 sendmail[9588]: n328PqRf009588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:26:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 01:26:52 splunk3 sendmail[9829]: n328QqkZ009829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:27:52 splunk3 sendmail[10066]: n328RqF8010066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:28:52 splunk3 sendmail[10302]: n328SqpJ010302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:29:52 splunk3 sendmail[10543]: n328TqHK010543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:30:22 splunk3 sendmail[10675]: n328UMHU010675: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020830.n328ULbJ012607@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:30:22 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51838
|
|
Apr 2 01:30:22 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:30:22 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:30:22 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:30:22 splunk3 spamd[22930]: spamd: processing message <200904020830.n328ULbJ012607@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:30:24 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 2 01:30:24 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51838,mid=<200904020830.n328ULbJ012607@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 01:30:24 splunk3 sendmail[10676]: n328UMHU010675: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:30:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:30:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:30:52 splunk3 sendmail[10802]: n328Uq9c010802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:31:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:31:52 splunk3 sendmail[11045]: n328VqqS011045: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:32:52 splunk3 sendmail[11280]: n328Wq2l011280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:33:52 splunk3 sendmail[11522]: n328Xq6Y011522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:34:52 splunk3 sendmail[11766]: n328YqbI011766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:35:22 splunk3 sendmail[11904]: n328ZMjg011904: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020835.n328ZMTr013348@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:35:22 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51894
|
|
Apr 2 01:35:22 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:35:22 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:35:22 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:35:22 splunk3 spamd[22930]: spamd: processing message <200904020835.n328ZMTr013348@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:35:24 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 01:35:24 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51894,mid=<200904020835.n328ZMTr013348@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 01:35:24 splunk3 sendmail[11905]: n328ZMjg011904: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:35:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:35:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:35:52 splunk3 sendmail[12017]: n328ZqgP012017: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:36:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:36:52 splunk3 sendmail[12256]: n328aqQJ012256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:37:52 splunk3 sendmail[12506]: n328bqi4012506: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:38:52 splunk3 sendmail[12748]: n328cqJU012748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:39:52 splunk3 sendmail[12980]: n328dqKc012980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:40:22 splunk3 sendmail[13119]: n328eMIj013119: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020840.n328eMle013984@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:40:22 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51949
|
|
Apr 2 01:40:22 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:40:22 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:40:22 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:40:22 splunk3 spamd[22930]: spamd: processing message <200904020840.n328eMle013984@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:40:25 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 01:40:25 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51949,mid=<200904020840.n328eMle013984@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 01:40:25 splunk3 sendmail[13120]: n328eMIj013119: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:40:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:40:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:40:52 splunk3 sendmail[13241]: n328eqZZ013241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:41:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 01:41:52 splunk3 sendmail[13523]: n328fqFG013523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:42:52 splunk3 sendmail[13758]: n328gqjj013758: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:43:52 splunk3 sendmail[13999]: n328hqRl013999: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:44:52 splunk3 sendmail[14233]: n328iqDA014233: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:45:23 splunk3 sendmail[14366]: n328jNbS014366: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020845.n328jMC2014595@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:45:23 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52005
|
|
Apr 2 01:45:23 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:45:23 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:45:23 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:45:23 splunk3 spamd[22930]: spamd: processing message <200904020845.n328jMC2014595@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:45:25 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 01:45:25 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52005,mid=<200904020845.n328jMC2014595@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 01:45:25 splunk3 sendmail[14367]: n328jNbS014366: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:45:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:45:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:45:52 splunk3 sendmail[14493]: n328jqC2014493: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:46:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:46:52 splunk3 sendmail[14727]: n328kqbv014727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:47:52 splunk3 sendmail[14968]: n328lqbI014968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:48:52 splunk3 sendmail[15204]: n328mqVR015204: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:49:52 splunk3 sendmail[15443]: n328nqCV015443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:50:23 splunk3 sendmail[15579]: n328oNjg015579: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020850.n328oNY5015211@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:50:23 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52061
|
|
Apr 2 01:50:23 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:50:23 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:50:23 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:50:24 splunk3 spamd[22930]: spamd: processing message <200904020850.n328oNY5015211@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:50:26 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 01:50:26 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52061,mid=<200904020850.n328oNY5015211@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 01:50:26 splunk3 sendmail[15580]: n328oNjg015579: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:50:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:50:50 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:50:52 splunk3 sendmail[15707]: n328oq0e015707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:51:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:51:52 splunk3 sendmail[15947]: n328pqeC015947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:52:52 splunk3 sendmail[16183]: n328qqIA016183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:53:52 splunk3 sendmail[16424]: n328rq1e016424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:54:52 splunk3 sendmail[16658]: n328sqHN016658: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:55:24 splunk3 sendmail[16792]: n328tOZU016792: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020855.n328tOPP015815@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 01:55:24 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52116
|
|
Apr 2 01:55:24 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 01:55:24 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 01:55:24 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 01:55:24 splunk3 spamd[22930]: spamd: processing message <200904020855.n328tOPP015815@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 01:55:26 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 01:55:26 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52116,mid=<200904020855.n328tOPP015815@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 01:55:26 splunk3 sendmail[16793]: n328tOZU016792: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 01:55:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 01:55:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 01:55:52 splunk3 sendmail[16917]: n328tqJB016917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:56:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 01:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 01:56:52 splunk3 sendmail[17155]: n328uqCr017155: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:57:52 splunk3 sendmail[17394]: n328vqRx017394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:58:52 splunk3 sendmail[17629]: n328wqLw017629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 01:59:52 splunk3 sendmail[17870]: n328xq5J017870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:00:04 splunk3 sendmail[17978]: n32904dS017978: from=root, size=291, class=0, nrcpts=1, msgid=<200904020900.n32904dS017978@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 02:00:04 splunk3 sendmail[17982]: n32904p9017982: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904020900.n32904dS017978@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 02:00:04 splunk3 sendmail[17978]: n32904dS017978: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32904p9017982 Message accepted for delivery)
|
|
Apr 2 02:00:06 splunk3 sendmail[18000]: n32905rW018000: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904020900.n32905rW018000@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 02:00:06 splunk3 sendmail[17983]: n32904p9017982: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:00:06 splunk3 sendmail[18002]: n32905rW018000: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 02:00:06 splunk3 sendmail[18002]: n32905rW018000: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 02:00:06 splunk3 sendmail[18002]: n32905rW018000: n32906rW018002: postmaster notify: User unknown
|
|
Apr 2 02:00:07 splunk3 sendmail[18002]: n32906rW018002: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:00:25 splunk3 sendmail[18089]: n3290Plj018089: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020900.n3290Os7016458@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:00:25 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52181
|
|
Apr 2 02:00:25 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:00:25 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 02:00:25 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 02:00:25 splunk3 sendmail[18090]: n3290Plj018089: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:00:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:00:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:00:52 splunk3 sendmail[18211]: n3290q3K018211: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:01:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:01:15 splunk3 sendmail[18250]: n32911dv018250: from=root, size=443, class=0, nrcpts=1, msgid=<200904020901.n32911dv018250@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 02:01:15 splunk3 sendmail[18315]: n3291FNS018315: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904020901.n32911dv018250@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 02:01:15 splunk3 sendmail[18250]: n32911dv018250: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3291FNS018315 Message accepted for delivery)
|
|
Apr 2 02:01:16 splunk3 sendmail[18316]: n3291FNS018315: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:01:52 splunk3 sendmail[18468]: n3291qr7018468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:02:52 splunk3 sendmail[18705]: n3292qNx018705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:03:52 splunk3 sendmail[18944]: n3293qgD018944: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:04:52 splunk3 sendmail[19179]: n3294qSg019179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:05:25 splunk3 sendmail[19312]: n3295PdF019312: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020905.n3295PLx017136@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:05:25 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52237
|
|
Apr 2 02:05:25 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:05:25 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 02:05:25 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 02:05:25 splunk3 sendmail[19313]: n3295PdF019312: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:05:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:05:52 splunk3 sendmail[19437]: n3295qDo019437: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:06:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:06:52 splunk3 sendmail[19676]: n3296qgL019676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:07:52 splunk3 sendmail[19913]: n3297qqP019913: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:08:52 splunk3 sendmail[20154]: n3298qpI020154: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:09:52 splunk3 sendmail[20395]: n3299qsO020395: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:10:02 splunk3 sendmail[20537]: n329A2fC020537: from=root, size=292, class=0, nrcpts=1, msgid=<200904020910.n329A2fC020537@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 02:10:02 splunk3 sendmail[20542]: n329A2GE020542: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904020910.n329A2fC020537@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 02:10:02 splunk3 sendmail[20537]: n329A2fC020537: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n329A2GE020542 Message accepted for delivery)
|
|
Apr 2 02:10:04 splunk3 sendmail[20543]: n329A2GE020542: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:10:25 splunk3 sendmail[20635]: n329APSb020635: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020910.n329APvh017758@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:10:25 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52294
|
|
Apr 2 02:10:25 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:10:25 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:10:25 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:10:25 splunk3 spamd[22930]: spamd: processing message <200904020910.n329APvh017758@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:10:27 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 2 02:10:27 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52294,mid=<200904020910.n329APvh017758@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:10:27 splunk3 sendmail[20636]: n329APSb020635: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:10:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:10:52 splunk3 sendmail[20758]: n329AqBh020758: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:11:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 02:11:52 splunk3 sendmail[21001]: n329BqEb021001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:12:52 splunk3 sendmail[21235]: n329Cq0B021235: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:13:52 splunk3 sendmail[21475]: n329DqwF021475: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:14:52 splunk3 sendmail[21707]: n329Eqef021707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:15:26 splunk3 sendmail[21842]: n329FQIL021842: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020915.n329FPSx018545@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:15:26 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52350
|
|
Apr 2 02:15:26 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:15:26 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:15:26 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:15:26 splunk3 spamd[22930]: spamd: processing message <200904020915.n329FPSx018545@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:15:28 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 02:15:28 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52350,mid=<200904020915.n329FPSx018545@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:15:28 splunk3 sendmail[21843]: n329FQIL021842: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:15:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:15:52 splunk3 sendmail[21965]: n329Fqxu021965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:16:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:16:52 splunk3 sendmail[22204]: n329Gqw4022204: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:17:52 splunk3 sendmail[22444]: n329Hqdi022444: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:18:52 splunk3 sendmail[22681]: n329IqJ7022681: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:19:52 splunk3 sendmail[22919]: n329Jquo022919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:20:26 splunk3 sendmail[23055]: n329KQrZ023055: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020920.n329KQTT019181@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:20:26 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52406
|
|
Apr 2 02:20:26 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:20:26 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:20:26 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:20:26 splunk3 spamd[22930]: spamd: processing message <200904020920.n329KQTT019181@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:20:28 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 02:20:28 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52406,mid=<200904020920.n329KQTT019181@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:20:28 splunk3 sendmail[23056]: n329KQrZ023055: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:20:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:20:52 splunk3 sendmail[23183]: n329KqQv023183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:21:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:21:52 splunk3 sendmail[23422]: n329Lq29023422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:22:52 splunk3 sendmail[23657]: n329MqUa023657: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:23:52 splunk3 sendmail[23901]: n329NqKT023901: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:24:52 splunk3 sendmail[24137]: n329OqZk024137: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:25:27 splunk3 sendmail[24293]: n329PRXv024293: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020925.n329PQ7o019788@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:25:27 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52461
|
|
Apr 2 02:25:27 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:25:27 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:25:27 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:25:27 splunk3 spamd[22930]: spamd: processing message <200904020925.n329PQ7o019788@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:25:29 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 02:25:29 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52461,mid=<200904020925.n329PQ7o019788@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:25:29 splunk3 sendmail[24294]: n329PRXv024293: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:25:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:25:52 splunk3 sendmail[24397]: n329PqTn024397: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:26:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 02:26:52 splunk3 sendmail[24635]: n329QqSs024635: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:27:52 splunk3 sendmail[24875]: n329Rqvu024875: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:28:18 splunk3 sendmail[24974]: n329SHC2024974: from=<3MYXUSRQKBtQ6EE6B40B4HJI-DEH4FBO6EE6B4.2ECIF0CC4IFBKDA8J.2EC@alerts.bounces.google.com>, size=4365, class=0, nrcpts=1, msgid=<000e0cd3a64e61422c04668f0def@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.162]
|
|
Apr 2 02:28:18 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52492
|
|
Apr 2 02:28:18 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:28:18 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:28:18 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:28:18 splunk3 spamd[22930]: spamd: processing message <000e0cd3a64e61422c04668f0def@google.com> for spamme:501
|
|
Apr 2 02:28:20 splunk3 spamd[22930]: spamd: clean message (-1.9/5.0) for spamme:501 in 1.8 seconds, 4794 bytes.
|
|
Apr 2 02:28:20 splunk3 spamd[22930]: spamd: result: . -1 - AWL,BAYES_00,FIN_FREE,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.8,size=4794,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52492,mid=<000e0cd3a64e61422c04668f0def@google.com>,bayes=1.66533453693773e-16,autolearn=no
|
|
Apr 2 02:28:20 splunk3 sendmail[24977]: n329SHC2024974: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=34575, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:28:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:28:52 splunk3 sendmail[25113]: n329Sqva025113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:29:52 splunk3 sendmail[25351]: n329TqN3025351: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:30:27 splunk3 sendmail[25510]: n329URBi025510: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020930.n329URps020409@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:30:27 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52519
|
|
Apr 2 02:30:27 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:30:27 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:30:27 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:30:27 splunk3 spamd[22930]: spamd: processing message <200904020930.n329URps020409@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:30:29 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 02:30:29 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52519,mid=<200904020930.n329URps020409@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:30:29 splunk3 sendmail[25511]: n329URBi025510: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:30:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:30:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:30:52 splunk3 sendmail[25612]: n329Uqdw025612: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:31:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:31:52 splunk3 sendmail[25854]: n329Vq1L025854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:32:52 splunk3 sendmail[26090]: n329Wq33026090: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:33:52 splunk3 sendmail[26329]: n329XqKE026329: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:34:52 splunk3 sendmail[26565]: n329Yq3R026565: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:35:27 splunk3 sendmail[26719]: n329ZRHW026719: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020935.n329ZRQB021182@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:35:27 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52574
|
|
Apr 2 02:35:27 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:35:27 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:35:27 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:35:27 splunk3 spamd[22930]: spamd: processing message <200904020935.n329ZRQB021182@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:35:29 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 02:35:29 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52574,mid=<200904020935.n329ZRQB021182@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:35:29 splunk3 sendmail[26720]: n329ZRHW026719: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:35:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:35:52 splunk3 sendmail[26823]: n329ZqVv026823: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:36:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:36:52 splunk3 sendmail[27061]: n329aqI5027061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:37:52 splunk3 sendmail[27301]: n329bq3Z027301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:38:52 splunk3 sendmail[27542]: n329cqG5027542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:39:52 splunk3 sendmail[27781]: n329dqic027781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:40:28 splunk3 sendmail[27940]: n329eS7n027940: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020940.n329eRHP021801@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:40:28 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52630
|
|
Apr 2 02:40:28 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:40:28 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:40:28 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:40:28 splunk3 spamd[22930]: spamd: processing message <200904020940.n329eRHP021801@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:40:32 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1308 bytes.
|
|
Apr 2 02:40:32 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52630,mid=<200904020940.n329eRHP021801@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:40:32 splunk3 sendmail[27941]: n329eS7n027940: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:40:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:40:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:40:52 splunk3 sendmail[28041]: n329eqG1028041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:41:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 02:41:52 splunk3 sendmail[28286]: n329fqSZ028286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:42:52 splunk3 sendmail[28517]: n329gqlX028517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:43:52 splunk3 sendmail[28755]: n329hqZ8028755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:44:52 splunk3 sendmail[28991]: n329iqPP028991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:45:28 splunk3 sendmail[29148]: n329jSR0029148: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020945.n329jSlS022433@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:45:28 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52687
|
|
Apr 2 02:45:28 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:45:28 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:45:28 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:45:28 splunk3 spamd[22930]: spamd: processing message <200904020945.n329jSlS022433@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:45:30 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 02:45:30 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52687,mid=<200904020945.n329jSlS022433@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:45:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:45:30 splunk3 sendmail[29149]: n329jSR0029148: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:45:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:45:52 splunk3 sendmail[29249]: n329jqlv029249: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:46:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:46:52 splunk3 sendmail[29485]: n329kqRY029485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:47:52 splunk3 sendmail[29724]: n329lqva029724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:48:52 splunk3 sendmail[29961]: n329mqsI029961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:49:52 splunk3 sendmail[30196]: n329nqnD030196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:50:29 splunk3 sendmail[30356]: n329oTVX030356: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020950.n329oTkQ023024@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:50:29 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52742
|
|
Apr 2 02:50:29 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:50:29 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:50:29 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:50:29 splunk3 spamd[22930]: spamd: processing message <200904020950.n329oTkQ023024@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:50:31 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 02:50:31 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52742,mid=<200904020950.n329oTkQ023024@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:50:31 splunk3 sendmail[30357]: n329oTVX030356: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:50:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:50:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:50:52 splunk3 sendmail[30459]: n329oqO7030459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:51:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:51:52 splunk3 sendmail[30701]: n329pqI7030701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:52:52 splunk3 sendmail[30936]: n329qqFL030936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:53:52 splunk3 sendmail[31181]: n329rqM1031181: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:54:52 splunk3 sendmail[31416]: n329sq1Z031416: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:55:29 splunk3 sendmail[31570]: n329tTOH031570: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904020955.n329tTDc023682@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 02:55:29 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52798
|
|
Apr 2 02:55:29 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 02:55:29 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 02:55:29 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 02:55:29 splunk3 spamd[22930]: spamd: processing message <200904020955.n329tTDc023682@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 02:55:31 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 2 02:55:31 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52798,mid=<200904020955.n329tTDc023682@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 02:55:31 splunk3 sendmail[31571]: n329tTOH031570: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 02:55:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 02:55:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 02:55:52 splunk3 sendmail[31676]: n329tqXj031676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:56:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 02:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 02:56:52 splunk3 sendmail[31912]: n329uqRP031912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:57:52 splunk3 sendmail[32152]: n329vqPc032152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:58:52 splunk3 sendmail[32386]: n329wqMe032386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 02:59:52 splunk3 sendmail[32625]: n329xqld032625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:00:04 splunk3 sendmail[32735]: n32A04PP032735: from=root, size=291, class=0, nrcpts=1, msgid=<200904021000.n32A04PP032735@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 03:00:04 splunk3 sendmail[32741]: n32A04Ev032741: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021000.n32A04PP032735@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 03:00:04 splunk3 sendmail[32735]: n32A04PP032735: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32A04Ev032741 Message accepted for delivery)
|
|
Apr 2 03:00:06 splunk3 sendmail[32742]: n32A04Ev032741: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:00:11 splunk3 sendmail[325]: n32A0BQ4000325: from=<splunk@localhost>, size=717, class=0, nrcpts=1, msgid=<200904021000.n32A0BQ4000325@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 03:00:11 splunk3 sendmail[327]: n32A0BQ4000325: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120717, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 03:00:11 splunk3 sendmail[327]: n32A0BQ4000325: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120717, dsn=5.1.1, stat=User unknown
|
|
Apr 2 03:00:11 splunk3 sendmail[327]: n32A0BQ4000325: n32A0BQ4000327: postmaster notify: User unknown
|
|
Apr 2 03:00:12 splunk3 sendmail[327]: n32A0BQ4000327: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32085, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:00:30 splunk3 sendmail[401]: n32A0U5T000401: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021000.n32A0U2k024295@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:00:30 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52862
|
|
Apr 2 03:00:30 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:00:30 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 03:00:30 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 03:00:30 splunk3 sendmail[402]: n32A0U5T000401: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:00:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:00:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:00:52 splunk3 sendmail[503]: n32A0qIs000503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:01:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:01:10 splunk3 sendmail[552]: n32A11ic000552: from=root, size=443, class=0, nrcpts=1, msgid=<200904021001.n32A11ic000552@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 03:01:10 splunk3 sendmail[579]: n32A1ATe000579: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021001.n32A11ic000552@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 03:01:10 splunk3 sendmail[552]: n32A11ic000552: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32A1ATe000579 Message accepted for delivery)
|
|
Apr 2 03:01:11 splunk3 sendmail[580]: n32A1ATe000579: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:01:52 splunk3 sendmail[757]: n32A1qLY000757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:02:52 splunk3 sendmail[992]: n32A2q3X000992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:03:52 splunk3 sendmail[1226]: n32A3qbT001226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:04:52 splunk3 sendmail[1464]: n32A4qW8001464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:05:01 splunk3 sendmail[1495]: n32A50As001495: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021005.n32A508v024904@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:05:01 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52907
|
|
Apr 2 03:05:01 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:05:01 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 03:05:01 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 03:05:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:05:01 splunk3 sendmail[1496]: n32A50As001495: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:05:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:05:52 splunk3 sendmail[1723]: n32A5qiR001723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:06:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:06:52 splunk3 sendmail[1961]: n32A6qbs001961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:07:52 splunk3 sendmail[2201]: n32A7qWO002201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:08:52 splunk3 sendmail[2441]: n32A8qAx002441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:09:53 splunk3 sendmail[2686]: n32A9rZU002686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:10:02 splunk3 sendmail[2837]: n32AA2QC002837: from=root, size=292, class=0, nrcpts=1, msgid=<200904021010.n32AA2QC002837@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 03:10:02 splunk3 sendmail[2843]: n32AA2CY002843: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021010.n32AA2QC002837@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 03:10:02 splunk3 sendmail[2837]: n32AA2QC002837: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32AA2CY002843 Message accepted for delivery)
|
|
Apr 2 03:10:02 splunk3 sendmail[2848]: n32AA2k4002848: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021010.n32AA1fe025520@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:10:02 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52964
|
|
Apr 2 03:10:02 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:10:02 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:10:02 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:10:02 splunk3 spamd[22930]: spamd: processing message <200904021010.n32AA1fe025520@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:10:03 splunk3 sendmail[2844]: n32AA2CY002843: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:10:04 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 03:10:04 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52964,mid=<200904021010.n32AA1fe025520@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 03:10:04 splunk3 sendmail[2849]: n32AA2k4002848: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:10:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:10:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:10:53 splunk3 sendmail[3069]: n32AAr74003069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:11:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 03:11:53 splunk3 sendmail[3316]: n32ABraf003316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:12:53 splunk3 sendmail[3561]: n32ACr4B003561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:13:53 splunk3 sendmail[3825]: n32ADr8H003825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:14:53 splunk3 sendmail[4074]: n32AEriY004074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:15:03 splunk3 sendmail[4120]: n32AF3pd004120: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021015.n32AF3g4026357@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:15:03 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53020
|
|
Apr 2 03:15:03 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:15:03 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:15:03 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:15:03 splunk3 spamd[22930]: spamd: processing message <200904021015.n32AF3g4026357@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:15:05 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.9 seconds, 1308 bytes.
|
|
Apr 2 03:15:05 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.9,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53020,mid=<200904021015.n32AF3g4026357@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 03:15:05 splunk3 sendmail[4121]: n32AF3pd004120: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:15:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:15:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:15:53 splunk3 sendmail[4350]: n32AFrWY004350: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:16:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:16:53 splunk3 sendmail[4583]: n32AGr4B004583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:17:53 splunk3 sendmail[4825]: n32AHrJ4004825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:18:53 splunk3 sendmail[5071]: n32AIri4005071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:19:53 splunk3 sendmail[5347]: n32AJrQq005347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:20:04 splunk3 sendmail[5401]: n32AK4qa005401: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021020.n32AK352026987@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:20:04 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53076
|
|
Apr 2 03:20:04 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:20:04 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:20:04 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:20:04 splunk3 spamd[22930]: spamd: processing message <200904021020.n32AK352026987@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:20:06 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 03:20:06 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53076,mid=<200904021020.n32AK352026987@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 03:20:06 splunk3 sendmail[5402]: n32AK4qa005401: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:20:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:20:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:20:53 splunk3 sendmail[5611]: n32AKrx2005611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:21:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:21:53 splunk3 sendmail[5852]: n32ALrqu005852: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:22:53 splunk3 sendmail[6086]: n32AMrw5006086: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:23:53 splunk3 sendmail[6326]: n32ANrHu006326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:24:53 splunk3 sendmail[6563]: n32AOr8S006563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:25:04 splunk3 sendmail[6612]: n32AP45V006612: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021025.n32AP4Wn027593@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:25:04 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53131
|
|
Apr 2 03:25:04 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:25:04 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:25:04 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:25:04 splunk3 spamd[22930]: spamd: processing message <200904021025.n32AP4Wn027593@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:25:06 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 03:25:06 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53131,mid=<200904021025.n32AP4Wn027593@virt2.int.splunk.com>,bayes=0.112738334740903,autolearn=no
|
|
Apr 2 03:25:06 splunk3 sendmail[6613]: n32AP45V006612: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:25:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:25:53 splunk3 sendmail[6823]: n32APrLT006823: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:26:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 03:26:53 splunk3 sendmail[7063]: n32AQrjv007063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:27:07 splunk3 sendmail[1254]: n32A3wNR001254: [202.136.143.152] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:27:53 splunk3 sendmail[7302]: n32ARrSw007302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:28:53 splunk3 sendmail[7541]: n32ASrdT007541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:29:39 splunk3 sendmail[1870]: n32A6UvX001870: [202.136.143.152] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:29:48 splunk3 sendmail[7765]: n32ATmgh007765: from=<3m5PUSRQKBk0v33v0tp0t687-236t40Dv33v0t.r3174p11t74092zx8.r31@alerts.bounces.google.com>, size=2798, class=0, nrcpts=1, msgid=<0016369fa25156242604668fe985@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.191]
|
|
Apr 2 03:29:48 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53186
|
|
Apr 2 03:29:48 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:29:48 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:29:48 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:29:48 splunk3 spamd[22930]: spamd: processing message <0016369fa25156242604668fe985@google.com> for spamme:501
|
|
Apr 2 03:29:50 splunk3 spamd[22930]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.0 seconds, 3228 bytes.
|
|
Apr 2 03:29:50 splunk3 spamd[22930]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.0,size=3228,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53186,mid=<0016369fa25156242604668fe985@google.com>,bayes=0,autolearn=ham
|
|
Apr 2 03:29:50 splunk3 sendmail[7766]: n32ATmgh007765: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33009, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:29:50 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:29:53 splunk3 sendmail[7792]: n32ATrxH007792: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:30:05 splunk3 sendmail[7839]: n32AU5Ms007839: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021030.n32AU47r028210@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:30:05 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53189
|
|
Apr 2 03:30:05 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:30:05 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:30:05 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:30:05 splunk3 spamd[22930]: spamd: processing message <200904021030.n32AU47r028210@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:30:07 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 03:30:07 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53189,mid=<200904021030.n32AU47r028210@virt2.int.splunk.com>,bayes=0.112770572493582,autolearn=no
|
|
Apr 2 03:30:07 splunk3 sendmail[7840]: n32AU5Ms007839: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:30:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:30:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:30:53 splunk3 sendmail[8052]: n32AUrKb008052: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:31:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:31:53 splunk3 sendmail[8292]: n32AVrVf008292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:32:53 splunk3 sendmail[8529]: n32AWrJk008529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:33:53 splunk3 sendmail[8768]: n32AXru8008768: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:34:53 splunk3 sendmail[9003]: n32AYrU7009003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:35:05 splunk3 sendmail[9048]: n32AZ55o009048: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021035.n32AZ5MC028958@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:35:05 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53244
|
|
Apr 2 03:35:05 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:35:05 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:35:05 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:35:05 splunk3 spamd[22930]: spamd: processing message <200904021035.n32AZ5MC028958@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:35:07 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 03:35:07 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53244,mid=<200904021035.n32AZ5MC028958@virt2.int.splunk.com>,bayes=0.112770572493582,autolearn=no
|
|
Apr 2 03:35:07 splunk3 sendmail[9049]: n32AZ55o009048: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:35:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:35:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:35:53 splunk3 sendmail[9262]: n32AZrn4009262: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:36:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:36:13 splunk3 sendmail[9324]: n32Aa96m009324: from=<dobosz@virgilio.it>, size=2240, class=0, nrcpts=1, msgid=<20090402033502.2868.qmail@dmx1.bfi0.com.com>, proto=SMTP, daemon=MTA, relay=[77.126.225.19]
|
|
Apr 2 03:36:13 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53263
|
|
Apr 2 03:36:13 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:36:13 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:36:13 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:36:13 splunk3 spamd[22930]: spamd: processing message <20090402033502.2868.qmail@dmx1.bfi0.com.com> for spamme:501
|
|
Apr 2 03:36:18 splunk3 spamd[22930]: spamd: identified spam (17.9/5.0) for spamme:501 in 5.3 seconds, 2510 bytes.
|
|
Apr 2 03:36:18 splunk3 spamd[22930]: spamd: result: Y 17 - AWL,BAYES_99,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST,HTML_90_100,HTML_MESSAGE,MIME_HTML_ONLY,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,UNPARSEABLE_RELAY,URIBL_JP_SURBL scantime=5.3,size=2510,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53263,mid=<20090402033502.2868.qmail@dmx1.bfi0.com.com>,bayes=0.999343052763958,autolearn=no
|
|
Apr 2 03:36:18 splunk3 sendmail[9345]: n32Aa96m009324: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:05, mailer=local, pri=32456, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:36:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:36:53 splunk3 sendmail[9506]: n32Aarts009506: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:37:53 splunk3 sendmail[9751]: n32AbrvL009751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:38:53 splunk3 sendmail[9992]: n32AcrbE009992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:39:53 splunk3 sendmail[10233]: n32AdrlX010233: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:40:06 splunk3 sendmail[10300]: n32Ae6Fm010300: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021040.n32Ae5og029595@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:40:06 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53301
|
|
Apr 2 03:40:06 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:40:06 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:40:06 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:40:06 splunk3 spamd[22930]: spamd: processing message <200904021040.n32Ae5og029595@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:40:08 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 03:40:08 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53301,mid=<200904021040.n32Ae5og029595@virt2.int.splunk.com>,bayes=0.112770572493582,autolearn=no
|
|
Apr 2 03:40:08 splunk3 sendmail[10301]: n32Ae6Fm010300: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:40:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:40:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:40:53 splunk3 sendmail[10494]: n32AerfP010494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:41:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 03:41:53 splunk3 sendmail[10738]: n32Afr6b010738: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:42:53 splunk3 sendmail[10974]: n32Agrxq010974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:43:53 splunk3 sendmail[11211]: n32Ahrs9011211: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:44:53 splunk3 sendmail[11445]: n32AirxD011445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:45:06 splunk3 sendmail[11510]: n32Aj6ws011510: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021045.n32Aj6ew030209@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:45:06 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53358
|
|
Apr 2 03:45:06 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:45:06 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:45:06 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:45:06 splunk3 spamd[22930]: spamd: processing message <200904021045.n32Aj6ew030209@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:45:08 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 03:45:08 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53358,mid=<200904021045.n32Aj6ew030209@virt2.int.splunk.com>,bayes=0.112770572493582,autolearn=no
|
|
Apr 2 03:45:08 splunk3 sendmail[11511]: n32Aj6ws011510: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:45:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:45:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:45:53 splunk3 sendmail[11704]: n32AjrWw011704: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:46:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:46:53 splunk3 sendmail[11943]: n32AkrhA011943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:47:53 splunk3 sendmail[12183]: n32Alr2h012183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:48:53 splunk3 sendmail[12418]: n32AmrfQ012418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:49:53 splunk3 sendmail[12660]: n32AnrYX012660: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:50:07 splunk3 sendmail[12722]: n32Ao7OC012722: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021050.n32Ao6nX030825@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:50:07 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53413
|
|
Apr 2 03:50:07 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:50:07 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:50:07 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:50:07 splunk3 spamd[22930]: spamd: processing message <200904021050.n32Ao6nX030825@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:50:09 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 03:50:09 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53413,mid=<200904021050.n32Ao6nX030825@virt2.int.splunk.com>,bayes=0.112770572493582,autolearn=no
|
|
Apr 2 03:50:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:50:09 splunk3 sendmail[12723]: n32Ao7OC012722: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:50:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:50:53 splunk3 sendmail[12919]: n32AorDG012919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:51:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:51:53 splunk3 sendmail[13157]: n32Apr3V013157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:52:53 splunk3 sendmail[13432]: n32AqrnY013432: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:53:53 splunk3 sendmail[13677]: n32Arrtx013677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:54:53 splunk3 sendmail[13912]: n32Asrme013912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:55:08 splunk3 sendmail[13976]: n32At8CS013976: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021055.n32At70I031432@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 03:55:08 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53469
|
|
Apr 2 03:55:08 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 03:55:08 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 03:55:08 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 03:55:08 splunk3 spamd[22930]: spamd: processing message <200904021055.n32At70I031432@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 03:55:10 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 2 03:55:10 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53469,mid=<200904021055.n32At70I031432@virt2.int.splunk.com>,bayes=0.112770572493582,autolearn=no
|
|
Apr 2 03:55:10 splunk3 sendmail[13977]: n32At8CS013976: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 03:55:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 03:55:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 03:55:53 splunk3 sendmail[14170]: n32Atr2T014170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:56:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 03:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 03:56:53 splunk3 sendmail[14410]: n32Aur6D014410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:57:53 splunk3 sendmail[14648]: n32AvrI6014648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:58:53 splunk3 sendmail[14879]: n32Awrwb014879: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 03:59:53 splunk3 sendmail[15121]: n32AxraK015121: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:00:04 splunk3 sendmail[15233]: n32B047b015233: from=root, size=291, class=0, nrcpts=1, msgid=<200904021100.n32B047b015233@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 04:00:04 splunk3 sendmail[15237]: n32B04Nv015237: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021100.n32B047b015233@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 04:00:04 splunk3 sendmail[15233]: n32B047b015233: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32B04Nv015237 Message accepted for delivery)
|
|
Apr 2 04:00:05 splunk3 sendmail[15238]: n32B04Nv015237: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:00:08 splunk3 sendmail[15259]: n32B08lf015259: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021100.n32B081b032071@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:00:08 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53526
|
|
Apr 2 04:00:08 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:00:08 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 04:00:08 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 04:00:08 splunk3 sendmail[15260]: n32B08lf015259: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:00:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:00:19 splunk3 sendmail[15314]: n32B0JT0015314: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904021100.n32B0JT0015314@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 04:00:19 splunk3 sendmail[15316]: n32B0JT0015314: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 04:00:19 splunk3 sendmail[15316]: n32B0JT0015314: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 04:00:19 splunk3 sendmail[15316]: n32B0JT0015314: n32B0JT0015316: postmaster notify: User unknown
|
|
Apr 2 04:00:21 splunk3 sendmail[15316]: n32B0JT0015316: to=root, delay=00:00:02, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:00:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:00:53 splunk3 sendmail[15467]: n32B0rJp015467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:01:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:01:05 splunk3 sendmail[15518]: n32B11bv015518: from=root, size=443, class=0, nrcpts=1, msgid=<200904021101.n32B11bv015518@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 04:01:05 splunk3 sendmail[15526]: n32B15Us015526: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021101.n32B11bv015518@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 04:01:05 splunk3 sendmail[15518]: n32B11bv015518: to=root, ctladdr=root (0/0), delay=00:00:04, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32B15Us015526 Message accepted for delivery)
|
|
Apr 2 04:01:06 splunk3 sendmail[15527]: n32B15Us015526: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:01:53 splunk3 sendmail[15722]: n32B1r6E015722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:02:04 splunk3 sendmail[16079]: n32B24WS016079: from=root, size=2002, class=0, nrcpts=1, msgid=<200904021102.n32B24WS016079@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 04:02:04 splunk3 sendmail[16081]: n32B247O016081: from=<root@splunk3.splunkit.com>, size=2302, class=0, nrcpts=1, msgid=<200904021102.n32B24WS016079@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 04:02:04 splunk3 sendmail[16079]: n32B24WS016079: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=32002, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32B247O016081 Message accepted for delivery)
|
|
Apr 2 04:02:06 splunk3 sendmail[16082]: n32B247O016081: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32535, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:02:53 splunk3 sendmail[16420]: n32B2rkg016420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:03:53 splunk3 sendmail[16658]: n32B3rXW016658: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:04:53 splunk3 sendmail[16893]: n32B4rxr016893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:05:09 splunk3 sendmail[16956]: n32B59kZ016956: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904021105.n32B58nH000789@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:05:09 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53591
|
|
Apr 2 04:05:09 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:05:09 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 04:05:09 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 04:05:09 splunk3 sendmail[16957]: n32B59kZ016956: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:05:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:05:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:05:53 splunk3 sendmail[17150]: n32B5rRf017150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:06:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:06:53 splunk3 sendmail[17388]: n32B6rx7017388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:07:53 splunk3 sendmail[17626]: n32B7rVL017626: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:08:53 splunk3 sendmail[17864]: n32B8rkV017864: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:09:53 splunk3 sendmail[18104]: n32B9rS9018104: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:10:02 splunk3 sendmail[18242]: n32BA2LV018242: from=root, size=292, class=0, nrcpts=1, msgid=<200904021110.n32BA2LV018242@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 04:10:02 splunk3 sendmail[18247]: n32BA2Y4018247: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021110.n32BA2LV018242@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 04:10:02 splunk3 sendmail[18242]: n32BA2LV018242: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32BA2Y4018247 Message accepted for delivery)
|
|
Apr 2 04:10:03 splunk3 sendmail[18248]: n32BA2Y4018247: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:10:10 splunk3 sendmail[18275]: n32BAADo018275: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021110.n32BA9Ol001415@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:10:10 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53647
|
|
Apr 2 04:10:10 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:10:10 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:10:10 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:10:10 splunk3 spamd[22930]: spamd: processing message <200904021110.n32BA9Ol001415@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:10:12 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 2 04:10:12 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53647,mid=<200904021110.n32BA9Ol001415@virt2.int.splunk.com>,bayes=0.169785478291496,autolearn=no
|
|
Apr 2 04:10:12 splunk3 sendmail[18276]: n32BAADo018275: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:10:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:10:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:10:53 splunk3 sendmail[18482]: n32BAr2h018482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:11:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 04:11:53 splunk3 sendmail[18724]: n32BBri9018724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:12:53 splunk3 sendmail[18956]: n32BCrCw018956: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:13:53 splunk3 sendmail[19195]: n32BDrq6019195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:14:53 splunk3 sendmail[19433]: n32BErXh019433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:15:11 splunk3 sendmail[19515]: n32BFBsn019515: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021115.n32BFAa1002240@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:15:11 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53704
|
|
Apr 2 04:15:11 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:15:11 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:15:11 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:15:11 splunk3 spamd[22930]: spamd: processing message <200904021115.n32BFAa1002240@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:15:13 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 2 04:15:13 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53704,mid=<200904021115.n32BFAa1002240@virt2.int.splunk.com>,bayes=0.169785478291496,autolearn=no
|
|
Apr 2 04:15:14 splunk3 sendmail[19516]: n32BFBsn019515: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:15:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:15:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:15:53 splunk3 sendmail[19692]: n32BFrel019692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:16:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:16:53 splunk3 sendmail[19931]: n32BGrW3019931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:17:53 splunk3 sendmail[20171]: n32BHrvI020171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:18:53 splunk3 sendmail[20404]: n32BIrl0020404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:19:53 splunk3 sendmail[20642]: n32BJroA020642: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:20:13 splunk3 sendmail[20727]: n32BKDfl020727: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021120.n32BKBEh002876@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:20:13 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53761
|
|
Apr 2 04:20:13 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:20:13 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:20:13 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:20:13 splunk3 spamd[22930]: spamd: processing message <200904021120.n32BKBEh002876@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:20:15 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 2 04:20:15 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53761,mid=<200904021120.n32BKBEh002876@virt2.int.splunk.com>,bayes=0.169785478291496,autolearn=no
|
|
Apr 2 04:20:15 splunk3 sendmail[20728]: n32BKDfl020727: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:20:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:20:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:20:53 splunk3 sendmail[20904]: n32BKrNL020904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:21:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:21:53 splunk3 sendmail[21147]: n32BLrxx021147: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:22:53 splunk3 sendmail[21381]: n32BMrFK021381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:23:53 splunk3 sendmail[21623]: n32BNrcD021623: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:24:53 splunk3 sendmail[21858]: n32BOrJo021858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:25:13 splunk3 sendmail[21941]: n32BPDkF021941: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021125.n32BPDIs003486@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:25:13 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53816
|
|
Apr 2 04:25:13 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:25:13 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:25:13 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:25:13 splunk3 spamd[22930]: spamd: processing message <200904021125.n32BPDIs003486@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:25:15 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 2 04:25:15 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53816,mid=<200904021125.n32BPDIs003486@virt2.int.splunk.com>,bayes=0.169785478291496,autolearn=no
|
|
Apr 2 04:25:15 splunk3 sendmail[21942]: n32BPDkF021941: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:25:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:25:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:25:53 splunk3 sendmail[22116]: n32BPriS022116: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:26:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 04:26:53 splunk3 sendmail[22353]: n32BQrD6022353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:27:53 splunk3 sendmail[22592]: n32BRrIn022592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:28:53 splunk3 sendmail[22826]: n32BSrI0022826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:29:53 splunk3 sendmail[23068]: n32BTrwp023068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:30:14 splunk3 sendmail[23153]: n32BUEpG023153: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021130.n32BUEhr004104@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:30:14 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53873
|
|
Apr 2 04:30:14 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:30:14 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:30:14 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:30:14 splunk3 spamd[22930]: spamd: processing message <200904021130.n32BUEhr004104@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:30:17 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 2 04:30:17 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53873,mid=<200904021130.n32BUEhr004104@virt2.int.splunk.com>,bayes=0.169785478291496,autolearn=no
|
|
Apr 2 04:30:17 splunk3 sendmail[23154]: n32BUEpG023153: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:30:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:30:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:30:53 splunk3 sendmail[23329]: n32BUrVX023329: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:31:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:31:53 splunk3 sendmail[23572]: n32BVrho023572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:32:53 splunk3 sendmail[23806]: n32BWrMc023806: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:33:53 splunk3 sendmail[24041]: n32BXr3v024041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:34:53 splunk3 sendmail[24277]: n32BYrC0024277: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:35:15 splunk3 sendmail[24377]: n32BZFug024377: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021135.n32BZFCQ004854@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:35:15 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53928
|
|
Apr 2 04:35:15 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:35:15 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:35:15 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:35:15 splunk3 spamd[22930]: spamd: processing message <200904021135.n32BZFCQ004854@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:35:17 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 04:35:17 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53928,mid=<200904021135.n32BZFCQ004854@virt2.int.splunk.com>,bayes=0.169785478291496,autolearn=no
|
|
Apr 2 04:35:17 splunk3 sendmail[24378]: n32BZFug024377: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:35:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:35:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:35:53 splunk3 sendmail[24538]: n32BZr3d024538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:36:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:36:53 splunk3 sendmail[24775]: n32BarEh024775: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:37:33 splunk3 sendmail[24937]: n32BbVep024937: from=<tayfurn@wolf-howl.com>, size=5701, class=0, nrcpts=1, msgid=<798a019dbee5$746ed9e6$7c058a90@wolf-howl.com>, proto=ESMTP, daemon=MTA, relay=93-80-244-13.broadband.corbina.ru [93.80.244.13]
|
|
Apr 2 04:37:33 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53960
|
|
Apr 2 04:37:33 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:37:33 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:37:33 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:37:33 splunk3 spamd[22930]: spamd: processing message <798a019dbee5$746ed9e6$7c058a90@wolf-howl.com> for spamme:501
|
|
Apr 2 04:37:35 splunk3 spamd[22930]: spamd: identified spam (36.2/5.0) for spamme:501 in 2.5 seconds, 6030 bytes.
|
|
Apr 2 04:37:35 splunk3 spamd[22930]: spamd: result: Y 36 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.5,size=6030,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53960,mid=<798a019dbee5$746ed9e6$7c058a90@wolf-howl.com>,bayes=1,autolearn=spam
|
|
Apr 2 04:37:35 splunk3 sendmail[24938]: n32BbVep024937: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=35935, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:37:35 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:37:53 splunk3 sendmail[25018]: n32BbrGb025018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:38:53 splunk3 sendmail[25259]: n32Bcr6n025259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:39:53 splunk3 sendmail[25497]: n32Bdr0Q025497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:40:16 splunk3 sendmail[25602]: n32BeGBQ025602: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021140.n32BeFls005487@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:40:16 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53985
|
|
Apr 2 04:40:16 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:40:16 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:40:16 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:40:16 splunk3 spamd[22930]: spamd: processing message <200904021140.n32BeFls005487@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:40:18 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 2 04:40:18 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53985,mid=<200904021140.n32BeFls005487@virt2.int.splunk.com>,bayes=0.169780116761104,autolearn=no
|
|
Apr 2 04:40:18 splunk3 sendmail[25603]: n32BeGBQ025602: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:40:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:40:49 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:40:53 splunk3 sendmail[25755]: n32BerXS025755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:41:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 04:41:53 splunk3 sendmail[26000]: n32BfrIM026000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:42:53 splunk3 sendmail[26234]: n32Bgrsb026234: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:43:53 splunk3 sendmail[26472]: n32Bhr6L026472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:44:53 splunk3 sendmail[26708]: n32Bir8W026708: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:45:17 splunk3 sendmail[26808]: n32BjGaO026808: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021145.n32BjGDM006107@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:45:17 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54042
|
|
Apr 2 04:45:17 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:45:17 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:45:17 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:45:17 splunk3 spamd[22930]: spamd: processing message <200904021145.n32BjGDM006107@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:45:19 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 04:45:19 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54042,mid=<200904021145.n32BjGDM006107@virt2.int.splunk.com>,bayes=0.169780116761104,autolearn=no
|
|
Apr 2 04:45:19 splunk3 sendmail[26809]: n32BjGaO026808: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:45:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:45:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:45:53 splunk3 sendmail[26968]: n32BjrFY026968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:46:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:46:53 splunk3 sendmail[27205]: n32Bkr8V027205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:47:27 splunk3 sendmail[27345]: n32BlPpj027345: from=<troett1998@Latcorp.com.my>, size=1936, class=0, nrcpts=1, msgid=<200904021147.n32BlPpj027345@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=173-23-130-165.client.mchsi.com [173.23.130.165]
|
|
Apr 2 04:47:27 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54072
|
|
Apr 2 04:47:27 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:47:27 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:47:27 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:47:27 splunk3 spamd[22930]: spamd: processing message <200904021147.n32BlPpj027345@splunk3.splunkit.com> for spamme:501
|
|
Apr 2 04:47:33 splunk3 spamd[22930]: spamd: identified spam (18.5/5.0) for spamme:501 in 6.4 seconds, 2362 bytes.
|
|
Apr 2 04:47:33 splunk3 spamd[22930]: spamd: result: Y 18 - BAYES_99,HELO_DYNAMIC_IPADDR2,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URI_NOVOWEL scantime=6.4,size=2362,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54072,mid=<200904021147.n32BlPpj027345@splunk3.splunkit.com>,bayes=0.999648198150473,autolearn=no
|
|
Apr 2 04:47:33 splunk3 sendmail[27350]: n32BlPpj027345: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:06, mailer=local, pri=32273, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:47:33 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:47:53 splunk3 sendmail[27447]: n32Blrrl027447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:48:53 splunk3 sendmail[27683]: n32BmrED027683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:49:53 splunk3 sendmail[27924]: n32Bnrc0027924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:50:18 splunk3 sendmail[28026]: n32BoHcF028026: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021150.n32BoHKG006717@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:50:18 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54098
|
|
Apr 2 04:50:18 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:50:18 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:50:18 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:50:18 splunk3 spamd[22930]: spamd: processing message <200904021150.n32BoHKG006717@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:50:20 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 04:50:20 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54098,mid=<200904021150.n32BoHKG006717@virt2.int.splunk.com>,bayes=0.169780116761104,autolearn=no
|
|
Apr 2 04:50:20 splunk3 sendmail[28027]: n32BoHcF028026: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:50:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:50:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:50:53 splunk3 sendmail[28186]: n32BorDB028186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:51:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:51:53 splunk3 sendmail[28428]: n32Bprgf028428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:52:53 splunk3 sendmail[28663]: n32Bqrg7028663: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:53:53 splunk3 sendmail[28904]: n32BrrC2028904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:54:53 splunk3 sendmail[29137]: n32BsrXw029137: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:55:19 splunk3 sendmail[29242]: n32BtJxX029242: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021155.n32BtIPe007326@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 04:55:19 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54154
|
|
Apr 2 04:55:19 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 04:55:19 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 04:55:19 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 04:55:19 splunk3 spamd[22930]: spamd: processing message <200904021155.n32BtIPe007326@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 04:55:21 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 04:55:21 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54154,mid=<200904021155.n32BtIPe007326@virt2.int.splunk.com>,bayes=0.169780116761104,autolearn=no
|
|
Apr 2 04:55:21 splunk3 sendmail[29243]: n32BtJxX029242: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 04:55:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 04:55:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 04:55:53 splunk3 sendmail[29395]: n32Btrtr029395: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:56:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 04:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 04:56:53 splunk3 sendmail[29636]: n32Burua029636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:57:53 splunk3 sendmail[29875]: n32Bvr3U029875: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:58:53 splunk3 sendmail[30109]: n32Bwrrj030109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 04:59:53 splunk3 sendmail[30350]: n32BxrdA030350: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:00:04 splunk3 sendmail[30456]: n32C04hb030456: from=root, size=291, class=0, nrcpts=1, msgid=<200904021200.n32C04hb030456@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 05:00:04 splunk3 sendmail[30460]: n32C0479030460: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021200.n32C04hb030456@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 05:00:04 splunk3 sendmail[30456]: n32C04hb030456: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32C0479030460 Message accepted for delivery)
|
|
Apr 2 05:00:05 splunk3 sendmail[30461]: n32C0479030460: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:00:19 splunk3 sendmail[30522]: n32C0J8S030522: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021200.n32C0JPQ007972@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:00:19 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54211
|
|
Apr 2 05:00:19 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:00:19 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 05:00:19 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 05:00:19 splunk3 sendmail[30539]: n32C0J8S030522: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:00:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:00:29 splunk3 sendmail[30577]: n32C0T5s030577: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904021200.n32C0T5s030577@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 05:00:29 splunk3 sendmail[30579]: n32C0T5s030577: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 05:00:29 splunk3 sendmail[30579]: n32C0T5s030577: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 05:00:29 splunk3 sendmail[30579]: n32C0T5s030577: n32C0T5s030579: postmaster notify: User unknown
|
|
Apr 2 05:00:30 splunk3 sendmail[30579]: n32C0T5s030579: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:00:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:00:53 splunk3 sendmail[30693]: n32C0r9c030693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:01:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:01:12 splunk3 sendmail[30744]: n32C118K030744: from=root, size=443, class=0, nrcpts=1, msgid=<200904021201.n32C118K030744@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 05:01:12 splunk3 sendmail[30784]: n32C1C19030784: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021201.n32C118K030744@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 05:01:12 splunk3 sendmail[30744]: n32C118K030744: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32C1C19030784 Message accepted for delivery)
|
|
Apr 2 05:01:13 splunk3 sendmail[30785]: n32C1C19030784: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:01:53 splunk3 sendmail[30945]: n32C1rqC030945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:02:53 splunk3 sendmail[31179]: n32C2r6u031179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:03:53 splunk3 sendmail[31419]: n32C3rKU031419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:04:53 splunk3 sendmail[31655]: n32C4rAY031655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:05:20 splunk3 sendmail[31772]: n32C5K1X031772: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021205.n32C5KNY008658@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:05:20 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54275
|
|
Apr 2 05:05:20 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:05:20 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 05:05:20 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 05:05:20 splunk3 sendmail[31773]: n32C5K1X031772: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:05:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:05:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:05:53 splunk3 sendmail[31914]: n32C5rQp031914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:06:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:06:53 splunk3 sendmail[32153]: n32C6r4w032153: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:07:53 splunk3 sendmail[32391]: n32C7rbw032391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:08:53 splunk3 sendmail[32627]: n32C8rgP032627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:09:54 splunk3 sendmail[402]: n32C9rxL000402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:10:02 splunk3 sendmail[557]: n32CA2fO000557: from=root, size=292, class=0, nrcpts=1, msgid=<200904021210.n32CA2fO000557@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 05:10:02 splunk3 sendmail[562]: n32CA2Th000562: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021210.n32CA2fO000557@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 05:10:02 splunk3 sendmail[557]: n32CA2fO000557: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32CA2Th000562 Message accepted for delivery)
|
|
Apr 2 05:10:03 splunk3 sendmail[563]: n32CA2Th000562: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:10:21 splunk3 sendmail[641]: n32CALaC000641: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021210.n32CAKx0009273@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:10:21 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54340
|
|
Apr 2 05:10:21 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:10:21 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:10:21 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:10:21 splunk3 spamd[22930]: spamd: processing message <200904021210.n32CAKx0009273@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:10:23 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 2 05:10:23 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54340,mid=<200904021210.n32CAKx0009273@virt2.int.splunk.com>,bayes=0.169780116761104,autolearn=no
|
|
Apr 2 05:10:23 splunk3 sendmail[642]: n32CALaC000641: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:10:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:10:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:10:54 splunk3 sendmail[767]: n32CAsDY000767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:11:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 05:11:54 splunk3 sendmail[1011]: n32CBsrZ001011: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:12:54 splunk3 sendmail[1246]: n32CCs0K001246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:13:54 splunk3 sendmail[1486]: n32CDsCb001486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:14:54 splunk3 sendmail[1723]: n32CEsaG001723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:15:21 splunk3 sendmail[1855]: n32CFLgR001855: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021215.n32CFLvi010058@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:15:21 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54396
|
|
Apr 2 05:15:21 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:15:21 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:15:21 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:15:21 splunk3 spamd[22930]: spamd: processing message <200904021215.n32CFLvi010058@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:15:23 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 05:15:23 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54396,mid=<200904021215.n32CFLvi010058@virt2.int.splunk.com>,bayes=0.112766097445973,autolearn=no
|
|
Apr 2 05:15:23 splunk3 sendmail[1856]: n32CFLgR001855: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:15:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:15:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:15:54 splunk3 sendmail[1980]: n32CFsOe001980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:16:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:16:15 splunk3 sendmail[2049]: n32CGDu6002049: from=<sudhakarb@barnagreatlakes.com>, size=2153, class=0, nrcpts=1, msgid=<0543019db4b9$288484f8$4cfaeb5e@barnagreatlakes.com>, proto=ESMTP, daemon=MTA, relay=[89.46.179.125]
|
|
Apr 2 05:16:15 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54407
|
|
Apr 2 05:16:15 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:16:15 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:16:15 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:16:15 splunk3 spamd[22930]: spamd: processing message <0543019db4b9$288484f8$4cfaeb5e@barnagreatlakes.com> for spamme:501
|
|
Apr 2 05:16:17 splunk3 spamd[22930]: spamd: identified spam (41.7/5.0) for spamme:501 in 2.8 seconds, 2441 bytes.
|
|
Apr 2 05:16:17 splunk3 spamd[22930]: spamd: result: Y 41 - BAYES_99,DATE_IN_FUTURE_96_XX,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,REPLICA_WATCH,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.8,size=2441,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54407,mid=<0543019db4b9$288484f8$4cfaeb5e@barnagreatlakes.com>,bayes=1,autolearn=spam
|
|
Apr 2 05:16:17 splunk3 sendmail[2085]: n32CGDu6002049: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=32330, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:16:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:16:54 splunk3 sendmail[2225]: n32CGsRq002225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:17:54 splunk3 sendmail[2466]: n32CHs6P002466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:18:54 splunk3 sendmail[2709]: n32CIsqg002709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:19:54 splunk3 sendmail[2959]: n32CJsHE002959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:20:22 splunk3 sendmail[3099]: n32CKM0A003099: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021220.n32CKLbC010689@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:20:22 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54453
|
|
Apr 2 05:20:22 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:20:22 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:20:22 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:20:22 splunk3 spamd[22930]: spamd: processing message <200904021220.n32CKLbC010689@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:20:24 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 05:20:24 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54453,mid=<200904021220.n32CKLbC010689@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 05:20:24 splunk3 sendmail[3100]: n32CKM0A003099: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:20:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:20:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:20:54 splunk3 sendmail[3231]: n32CKsHj003231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:21:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:21:54 splunk3 sendmail[3472]: n32CLsAF003472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:22:54 splunk3 sendmail[3732]: n32CMssU003732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:23:54 splunk3 sendmail[3978]: n32CNsNd003978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:24:54 splunk3 sendmail[4232]: n32COsJr004232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:25:22 splunk3 sendmail[4377]: n32CPMfV004377: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021225.n32CPMld011295@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:25:22 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54508
|
|
Apr 2 05:25:22 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:25:22 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:25:22 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:25:22 splunk3 spamd[22930]: spamd: processing message <200904021225.n32CPMld011295@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:25:24 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 05:25:24 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54508,mid=<200904021225.n32CPMld011295@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 05:25:24 splunk3 sendmail[4378]: n32CPMfV004377: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:25:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:25:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:25:54 splunk3 sendmail[4503]: n32CPsFp004503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:26:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 05:26:54 splunk3 sendmail[4745]: n32CQsQo004745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:27:54 splunk3 sendmail[4994]: n32CRslr004994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:28:54 splunk3 sendmail[5264]: n32CSsCI005264: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:29:54 splunk3 sendmail[5505]: n32CTsSN005505: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:30:23 splunk3 sendmail[5642]: n32CUNEi005642: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021230.n32CUM6f011916@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:30:23 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54564
|
|
Apr 2 05:30:23 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:30:23 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:30:23 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:30:23 splunk3 spamd[22930]: spamd: processing message <200904021230.n32CUM6f011916@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:30:25 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 2 05:30:25 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54564,mid=<200904021230.n32CUM6f011916@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 05:30:25 splunk3 sendmail[5643]: n32CUNEi005642: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:30:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:30:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:30:54 splunk3 sendmail[5766]: n32CUsHG005766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:31:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:31:54 splunk3 sendmail[6008]: n32CVs6L006008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:32:54 splunk3 sendmail[6243]: n32CWsh1006243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:33:54 splunk3 sendmail[6482]: n32CXsGc006482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:34:54 splunk3 sendmail[6719]: n32CYsLu006719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:35:23 splunk3 sendmail[6849]: n32CZN56006849: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021235.n32CZNIq012661@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:35:23 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54619
|
|
Apr 2 05:35:23 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:35:23 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:35:23 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:35:23 splunk3 spamd[22930]: spamd: processing message <200904021235.n32CZNIq012661@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:35:25 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 05:35:25 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54619,mid=<200904021235.n32CZNIq012661@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 05:35:25 splunk3 sendmail[6850]: n32CZN56006849: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:35:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:35:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:35:54 splunk3 sendmail[6977]: n32CZsG4006977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:36:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:36:54 splunk3 sendmail[7212]: n32Cas1N007212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:37:54 splunk3 sendmail[7451]: n32Cbs5Q007451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:38:54 splunk3 sendmail[7701]: n32CcsSg007701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:39:54 splunk3 sendmail[7941]: n32Cdsbe007941: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:40:23 splunk3 sendmail[8074]: n32CeNXj008074: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021240.n32CeNFZ013297@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:40:23 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54675
|
|
Apr 2 05:40:23 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:40:23 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:40:23 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:40:23 splunk3 spamd[22930]: spamd: processing message <200904021240.n32CeNFZ013297@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:40:26 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 05:40:26 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54675,mid=<200904021240.n32CeNFZ013297@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 05:40:26 splunk3 sendmail[8075]: n32CeNXj008074: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:40:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:40:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:40:54 splunk3 sendmail[8202]: n32CesdE008202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:41:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 05:41:54 splunk3 sendmail[8447]: n32CfsXk008447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:42:35 splunk3 sendmail[8625]: n32CgZ1c008625: from=<3u7LUSRQKBoww44w1uq1u798-347u51Ew44w1u.s4285q22u851A30y9.s42@alerts.bounces.google.com>, size=5261, class=0, nrcpts=1, msgid=<0016e646426237f9ea046691c42d@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.189]
|
|
Apr 2 05:42:35 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54698
|
|
Apr 2 05:42:35 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:42:35 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:42:35 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:42:35 splunk3 spamd[22930]: spamd: processing message <0016e646426237f9ea046691c42d@google.com> for spamme:501
|
|
Apr 2 05:42:37 splunk3 spamd[22930]: spamd: clean message (-1.3/5.0) for spamme:501 in 1.3 seconds, 5691 bytes.
|
|
Apr 2 05:42:37 splunk3 spamd[22930]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=1.3,size=5691,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54698,mid=<0016e646426237f9ea046691c42d@google.com>,bayes=0,autolearn=no
|
|
Apr 2 05:42:37 splunk3 sendmail[8626]: n32CgZ1c008625: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=35472, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:42:37 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:42:54 splunk3 sendmail[8686]: n32CgsVV008686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:43:54 splunk3 sendmail[8921]: n32ChsCL008921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:44:54 splunk3 sendmail[9178]: n32CisIq009178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:45:24 splunk3 sendmail[9314]: n32CjOHX009314: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021245.n32CjOva013905@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:45:24 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54732
|
|
Apr 2 05:45:24 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:45:24 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:45:24 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:45:24 splunk3 spamd[22930]: spamd: processing message <200904021245.n32CjOva013905@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:45:27 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 05:45:27 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54732,mid=<200904021245.n32CjOva013905@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 05:45:27 splunk3 sendmail[9315]: n32CjOHX009314: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:45:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:45:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:45:54 splunk3 sendmail[9437]: n32CjsFw009437: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:46:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:46:54 splunk3 sendmail[9687]: n32CksT8009687: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:47:54 splunk3 sendmail[9925]: n32Clsvt009925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:48:54 splunk3 sendmail[10160]: n32Cmsdb010160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:49:54 splunk3 sendmail[10398]: n32CnsYr010398: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:50:24 splunk3 sendmail[10533]: n32CoOPI010533: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021250.n32CoOpf014529@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:50:24 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54788
|
|
Apr 2 05:50:24 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:50:24 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:50:24 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:50:24 splunk3 spamd[22930]: spamd: processing message <200904021250.n32CoOpf014529@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:50:26 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 2 05:50:26 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54788,mid=<200904021250.n32CoOpf014529@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 05:50:26 splunk3 sendmail[10534]: n32CoOPI010533: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:50:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:50:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:50:54 splunk3 sendmail[10656]: n32CosfK010656: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:51:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:51:54 splunk3 sendmail[10900]: n32Cps1h010900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:52:54 splunk3 sendmail[11136]: n32CqsDC011136: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:53:54 splunk3 sendmail[11380]: n32CrsdU011380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:54:54 splunk3 sendmail[11616]: n32CssFx011616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:55:25 splunk3 sendmail[11747]: n32CtPDm011747: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021255.n32CtPNS015131@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 05:55:25 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54844
|
|
Apr 2 05:55:25 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 05:55:25 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 05:55:25 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 05:55:25 splunk3 spamd[22930]: spamd: processing message <200904021255.n32CtPNS015131@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 05:55:27 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 05:55:27 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54844,mid=<200904021255.n32CtPNS015131@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 05:55:27 splunk3 sendmail[11748]: n32CtPDm011747: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 05:55:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 05:55:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 05:55:54 splunk3 sendmail[11876]: n32Ctsul011876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:56:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 05:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 05:56:54 splunk3 sendmail[12111]: n32Cus8C012111: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:57:54 splunk3 sendmail[12349]: n32Cvsuo012349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:58:54 splunk3 sendmail[12585]: n32CwsDP012585: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 05:59:54 splunk3 sendmail[12827]: n32CxsU9012827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:00:04 splunk3 sendmail[12933]: n32D04Cu012933: from=root, size=291, class=0, nrcpts=1, msgid=<200904021300.n32D04Cu012933@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 06:00:04 splunk3 sendmail[12937]: n32D041u012937: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021300.n32D04Cu012933@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 06:00:04 splunk3 sendmail[12933]: n32D04Cu012933: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32D041u012937 Message accepted for delivery)
|
|
Apr 2 06:00:05 splunk3 sendmail[12955]: n32D05FL012955: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904021300.n32D05FL012955@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 06:00:05 splunk3 sendmail[12958]: n32D05FL012955: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 06:00:05 splunk3 sendmail[12958]: n32D05FL012955: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 06:00:05 splunk3 sendmail[12958]: n32D05FL012955: n32D05FL012958: postmaster notify: User unknown
|
|
Apr 2 06:00:06 splunk3 sendmail[12938]: n32D041u012937: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:00:14 splunk3 sendmail[12958]: n32D05FL012958: to=root, delay=00:00:09, xdelay=00:00:09, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:00:26 splunk3 sendmail[13050]: n32D0PVW013050: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021300.n32D0PJm015781@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:00:26 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54908
|
|
Apr 2 06:00:26 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:00:26 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 06:00:26 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 06:00:26 splunk3 sendmail[13051]: n32D0PVW013050: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:00:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:00:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:00:54 splunk3 sendmail[13172]: n32D0srE013172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:01:02 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:01:11 splunk3 sendmail[13200]: n32D11Yi013200: from=root, size=443, class=0, nrcpts=1, msgid=<200904021301.n32D11Yi013200@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 06:01:12 splunk3 sendmail[13254]: n32D1Bi3013254: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021301.n32D11Yi013200@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 06:01:12 splunk3 sendmail[13200]: n32D11Yi013200: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32D1Bi3013254 Message accepted for delivery)
|
|
Apr 2 06:01:13 splunk3 sendmail[13255]: n32D1Bi3013254: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:01:54 splunk3 sendmail[13466]: n32D1st4013466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:02:54 splunk3 sendmail[13703]: n32D2sQx013703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:03:54 splunk3 sendmail[13937]: n32D3s99013937: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:04:54 splunk3 sendmail[14172]: n32D4sEh014172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:05:26 splunk3 sendmail[14310]: n32D5QET014310: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021305.n32D5QSG016465@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:05:26 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54965
|
|
Apr 2 06:05:26 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:05:26 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 06:05:26 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 06:05:26 splunk3 sendmail[14311]: n32D5QET014310: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:05:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:05:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:05:54 splunk3 sendmail[14431]: n32D5see014431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:06:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:06:54 splunk3 sendmail[14668]: n32D6sCu014668: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:07:54 splunk3 sendmail[14907]: n32D7sJE014907: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:08:54 splunk3 sendmail[15147]: n32D8si5015147: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:09:54 splunk3 sendmail[15391]: n32D9sSs015391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:09:56 splunk3 sendmail[15392]: n32D9tYE015392: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=118-160-237-23.dynamic.hinet.net [118.160.237.23], reject=550 5.7.1 <bibiorm@gmail.com>... Relaying denied
|
|
Apr 2 06:10:02 splunk3 sendmail[15509]: n32DA2C5015509: from=root, size=292, class=0, nrcpts=1, msgid=<200904021310.n32DA2C5015509@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 06:10:02 splunk3 sendmail[15514]: n32DA2g0015514: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021310.n32DA2C5015509@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 06:10:02 splunk3 sendmail[15509]: n32DA2C5015509: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32DA2g0015514 Message accepted for delivery)
|
|
Apr 2 06:10:03 splunk3 sendmail[15515]: n32DA2g0015514: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:10:27 splunk3 sendmail[15628]: n32DARsN015628: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021310.n32DAR4Q017082@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:10:27 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55021
|
|
Apr 2 06:10:27 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:10:27 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:10:27 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:10:27 splunk3 spamd[22930]: spamd: processing message <200904021310.n32DAR4Q017082@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:10:29 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 06:10:29 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55021,mid=<200904021310.n32DAR4Q017082@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 06:10:29 splunk3 sendmail[15629]: n32DARsN015628: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:10:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:10:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:10:54 splunk3 sendmail[15751]: n32DAs97015751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:11:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 06:11:54 splunk3 sendmail[15994]: n32DBs7J015994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:12:54 splunk3 sendmail[16230]: n32DCsZh016230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:13:54 splunk3 sendmail[16470]: n32DDsuh016470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:14:54 splunk3 sendmail[16707]: n32DEsKV016707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:15:28 splunk3 sendmail[16841]: n32DFRFE016841: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021315.n32DFRtD017894@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:15:28 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55078
|
|
Apr 2 06:15:28 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:15:28 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:15:28 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:15:28 splunk3 spamd[22930]: spamd: processing message <200904021315.n32DFRtD017894@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:15:30 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 06:15:30 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55078,mid=<200904021315.n32DFRtD017894@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 06:15:30 splunk3 sendmail[16842]: n32DFRFE016841: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:15:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:15:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:15:54 splunk3 sendmail[16966]: n32DFsCg016966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:16:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:16:54 splunk3 sendmail[17205]: n32DGsYJ017205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:17:54 splunk3 sendmail[17440]: n32DHsvr017440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:18:54 splunk3 sendmail[17673]: n32DIsKs017673: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:19:54 splunk3 sendmail[17913]: n32DJsH1017913: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:20:28 splunk3 sendmail[18052]: n32DKSvA018052: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021320.n32DKSEQ018502@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:20:28 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55133
|
|
Apr 2 06:20:28 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:20:28 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:20:28 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:20:28 splunk3 spamd[22930]: spamd: processing message <200904021320.n32DKSEQ018502@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:20:30 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 06:20:30 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55133,mid=<200904021320.n32DKSEQ018502@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 06:20:30 splunk3 sendmail[18053]: n32DKSvA018052: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:20:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:20:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:20:54 splunk3 sendmail[18176]: n32DKsat018176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:21:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:21:54 splunk3 sendmail[18417]: n32DLs4n018417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:22:54 splunk3 sendmail[18652]: n32DMsCV018652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:23:54 splunk3 sendmail[18897]: n32DNssK018897: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:24:54 splunk3 sendmail[19130]: n32DOsw3019130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:25:29 splunk3 sendmail[19282]: n32DPTgR019282: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021325.n32DPS63019128@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:25:29 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55189
|
|
Apr 2 06:25:29 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:25:29 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:25:29 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:25:29 splunk3 spamd[22930]: spamd: processing message <200904021325.n32DPS63019128@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:25:31 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1308 bytes.
|
|
Apr 2 06:25:31 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55189,mid=<200904021325.n32DPS63019128@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 06:25:31 splunk3 sendmail[19283]: n32DPTgR019282: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:25:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:25:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:25:54 splunk3 sendmail[19387]: n32DPsnO019387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:26:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 06:26:54 splunk3 sendmail[19630]: n32DQsAt019630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:27:54 splunk3 sendmail[19871]: n32DRspa019871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:28:54 splunk3 sendmail[20106]: n32DSsnx020106: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:29:54 splunk3 sendmail[20347]: n32DTsBG020347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:30:00 splunk3 sendmail[20366]: n32DU0I9020366: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021330.n32DU07w019648@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:30:00 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55234
|
|
Apr 2 06:30:00 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:30:00 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:30:00 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:30:00 splunk3 spamd[22930]: spamd: processing message <200904021330.n32DU07w019648@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:30:02 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 06:30:02 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55234,mid=<200904021330.n32DU07w019648@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 06:30:02 splunk3 sendmail[20367]: n32DU0I9020366: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:30:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:30:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:30:54 splunk3 sendmail[20609]: n32DUs2t020609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:31:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:31:54 splunk3 sendmail[20848]: n32DVsUU020848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:32:54 splunk3 sendmail[21081]: n32DWs2E021081: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:33:54 splunk3 sendmail[21321]: n32DXsHf021321: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:34:54 splunk3 sendmail[21558]: n32DYsoa021558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:35:01 splunk3 sendmail[21580]: n32DZ0iF021580: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021335.n32DZ0UU020396@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:35:01 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55289
|
|
Apr 2 06:35:01 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:35:01 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:35:01 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:35:01 splunk3 spamd[22930]: spamd: processing message <200904021335.n32DZ0UU020396@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:35:03 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 06:35:03 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55289,mid=<200904021335.n32DZ0UU020396@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 06:35:03 splunk3 sendmail[21581]: n32DZ0iF021580: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:35:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:35:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:35:54 splunk3 sendmail[21818]: n32DZsC4021818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:36:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:36:54 splunk3 sendmail[22056]: n32Dasja022056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:37:54 splunk3 sendmail[22295]: n32DbsbQ022295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:38:54 splunk3 sendmail[22531]: n32DcsXe022531: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:39:54 splunk3 sendmail[22769]: n32DdsgJ022769: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:40:01 splunk3 sendmail[22794]: n32De1vv022794: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021340.n32De1fD021011@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:40:01 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55345
|
|
Apr 2 06:40:01 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:40:01 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:40:01 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:40:01 splunk3 spamd[22930]: spamd: processing message <200904021340.n32De1fD021011@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:40:03 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 06:40:03 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55345,mid=<200904021340.n32De1fD021011@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 06:40:03 splunk3 sendmail[22795]: n32De1vv022794: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:40:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:40:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:40:54 splunk3 sendmail[23032]: n32DesYk023032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:41:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 06:41:54 splunk3 sendmail[23277]: n32Dfser023277: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:42:54 splunk3 sendmail[23512]: n32DgsI8023512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:43:54 splunk3 sendmail[23751]: n32DhsIV023751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:44:54 splunk3 sendmail[23990]: n32Disld023990: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:45:01 splunk3 sendmail[24012]: n32Dj1L2024012: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021345.n32Dj1Ib021682@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:45:01 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55401
|
|
Apr 2 06:45:01 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:45:01 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:45:01 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:45:01 splunk3 spamd[22930]: spamd: processing message <200904021345.n32Dj1Ib021682@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:45:05 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 3.3 seconds, 1308 bytes.
|
|
Apr 2 06:45:05 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=3.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55401,mid=<200904021345.n32Dj1Ib021682@virt2.int.splunk.com>,bayes=0.112761622762798,autolearn=no
|
|
Apr 2 06:45:05 splunk3 sendmail[24013]: n32Dj1L2024012: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:45:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:45:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:45:54 splunk3 sendmail[24245]: n32DjsFf024245: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:46:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:46:54 splunk3 sendmail[24481]: n32DksOZ024481: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:47:54 splunk3 sendmail[24722]: n32DlsPp024722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:48:46 splunk3 sendmail[24783]: n32DmBSC024783: from=<shu_chiei@domainnews.com>, size=5752, class=0, nrcpts=1, msgid=<d769019db9c2$41b0792e$69112c5e@domainnews.com>, proto=ESMTP, daemon=MTA, relay=[190.65.71.52]
|
|
Apr 2 06:48:46 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55445
|
|
Apr 2 06:48:46 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:48:46 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:48:46 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:48:46 splunk3 spamd[22930]: spamd: processing message <d769019db9c2$41b0792e$69112c5e@domainnews.com> for spamme:501
|
|
Apr 2 06:48:49 splunk3 spamd[22930]: spamd: identified spam (25.0/5.0) for spamme:501 in 2.7 seconds, 6029 bytes.
|
|
Apr 2 06:48:49 splunk3 spamd[22930]: spamd: result: Y 24 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_JP_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=2.7,size=6029,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55445,mid=<d769019db9c2$41b0792e$69112c5e@domainnews.com>,bayes=1,autolearn=spam
|
|
Apr 2 06:48:49 splunk3 sendmail[24921]: n32DmBSC024783: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:03, mailer=local, pri=35928, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:48:49 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:48:54 splunk3 sendmail[24964]: n32DmsIt024964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:49:54 splunk3 sendmail[25204]: n32Dns9l025204: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:50:02 splunk3 sendmail[25229]: n32Do2Ad025229: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021350.n32Do2qO022293@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:50:02 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55458
|
|
Apr 2 06:50:02 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:50:02 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:50:02 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:50:02 splunk3 spamd[22930]: spamd: processing message <200904021350.n32Do2qO022293@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:50:04 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 06:50:04 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55458,mid=<200904021350.n32Do2qO022293@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 06:50:04 splunk3 sendmail[25230]: n32Do2Ad025229: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:50:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:50:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:50:54 splunk3 sendmail[25466]: n32DossB025466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:51:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:51:54 splunk3 sendmail[25709]: n32Dps6Y025709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:52:54 splunk3 sendmail[25940]: n32Dqsm8025940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:53:54 splunk3 sendmail[26180]: n32DrsU3026180: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:54:54 splunk3 sendmail[26417]: n32DssHo026417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:55:03 splunk3 sendmail[26445]: n32Dt26H026445: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021355.n32Dt2tu022899@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 06:55:03 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55514
|
|
Apr 2 06:55:03 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 06:55:03 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 06:55:03 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 06:55:03 splunk3 spamd[22930]: spamd: processing message <200904021355.n32Dt2tu022899@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 06:55:05 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 06:55:05 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55514,mid=<200904021355.n32Dt2tu022899@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 06:55:05 splunk3 sendmail[26446]: n32Dt26H026445: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 06:55:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 06:55:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 06:55:54 splunk3 sendmail[26677]: n32DtsIo026677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:56:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 06:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 06:56:54 splunk3 sendmail[26917]: n32DusYD026917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:57:54 splunk3 sendmail[27154]: n32DvssN027154: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:58:54 splunk3 sendmail[27390]: n32DwsaW027390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 06:59:54 splunk3 sendmail[27628]: n32DxsAf027628: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:00:03 splunk3 sendmail[27725]: n32E03cc027725: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021400.n32E03bV023566@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:00:03 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55570
|
|
Apr 2 07:00:03 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:00:03 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 07:00:03 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 07:00:03 splunk3 sendmail[27726]: n32E03cc027725: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:00:04 splunk3 sendmail[27738]: n32E04nS027738: from=root, size=291, class=0, nrcpts=1, msgid=<200904021400.n32E04nS027738@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 07:00:04 splunk3 sendmail[27742]: n32E04YS027742: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021400.n32E04nS027738@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 07:00:04 splunk3 sendmail[27738]: n32E04nS027738: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32E04YS027742 Message accepted for delivery)
|
|
Apr 2 07:00:05 splunk3 sendmail[27743]: n32E04YS027742: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:00:10 splunk3 sendmail[27776]: n32E0AuH027776: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904021400.n32E0AuH027776@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 07:00:10 splunk3 sendmail[27778]: n32E0AuH027776: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 07:00:10 splunk3 sendmail[27778]: n32E0AuH027776: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 07:00:10 splunk3 sendmail[27778]: n32E0AuH027776: n32E0AuH027778: postmaster notify: User unknown
|
|
Apr 2 07:00:11 splunk3 sendmail[27778]: n32E0AuH027778: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:00:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:00:54 splunk3 sendmail[27970]: n32E0sG4027970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:01:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:01:03 splunk3 sendmail[28004]: n32E11oo028004: from=root, size=443, class=0, nrcpts=1, msgid=<200904021401.n32E11oo028004@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 07:01:04 splunk3 sendmail[28026]: n32E13s0028026: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021401.n32E11oo028004@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 07:01:04 splunk3 sendmail[28004]: n32E11oo028004: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32E13s0028026 Message accepted for delivery)
|
|
Apr 2 07:01:05 splunk3 sendmail[28027]: n32E13s0028026: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:01:54 splunk3 sendmail[28227]: n32E1sOS028227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:02:54 splunk3 sendmail[28464]: n32E2sxr028464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:03:54 splunk3 sendmail[28703]: n32E3sSk028703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:04:54 splunk3 sendmail[28939]: n32E4s5L028939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:05:03 splunk3 sendmail[28979]: n32E533s028979: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021405.n32E53aH024254@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:05:03 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55635
|
|
Apr 2 07:05:03 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:05:03 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 07:05:03 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 07:05:03 splunk3 sendmail[28980]: n32E533s028979: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:05:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:05:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:05:54 splunk3 sendmail[29199]: n32E5slH029199: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:06:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:06:54 splunk3 sendmail[29434]: n32E6sr1029434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:07:54 splunk3 sendmail[29669]: n32E7sOu029669: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:08:54 splunk3 sendmail[29908]: n32E8smo029908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:09:54 splunk3 sendmail[30151]: n32E9s3S030151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:09:56 splunk3 sendmail[15392]: n32D9tYE015392: timeout waiting for input from 118-160-237-23.dynamic.hinet.net during server cmd read
|
|
Apr 2 07:09:56 splunk3 sendmail[15392]: n32D9tYE015392: lost input channel from 118-160-237-23.dynamic.hinet.net [118.160.237.23] to MTA after rcpt
|
|
Apr 2 07:09:56 splunk3 sendmail[15392]: n32D9tYE015392: from=<neal_chen99@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-160-237-23.dynamic.hinet.net [118.160.237.23]
|
|
Apr 2 07:10:02 splunk3 sendmail[30268]: n32EA2Mg030268: from=root, size=292, class=0, nrcpts=1, msgid=<200904021410.n32EA2Mg030268@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 07:10:02 splunk3 sendmail[30273]: n32EA2ad030273: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021410.n32EA2Mg030268@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 07:10:02 splunk3 sendmail[30268]: n32EA2Mg030268: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32EA2ad030273 Message accepted for delivery)
|
|
Apr 2 07:10:03 splunk3 sendmail[30274]: n32EA2ad030273: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:10:04 splunk3 sendmail[30297]: n32EA4H3030297: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021410.n32EA4sE024870@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:10:04 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55691
|
|
Apr 2 07:10:04 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:10:04 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:10:04 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:10:04 splunk3 spamd[22930]: spamd: processing message <200904021410.n32EA4sE024870@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:10:06 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 07:10:06 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55691,mid=<200904021410.n32EA4sE024870@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:10:06 splunk3 sendmail[30298]: n32EA4H3030297: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:10:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:10:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:10:54 splunk3 sendmail[30515]: n32EAsMN030515: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:11:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 07:11:54 splunk3 sendmail[30759]: n32EBsWI030759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:12:54 splunk3 sendmail[30994]: n32ECsDY030994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:13:54 splunk3 sendmail[31230]: n32EDs2Q031230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:14:55 splunk3 sendmail[31464]: n32EEscq031464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:15:05 splunk3 sendmail[31510]: n32EF5lY031510: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021415.n32EF4BH025662@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:15:05 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55748
|
|
Apr 2 07:15:05 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:15:05 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:15:05 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:15:05 splunk3 spamd[22930]: spamd: processing message <200904021415.n32EF4BH025662@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:15:07 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 07:15:07 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55748,mid=<200904021415.n32EF4BH025662@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:15:07 splunk3 sendmail[31511]: n32EF5lY031510: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:15:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:15:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:15:55 splunk3 sendmail[31724]: n32EFtWT031724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:16:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:16:55 splunk3 sendmail[31963]: n32EGtgZ031963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:17:55 splunk3 sendmail[32203]: n32EHtdh032203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:18:55 splunk3 sendmail[32438]: n32EItbC032438: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:19:55 splunk3 sendmail[32680]: n32EJt2e032680: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:20:06 splunk3 sendmail[32722]: n32EK6Y7032722: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021420.n32EK5ZV026299@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:20:06 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55803
|
|
Apr 2 07:20:06 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:20:06 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:20:06 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:20:06 splunk3 spamd[22930]: spamd: processing message <200904021420.n32EK5ZV026299@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:20:08 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 07:20:08 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55803,mid=<200904021420.n32EK5ZV026299@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:20:08 splunk3 sendmail[32723]: n32EK6Y7032722: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:20:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:20:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:20:55 splunk3 sendmail[473]: n32EKtxa000473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:21:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:21:55 splunk3 sendmail[712]: n32ELtDL000712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:22:55 splunk3 sendmail[948]: n32EMtwb000948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:23:55 splunk3 sendmail[1191]: n32ENtY4001191: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:24:55 splunk3 sendmail[1428]: n32EOt9d001428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:25:06 splunk3 sendmail[1468]: n32EP6Eg001468: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021425.n32EP60M026905@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:25:06 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55859
|
|
Apr 2 07:25:06 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:25:06 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:25:06 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:25:06 splunk3 spamd[22930]: spamd: processing message <200904021425.n32EP60M026905@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:25:08 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Apr 2 07:25:08 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55859,mid=<200904021425.n32EP60M026905@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:25:08 splunk3 sendmail[1469]: n32EP6Eg001468: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:25:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:25:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:25:55 splunk3 sendmail[1688]: n32EPtS5001688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:26:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 07:26:55 splunk3 sendmail[1930]: n32EQtY7001930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:27:55 splunk3 sendmail[2167]: n32ERt0R002167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:28:55 splunk3 sendmail[2399]: n32EStgh002399: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:29:55 splunk3 sendmail[2645]: n32ETtPL002645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:30:07 splunk3 sendmail[2695]: n32EU74L002695: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021430.n32EU6Mn027524@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:30:07 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55915
|
|
Apr 2 07:30:07 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:30:07 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:30:07 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:30:07 splunk3 spamd[22930]: spamd: processing message <200904021430.n32EU6Mn027524@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:30:09 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 07:30:09 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55915,mid=<200904021430.n32EU6Mn027524@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:30:09 splunk3 sendmail[2696]: n32EU74L002695: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:30:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:30:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:30:55 splunk3 sendmail[2921]: n32EUtFr002921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:31:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:31:55 splunk3 sendmail[3172]: n32EVtIM003172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:32:55 splunk3 sendmail[3409]: n32EWtF9003409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:33:55 splunk3 sendmail[3671]: n32EXt4h003671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:34:55 splunk3 sendmail[3912]: n32EYtLo003912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:35:07 splunk3 sendmail[3973]: n32EZ7pn003973: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021435.n32EZ70v028274@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:35:07 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55971
|
|
Apr 2 07:35:07 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:35:07 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:35:07 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:35:07 splunk3 spamd[22930]: spamd: processing message <200904021435.n32EZ70v028274@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:35:10 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 07:35:10 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55971,mid=<200904021435.n32EZ70v028274@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:35:10 splunk3 sendmail[3974]: n32EZ7pn003973: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:35:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:35:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:35:55 splunk3 sendmail[4184]: n32EZtLk004184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:36:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:36:55 splunk3 sendmail[4438]: n32EatU5004438: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:37:55 splunk3 sendmail[4694]: n32EbtO7004694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:38:55 splunk3 sendmail[4943]: n32EctLD004943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:39:55 splunk3 sendmail[5219]: n32EdtIN005219: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:40:09 splunk3 sendmail[5278]: n32Ee9mq005278: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021440.n32Ee8Nu028916@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:40:09 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56027
|
|
Apr 2 07:40:09 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:40:09 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:40:09 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:40:09 splunk3 spamd[22930]: spamd: processing message <200904021440.n32Ee8Nu028916@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:40:11 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 07:40:11 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56027,mid=<200904021440.n32Ee8Nu028916@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:40:12 splunk3 sendmail[5280]: n32Ee9mq005278: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:40:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:40:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:40:55 splunk3 sendmail[5484]: n32Eetsd005484: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:41:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 07:41:55 splunk3 sendmail[5724]: n32Eftaj005724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:42:55 splunk3 sendmail[5956]: n32EgtVR005956: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:43:03 splunk3 sendmail[5985]: n32Eh2YN005985: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=118-169-208-192.dynamic.hinet.net [118.169.208.192], reject=550 5.7.1 <bibiorm@gmail.com>... Relaying denied
|
|
Apr 2 07:43:55 splunk3 sendmail[6196]: n32EhtDv006196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:44:55 splunk3 sendmail[6433]: n32EitY7006433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:45:12 splunk3 sendmail[6497]: n32EjC8U006497: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021445.n32Ej97g029523@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:45:12 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56083
|
|
Apr 2 07:45:12 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:45:12 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:45:12 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:45:12 splunk3 spamd[22930]: spamd: processing message <200904021445.n32Ej97g029523@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:45:14 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 07:45:14 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56083,mid=<200904021445.n32Ej97g029523@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:45:14 splunk3 sendmail[6498]: n32EjC8U006497: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:45:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:45:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:45:55 splunk3 sendmail[6694]: n32EjtDX006694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:46:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:46:55 splunk3 sendmail[6932]: n32EktlS006932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:47:55 splunk3 sendmail[7172]: n32Elt77007172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:48:55 splunk3 sendmail[7404]: n32EmtXT007404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:49:55 splunk3 sendmail[7650]: n32Entgx007650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:50:12 splunk3 sendmail[7716]: n32EoC7f007716: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021450.n32EoCiY030137@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:50:12 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56139
|
|
Apr 2 07:50:12 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:50:12 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:50:12 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:50:12 splunk3 spamd[22930]: spamd: processing message <200904021450.n32EoCiY030137@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:50:14 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 2 07:50:14 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56139,mid=<200904021450.n32EoCiY030137@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:50:14 splunk3 sendmail[7733]: n32EoC7f007716: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:50:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:50:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:50:55 splunk3 sendmail[7913]: n32Eot1Y007913: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:51:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:51:55 splunk3 sendmail[8156]: n32Ept2x008156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:52:55 splunk3 sendmail[8391]: n32Eqts1008391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:53:55 splunk3 sendmail[8636]: n32ErtUA008636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:54:55 splunk3 sendmail[8871]: n32EstEC008871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:55:13 splunk3 sendmail[8947]: n32EtDiE008947: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021455.n32EtC18030747@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 07:55:13 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56195
|
|
Apr 2 07:55:13 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 07:55:13 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 07:55:13 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 07:55:13 splunk3 spamd[22930]: spamd: processing message <200904021455.n32EtC18030747@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 07:55:15 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 07:55:15 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56195,mid=<200904021455.n32EtC18030747@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 07:55:15 splunk3 sendmail[8948]: n32EtDiE008947: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 07:55:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 07:55:48 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 07:55:55 splunk3 sendmail[9127]: n32Ettk3009127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:56:04 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 07:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 07:56:55 splunk3 sendmail[9365]: n32EutIQ009365: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:57:55 splunk3 sendmail[9615]: n32EvtxO009615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:58:55 splunk3 sendmail[9851]: n32Ewtok009851: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 07:59:55 splunk3 sendmail[10091]: n32ExteG010091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:00:04 splunk3 sendmail[10193]: n32F04l9010193: from=root, size=291, class=0, nrcpts=1, msgid=<200904021500.n32F04l9010193@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 08:00:04 splunk3 sendmail[10197]: n32F04pD010197: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021500.n32F04l9010193@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 08:00:04 splunk3 sendmail[10193]: n32F04l9010193: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32F04pD010197 Message accepted for delivery)
|
|
Apr 2 08:00:05 splunk3 sendmail[10198]: n32F04pD010197: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:00:14 splunk3 sendmail[10243]: n32F0EwP010243: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021500.n32F0DtL031388@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:00:14 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56252
|
|
Apr 2 08:00:14 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:00:14 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 08:00:14 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 08:00:14 splunk3 sendmail[10244]: n32F0EwP010243: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:00:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:00:15 splunk3 sendmail[10260]: n32F0FuD010260: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904021500.n32F0FuD010260@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 08:00:15 splunk3 sendmail[10262]: n32F0FuD010260: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 08:00:15 splunk3 sendmail[10262]: n32F0FuD010260: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 08:00:15 splunk3 sendmail[10262]: n32F0FuD010260: n32F0FuD010262: postmaster notify: User unknown
|
|
Apr 2 08:00:17 splunk3 sendmail[10262]: n32F0FuD010262: to=root, delay=00:00:02, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:00:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:00:55 splunk3 sendmail[10437]: n32F0t1C010437: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:01:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:01:15 splunk3 sendmail[10467]: n32F11fh010467: from=root, size=443, class=0, nrcpts=1, msgid=<200904021501.n32F11fh010467@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 08:01:15 splunk3 sendmail[10528]: n32F1FJc010528: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021501.n32F11fh010467@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 08:01:15 splunk3 sendmail[10467]: n32F11fh010467: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32F1FJc010528 Message accepted for delivery)
|
|
Apr 2 08:01:17 splunk3 sendmail[10529]: n32F1FJc010528: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:01:55 splunk3 sendmail[10690]: n32F1tEa010690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:02:55 splunk3 sendmail[10921]: n32F2to4010921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:03:55 splunk3 sendmail[11158]: n32F3t09011158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:04:55 splunk3 sendmail[11392]: n32F4tbD011392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:05:15 splunk3 sendmail[11473]: n32F5FLV011473: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021505.n32F5Eb7032070@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:05:15 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56316
|
|
Apr 2 08:05:15 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:05:15 splunk3 spamd[22930]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 08:05:15 splunk3 spamd[22930]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 08:05:15 splunk3 sendmail[11474]: n32F5FLV011473: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:05:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:05:55 splunk3 sendmail[11653]: n32F5tYW011653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:06:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:06:55 splunk3 sendmail[11891]: n32F6tpA011891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:07:55 splunk3 sendmail[12130]: n32F7tfU012130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:08:55 splunk3 sendmail[12370]: n32F8tSs012370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:09:55 splunk3 sendmail[12606]: n32F9toZ012606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:10:03 splunk3 sendmail[12746]: n32FA3Nk012746: from=root, size=292, class=0, nrcpts=1, msgid=<200904021510.n32FA3Nk012746@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 08:10:03 splunk3 sendmail[12751]: n32FA3Ep012751: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021510.n32FA3Nk012746@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 08:10:03 splunk3 sendmail[12746]: n32FA3Nk012746: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32FA3Ep012751 Message accepted for delivery)
|
|
Apr 2 08:10:04 splunk3 sendmail[12752]: n32FA3Ep012751: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:10:16 splunk3 sendmail[12791]: n32FAGLs012791: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021510.n32FAF5r032679@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:10:16 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56372
|
|
Apr 2 08:10:16 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:10:16 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:10:16 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:10:16 splunk3 spamd[22930]: spamd: processing message <200904021510.n32FAF5r032679@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:10:18 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 08:10:18 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56372,mid=<200904021510.n32FAF5r032679@virt2.int.splunk.com>,bayes=0.112757148444021,autolearn=no
|
|
Apr 2 08:10:18 splunk3 sendmail[12792]: n32FAGLs012791: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:10:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:10:55 splunk3 sendmail[12971]: n32FAtO5012971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:11:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 08:11:55 splunk3 sendmail[13216]: n32FBthg013216: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:12:55 splunk3 sendmail[13492]: n32FCtFR013492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:13:55 splunk3 sendmail[13730]: n32FDtBV013730: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:14:55 splunk3 sendmail[13968]: n32FEtkf013968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:15:17 splunk3 sendmail[14066]: n32FFH9S014066: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021515.n32FFGAu001013@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:15:17 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56437
|
|
Apr 2 08:15:17 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:15:17 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:15:17 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:15:17 splunk3 spamd[22930]: spamd: processing message <200904021515.n32FFGAu001013@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:15:19 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 08:15:19 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56437,mid=<200904021515.n32FFGAu001013@virt2.int.splunk.com>,bayes=0.16976939482101,autolearn=no
|
|
Apr 2 08:15:19 splunk3 sendmail[14076]: n32FFH9S014066: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:15:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:15:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:15:48 splunk3 sendmail[14199]: n32FFlff014199: from=<3o9bUSRQKBpg8GG8D62D6JLK-FGJ6HDQ8GG8D6.4GEKH2EE6KHDMFCAL.4GE@alerts.bounces.google.com>, size=2731, class=0, nrcpts=1, msgid=<00151750dbe2255bb8046693e8ca@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 2 08:15:48 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56443
|
|
Apr 2 08:15:48 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:15:48 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:15:48 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:15:48 splunk3 spamd[22930]: spamd: processing message <00151750dbe2255bb8046693e8ca@google.com> for spamme:501
|
|
Apr 2 08:15:51 splunk3 spamd[22930]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.6 seconds, 3165 bytes.
|
|
Apr 2 08:15:51 splunk3 spamd[22930]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.6,size=3165,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56443,mid=<00151750dbe2255bb8046693e8ca@google.com>,bayes=0,autolearn=ham
|
|
Apr 2 08:15:51 splunk3 sendmail[14200]: n32FFlff014199: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=32946, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:15:51 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:15:55 splunk3 sendmail[14230]: n32FFtkj014230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:16:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:16:55 splunk3 sendmail[14464]: n32FGtrh014464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:17:55 splunk3 sendmail[14703]: n32FHtRi014703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:18:55 splunk3 sendmail[14938]: n32FIt5B014938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:19:55 splunk3 sendmail[15178]: n32FJtcx015178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:20:18 splunk3 sendmail[15289]: n32FKIIV015289: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021520.n32FKHYh001676@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:20:18 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56494
|
|
Apr 2 08:20:18 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:20:18 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:20:18 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:20:18 splunk3 spamd[22930]: spamd: processing message <200904021520.n32FKHYh001676@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:20:20 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 2 08:20:20 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56494,mid=<200904021520.n32FKHYh001676@virt2.int.splunk.com>,bayes=0.169807367911464,autolearn=no
|
|
Apr 2 08:20:20 splunk3 sendmail[15290]: n32FKIIV015289: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:20:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:20:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:20:55 splunk3 sendmail[15441]: n32FKtjR015441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:21:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:21:55 splunk3 sendmail[15683]: n32FLtUC015683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:22:55 splunk3 sendmail[15918]: n32FMtGu015918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:23:55 splunk3 sendmail[16157]: n32FNtRW016157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:24:55 splunk3 sendmail[16394]: n32FOtHG016394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:25:18 splunk3 sendmail[16502]: n32FPIMQ016502: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021525.n32FPIvY002298@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:25:18 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56549
|
|
Apr 2 08:25:18 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:25:18 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:25:18 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:25:18 splunk3 spamd[22930]: spamd: processing message <200904021525.n32FPIvY002298@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:25:20 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1305 bytes.
|
|
Apr 2 08:25:20 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56549,mid=<200904021525.n32FPIvY002298@virt2.int.splunk.com>,bayes=0.169807367911464,autolearn=no
|
|
Apr 2 08:25:20 splunk3 sendmail[16503]: n32FPIMQ016502: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:25:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:25:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:25:55 splunk3 sendmail[16654]: n32FPtS1016654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:26:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 08:26:55 splunk3 sendmail[16895]: n32FQtrD016895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:27:55 splunk3 sendmail[17134]: n32FRt8R017134: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:28:55 splunk3 sendmail[17368]: n32FSt5E017368: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:29:55 splunk3 sendmail[17609]: n32FTt0a017609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:30:19 splunk3 sendmail[17720]: n32FUJh0017720: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021530.n32FUJKG002913@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:30:19 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56606
|
|
Apr 2 08:30:19 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:30:19 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:30:19 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:30:19 splunk3 spamd[22930]: spamd: processing message <200904021530.n32FUJKG002913@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:30:21 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 08:30:21 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56606,mid=<200904021530.n32FUJKG002913@virt2.int.splunk.com>,bayes=0.169807367911464,autolearn=no
|
|
Apr 2 08:30:21 splunk3 sendmail[17721]: n32FUJh0017720: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:30:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:30:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:30:55 splunk3 sendmail[17866]: n32FUtgH017866: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:31:01 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:31:55 splunk3 sendmail[18107]: n32FVtg7018107: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:32:55 splunk3 sendmail[18342]: n32FWtvk018342: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:33:55 splunk3 sendmail[18581]: n32FXtIi018581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:34:55 splunk3 sendmail[18816]: n32FYtuw018816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:35:20 splunk3 sendmail[18926]: n32FZKJe018926: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021535.n32FZKeO003661@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:35:20 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56661
|
|
Apr 2 08:35:20 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:35:20 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:35:20 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:35:20 splunk3 spamd[22930]: spamd: processing message <200904021535.n32FZKeO003661@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:35:22 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 08:35:22 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56661,mid=<200904021535.n32FZKeO003661@virt2.int.splunk.com>,bayes=0.169807367911464,autolearn=no
|
|
Apr 2 08:35:22 splunk3 sendmail[18927]: n32FZKJe018926: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:35:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:35:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:35:55 splunk3 sendmail[19077]: n32FZtSf019077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:36:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:36:55 splunk3 sendmail[19314]: n32FatQW019314: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:37:55 splunk3 sendmail[19549]: n32FbtL0019549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:38:55 splunk3 sendmail[19790]: n32FcteD019790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:39:55 splunk3 sendmail[20030]: n32Fdtx6020030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:40:21 splunk3 sendmail[20141]: n32FeLGK020141: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021540.n32FeKBg004300@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:40:21 splunk3 spamd[22930]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56717
|
|
Apr 2 08:40:21 splunk3 spamd[22930]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:40:21 splunk3 spamd[22930]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:40:21 splunk3 spamd[22930]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:40:21 splunk3 spamd[22930]: spamd: processing message <200904021540.n32FeKBg004300@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:40:23 splunk3 spamd[22930]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 08:40:23 splunk3 spamd[22930]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56717,mid=<200904021540.n32FeKBg004300@virt2.int.splunk.com>,bayes=0.169807367911464,autolearn=no
|
|
Apr 2 08:40:23 splunk3 sendmail[20142]: n32FeLGK020141: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:40:23 splunk3 spamd[3033]: prefork: child states: BI
|
|
Apr 2 08:40:23 splunk3 spamd[3033]: spamd: handled cleanup of child pid 22930 due to SIGCHLD
|
|
Apr 2 08:40:23 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 20168
|
|
Apr 2 08:40:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:40:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:40:55 splunk3 sendmail[20294]: n32Fet7k020294: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:41:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 08:41:55 splunk3 sendmail[20538]: n32Fftjp020538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:42:55 splunk3 sendmail[20773]: n32FgtA3020773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:43:03 splunk3 sendmail[5985]: n32Eh2YN005985: timeout waiting for input from 118-169-208-192.dynamic.hinet.net during server cmd read
|
|
Apr 2 08:43:03 splunk3 sendmail[5985]: n32Eh2YN005985: lost input channel from 118-169-208-192.dynamic.hinet.net [118.169.208.192] to MTA after rcpt
|
|
Apr 2 08:43:03 splunk3 sendmail[5985]: n32Eh2YN005985: from=<hitomi1218@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-169-208-192.dynamic.hinet.net [118.169.208.192]
|
|
Apr 2 08:43:55 splunk3 sendmail[21012]: n32FhtLN021012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:44:55 splunk3 sendmail[21243]: n32Fitp3021243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:45:22 splunk3 sendmail[21377]: n32FjMn2021377: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021545.n32FjLOg004907@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:45:22 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56774
|
|
Apr 2 08:45:22 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:45:22 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:45:22 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:45:22 splunk3 spamd[20168]: spamd: processing message <200904021545.n32FjLOg004907@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:45:24 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1305 bytes.
|
|
Apr 2 08:45:24 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56774,mid=<200904021545.n32FjLOg004907@virt2.int.splunk.com>,bayes=0.169807367911464,autolearn=no
|
|
Apr 2 08:45:24 splunk3 sendmail[21378]: n32FjMn2021377: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:45:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:45:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:45:55 splunk3 sendmail[21502]: n32FjtPk021502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:46:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:46:55 splunk3 sendmail[21739]: n32FktMM021739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:47:55 splunk3 sendmail[21979]: n32Flt56021979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:48:55 splunk3 sendmail[22213]: n32Fmtgg022213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:49:55 splunk3 sendmail[22452]: n32Fntnt022452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:50:23 splunk3 sendmail[22585]: n32FoN8F022585: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021550.n32FoMZb005530@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:50:23 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56829
|
|
Apr 2 08:50:23 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:50:23 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:50:23 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:50:23 splunk3 spamd[20168]: spamd: processing message <200904021550.n32FoMZb005530@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:50:25 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 08:50:25 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56829,mid=<200904021550.n32FoMZb005530@virt2.int.splunk.com>,bayes=0.169807367911464,autolearn=no
|
|
Apr 2 08:50:25 splunk3 sendmail[22586]: n32FoN8F022585: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:50:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:50:55 splunk3 sendmail[22715]: n32Fotp0022715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:51:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:51:55 splunk3 sendmail[22952]: n32Fpt3m022952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:52:55 splunk3 sendmail[23185]: n32Fqt1S023185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:53:55 splunk3 sendmail[23430]: n32FrtjJ023430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:54:29 splunk3 sendmail[23569]: n32FsSst023569: ruleset=check_rcpt, arg1=<spamery@tiscali.it>, relay=dslStat-45.nccray.com [66.97.229.45], reject=550 5.7.1 <spamery@tiscali.it>... Relaying denied
|
|
Apr 2 08:54:29 splunk3 sendmail[23569]: n32FsSst023569: from=<spamery@tiscali.it>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=dslStat-45.nccray.com [66.97.229.45]
|
|
Apr 2 08:54:55 splunk3 sendmail[23667]: n32Fst24023667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:55:23 splunk3 sendmail[23796]: n32FtNSJ023796: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021555.n32FtNQ9006133@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 08:55:23 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56885
|
|
Apr 2 08:55:23 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:55:23 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:55:23 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:55:23 splunk3 spamd[20168]: spamd: processing message <200904021555.n32FtNQ9006133@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 08:55:25 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 08:55:25 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56885,mid=<200904021555.n32FtNQ9006133@virt2.int.splunk.com>,bayes=0.169807367911464,autolearn=no
|
|
Apr 2 08:55:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:55:25 splunk3 sendmail[23797]: n32FtNSJ023796: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:55:38 splunk3 sendmail[23860]: n32FtcN3023860: from=<tmorton@splunk.com>, size=2233, class=0, nrcpts=1, msgid=<C5FA4A28.3E27%tmorton@splunk.com>, proto=ESMTP, daemon=MTA, relay=exhub017-3.exch017.msoutlookonline.net [64.78.22.18]
|
|
Apr 2 08:55:38 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56888
|
|
Apr 2 08:55:38 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:55:38 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:55:38 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:55:38 splunk3 spamd[20168]: spamd: processing message <C5FA4A28.3E27%tmorton@splunk.com> for spamme:501
|
|
Apr 2 08:55:40 splunk3 spamd[20168]: spamd: clean message (-2.6/5.0) for spamme:501 in 1.8 seconds, 2558 bytes.
|
|
Apr 2 08:55:40 splunk3 spamd[20168]: spamd: result: . -2 - BAYES_00,HTML_MESSAGE scantime=1.8,size=2558,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56888,mid=<C5FA4A28.3E27%tmorton@splunk.com>,bayes=9.43076394754883e-10,autolearn=ham
|
|
Apr 2 08:55:40 splunk3 sendmail[23861]: n32FtcN3023860: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32473, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:55:40 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:55:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 08:55:49 splunk3 sendmail[23910]: n32FtniB023910: from=<3BODUSRQKBgMjrrjohdohuwv-qruhso1jrrjoh.frpvsdpphvsoxqnlw.frp@alerts.bounces.google.com>, size=7569, class=0, nrcpts=1, msgid=<0016369fa251438dcf04669477c9@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.191]
|
|
Apr 2 08:55:49 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56891
|
|
Apr 2 08:55:49 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 08:55:49 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 08:55:49 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 08:55:49 splunk3 spamd[20168]: spamd: processing message <0016369fa251438dcf04669477c9@google.com> for spamme:501
|
|
Apr 2 08:55:52 splunk3 spamd[20168]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.3 seconds, 7999 bytes.
|
|
Apr 2 08:55:52 splunk3 spamd[20168]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.3,size=7999,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56891,mid=<0016369fa251438dcf04669477c9@google.com>,bayes=0,autolearn=ham
|
|
Apr 2 08:55:52 splunk3 sendmail[23912]: n32FtniB023910: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=37780, dsn=2.0.0, stat=Sent
|
|
Apr 2 08:55:52 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 08:55:55 splunk3 sendmail[23939]: n32FttBw023939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:56:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 08:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 08:56:55 splunk3 sendmail[24179]: n32Futfm024179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:57:55 splunk3 sendmail[24418]: n32FvtR1024418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:58:55 splunk3 sendmail[24648]: n32FwtHU024648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 08:59:55 splunk3 sendmail[24889]: n32FxtAT024889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:00:05 splunk3 sendmail[24997]: n32G05bB024997: from=root, size=291, class=0, nrcpts=1, msgid=<200904021600.n32G05bB024997@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 09:00:05 splunk3 sendmail[25001]: n32G05dQ025001: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021600.n32G05bB024997@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 09:00:05 splunk3 sendmail[24997]: n32G05bB024997: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32G05dQ025001 Message accepted for delivery)
|
|
Apr 2 09:00:06 splunk3 sendmail[25002]: n32G05dQ025001: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:00:21 splunk3 sendmail[25071]: n32G0LcU025071: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904021600.n32G0LcU025071@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 09:00:21 splunk3 sendmail[25073]: n32G0LcU025071: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 09:00:21 splunk3 sendmail[25073]: n32G0LcU025071: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 09:00:21 splunk3 sendmail[25073]: n32G0LcU025071: n32G0LcU025073: postmaster notify: User unknown
|
|
Apr 2 09:00:23 splunk3 sendmail[25073]: n32G0LcU025073: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:00:24 splunk3 sendmail[25109]: n32G0OaY025109: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021600.n32G0OGc006771@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:00:24 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56951
|
|
Apr 2 09:00:24 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:00:24 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 09:00:24 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 09:00:24 splunk3 sendmail[25110]: n32G0OaY025109: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:00:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:00:55 splunk3 sendmail[25234]: n32G0tcW025234: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:01:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:01:07 splunk3 sendmail[25264]: n32G11AN025264: from=root, size=443, class=0, nrcpts=1, msgid=<200904021601.n32G11AN025264@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 09:01:07 splunk3 sendmail[25305]: n32G17sp025305: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021601.n32G11AN025264@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 09:01:07 splunk3 sendmail[25264]: n32G11AN025264: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32G17sp025305 Message accepted for delivery)
|
|
Apr 2 09:01:08 splunk3 sendmail[25306]: n32G17sp025305: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:01:55 splunk3 sendmail[25488]: n32G1tUD025488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:02:55 splunk3 sendmail[25723]: n32G2tON025723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:03:30 splunk3 sendmail[25861]: n32G3Uok025861: from=<30eHUSRQKBtE3BB381x81EGF-ABE1C8L3BB381.zB9FCx991FC8HA75G.zB9@alerts.bounces.google.com>, size=2811, class=0, nrcpts=1, msgid=<001517570894bda385046694921f@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.165]
|
|
Apr 2 09:03:30 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56984
|
|
Apr 2 09:03:30 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:03:30 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 09:03:30 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 09:03:30 splunk3 sendmail[25864]: n32G3Uok025861: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=33021, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:03:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:03:55 splunk3 sendmail[25966]: n32G3tpa025966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:04:55 splunk3 sendmail[26200]: n32G4tFQ026200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:05:25 splunk3 sendmail[26331]: n32G5PPf026331: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021605.n32G5OTR007447@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:05:25 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57009
|
|
Apr 2 09:05:25 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:05:25 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 09:05:25 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 09:05:25 splunk3 sendmail[26332]: n32G5PPf026331: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:05:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:05:55 splunk3 sendmail[26455]: n32G5tHM026455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:06:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:06:55 splunk3 sendmail[26692]: n32G6tbn026692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:07:55 splunk3 sendmail[26931]: n32G7tGd026931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:08:55 splunk3 sendmail[27171]: n32G8tju027171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:09:55 splunk3 sendmail[27412]: n32G9tRi027412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:10:02 splunk3 sendmail[27545]: n32GA2eW027545: from=root, size=292, class=0, nrcpts=1, msgid=<200904021610.n32GA2eW027545@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 09:10:02 splunk3 sendmail[27550]: n32GA2Os027550: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021610.n32GA2eW027545@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 09:10:02 splunk3 sendmail[27545]: n32GA2eW027545: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32GA2Os027550 Message accepted for delivery)
|
|
Apr 2 09:10:04 splunk3 sendmail[27551]: n32GA2Os027550: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:10:25 splunk3 sendmail[27647]: n32GAPMm027647: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021610.n32GAPgV008066@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:10:25 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57065
|
|
Apr 2 09:10:25 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:10:25 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:10:25 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:10:25 splunk3 spamd[20168]: spamd: processing message <200904021610.n32GAPgV008066@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:10:27 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 2 09:10:27 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57065,mid=<200904021610.n32GAPgV008066@virt2.int.splunk.com>,bayes=0.168466673655115,autolearn=no
|
|
Apr 2 09:10:27 splunk3 sendmail[27648]: n32GAPMm027647: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:10:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:10:55 splunk3 sendmail[27777]: n32GAtHO027777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:11:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 09:11:55 splunk3 sendmail[28021]: n32GBtCE028021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:12:55 splunk3 sendmail[28251]: n32GCt87028251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:13:55 splunk3 sendmail[28496]: n32GDtCI028496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:14:55 splunk3 sendmail[28732]: n32GEtEJ028732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:15:26 splunk3 sendmail[28868]: n32GFQMJ028868: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021615.n32GFPhh008855@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:15:26 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57122
|
|
Apr 2 09:15:26 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:15:26 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:15:26 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:15:26 splunk3 spamd[20168]: spamd: processing message <200904021615.n32GFPhh008855@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:15:28 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1305 bytes.
|
|
Apr 2 09:15:28 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57122,mid=<200904021615.n32GFPhh008855@virt2.int.splunk.com>,bayes=0.168466673655115,autolearn=no
|
|
Apr 2 09:15:28 splunk3 sendmail[28869]: n32GFQMJ028868: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:15:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:15:55 splunk3 sendmail[28993]: n32GFtZM028993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:16:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:16:55 splunk3 sendmail[29232]: n32GGtiM029232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:17:55 splunk3 sendmail[29469]: n32GHtYH029469: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:18:55 splunk3 sendmail[29703]: n32GIt32029703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:19:55 splunk3 sendmail[29938]: n32GJtvG029938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:20:29 splunk3 sendmail[30091]: n32GKTbd030091: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021620.n32GKQm4009490@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:20:29 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57178
|
|
Apr 2 09:20:29 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:20:29 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:20:29 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:20:29 splunk3 spamd[20168]: spamd: processing message <200904021620.n32GKQm4009490@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:20:31 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 2 09:20:31 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57178,mid=<200904021620.n32GKQm4009490@virt2.int.splunk.com>,bayes=0.168466673655115,autolearn=no
|
|
Apr 2 09:20:31 splunk3 sendmail[30092]: n32GKTbd030091: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:20:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:20:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:20:56 splunk3 sendmail[30198]: n32GKtDV030198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:21:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:21:56 splunk3 sendmail[30441]: n32GLuag030441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:22:56 splunk3 sendmail[30677]: n32GMuGA030677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:23:56 splunk3 sendmail[30919]: n32GNuZw030919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:24:56 splunk3 sendmail[31152]: n32GOuFE031152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:25:30 splunk3 sendmail[31299]: n32GPUur031299: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021625.n32GPTYt010131@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:25:30 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57233
|
|
Apr 2 09:25:30 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:25:30 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:25:30 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:25:30 splunk3 spamd[20168]: spamd: processing message <200904021625.n32GPTYt010131@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:25:32 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 09:25:32 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57233,mid=<200904021625.n32GPTYt010131@virt2.int.splunk.com>,bayes=0.111638940301793,autolearn=no
|
|
Apr 2 09:25:32 splunk3 sendmail[31300]: n32GPUur031299: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:25:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:25:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:25:50 splunk3 sendmail[31328]: n32GPaq3031328: from=<stuarti@techlawadvisor.com>, size=5718, class=0, nrcpts=1, msgid=<2e0e019db81a$b80a25c0$95c1eb8f@techlawadvisor.com>, proto=ESMTP, daemon=MTA, relay=[78.97.54.115]
|
|
Apr 2 09:25:51 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57238
|
|
Apr 2 09:25:51 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:25:51 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:25:51 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:25:51 splunk3 spamd[20168]: spamd: processing message <2e0e019db81a$b80a25c0$95c1eb8f@techlawadvisor.com> for spamme:501
|
|
Apr 2 09:25:53 splunk3 spamd[20168]: spamd: identified spam (34.9/5.0) for spamme:501 in 2.4 seconds, 5999 bytes.
|
|
Apr 2 09:25:53 splunk3 spamd[20168]: spamd: result: Y 34 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.4,size=5999,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57238,mid=<2e0e019db81a$b80a25c0$95c1eb8f@techlawadvisor.com>,bayes=1,autolearn=spam
|
|
Apr 2 09:25:53 splunk3 sendmail[31386]: n32GPaq3031328: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:02, mailer=local, pri=35894, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:25:53 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:25:56 splunk3 sendmail[31418]: n32GPudb031418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:26:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 09:26:56 splunk3 sendmail[31653]: n32GQuld031653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:27:56 splunk3 sendmail[31892]: n32GRuhd031892: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:28:56 splunk3 sendmail[32129]: n32GSut4032129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:29:56 splunk3 sendmail[32369]: n32GTuxC032369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:30:01 splunk3 sendmail[32393]: n32GU1kr032393: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021630.n32GU0PV010646@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:30:01 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57278
|
|
Apr 2 09:30:01 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:30:01 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:30:01 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:30:01 splunk3 spamd[20168]: spamd: processing message <200904021630.n32GU0PV010646@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:30:03 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 09:30:03 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57278,mid=<200904021630.n32GU0PV010646@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 09:30:03 splunk3 sendmail[32394]: n32GU1kr032393: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:30:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:30:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:30:56 splunk3 sendmail[32631]: n32GUuWr032631: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:31:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:31:56 splunk3 sendmail[406]: n32GVuFq000406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:32:56 splunk3 sendmail[639]: n32GWuIf000639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:33:56 splunk3 sendmail[874]: n32GXukT000874: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:34:56 splunk3 sendmail[1109]: n32GYuQc001109: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:35:02 splunk3 sendmail[1152]: n32GZ2fT001152: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021635.n32GZ1BS011439@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:35:02 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57334
|
|
Apr 2 09:35:02 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:35:02 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:35:02 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:35:02 splunk3 spamd[20168]: spamd: processing message <200904021635.n32GZ1BS011439@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:35:04 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 09:35:04 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57334,mid=<200904021635.n32GZ1BS011439@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 09:35:04 splunk3 sendmail[1153]: n32GZ2fT001152: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:35:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:35:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:35:56 splunk3 sendmail[1369]: n32GZunj001369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:36:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:36:56 splunk3 sendmail[1608]: n32Gaucr001608: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:37:32 splunk3 sendmail[1749]: n32GbSZS001749: from=<spamme@splunkit.com>, size=2744, class=0, nrcpts=1, msgid=<200904021637.n32GbSZS001749@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=[89.20.23.148]
|
|
Apr 2 09:37:32 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57367
|
|
Apr 2 09:37:32 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:37:32 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:37:32 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:37:32 splunk3 spamd[20168]: spamd: processing message <200904021637.n32GbSZS001749@splunk3.splunkit.com> for spamme:501
|
|
Apr 2 09:37:34 splunk3 spamd[20168]: spamd: identified spam (26.2/5.0) for spamme:501 in 2.7 seconds, 3111 bytes.
|
|
Apr 2 09:37:34 splunk3 spamd[20168]: spamd: result: Y 26 - AWL,BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.7,size=3111,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57367,mid=<200904021637.n32GbSZS001749@splunk3.splunkit.com>,bayes=1,autolearn=no
|
|
Apr 2 09:37:34 splunk3 sendmail[1768]: n32GbSZS001749: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:02, mailer=local, pri=33033, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:37:34 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:37:56 splunk3 sendmail[1854]: n32Gbu23001854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:38:56 splunk3 sendmail[2094]: n32GcurC002094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:39:56 splunk3 sendmail[2331]: n32Gduhd002331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:40:02 splunk3 sendmail[2373]: n32Ge2NH002373: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021640.n32Ge2v4012075@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:40:02 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57390
|
|
Apr 2 09:40:02 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:40:02 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:40:02 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:40:02 splunk3 spamd[20168]: spamd: processing message <200904021640.n32Ge2v4012075@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:40:04 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Apr 2 09:40:04 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57390,mid=<200904021640.n32Ge2v4012075@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 09:40:04 splunk3 sendmail[2374]: n32Ge2NH002373: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:40:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:40:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:40:56 splunk3 sendmail[2595]: n32GeuNQ002595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:41:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 09:41:56 splunk3 sendmail[2847]: n32GfuHu002847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:42:56 splunk3 sendmail[3092]: n32GguQJ003092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:43:56 splunk3 sendmail[3336]: n32GhuKg003336: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:44:56 splunk3 sendmail[3590]: n32Giuta003590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:45:03 splunk3 sendmail[3630]: n32Gj3Ph003630: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021645.n32Gj2Jj012684@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:45:03 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57447
|
|
Apr 2 09:45:03 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:45:03 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:45:03 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:45:03 splunk3 spamd[20168]: spamd: processing message <200904021645.n32Gj2Jj012684@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:45:05 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 09:45:05 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57447,mid=<200904021645.n32Gj2Jj012684@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 09:45:05 splunk3 sendmail[3631]: n32Gj3Ph003630: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:45:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:45:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:45:56 splunk3 sendmail[3860]: n32GjuhG003860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:46:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:46:56 splunk3 sendmail[4127]: n32Gkuvc004127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:47:56 splunk3 sendmail[4382]: n32Glu1f004382: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:48:56 splunk3 sendmail[4617]: n32GmuwU004617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:49:56 splunk3 sendmail[4859]: n32GnusV004859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:50:03 splunk3 sendmail[4887]: n32Go3da004887: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021650.n32Go38b013295@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:50:03 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57503
|
|
Apr 2 09:50:03 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:50:03 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:50:03 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:50:03 splunk3 spamd[20168]: spamd: processing message <200904021650.n32Go38b013295@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:50:06 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 09:50:06 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57503,mid=<200904021650.n32Go38b013295@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 09:50:06 splunk3 sendmail[4888]: n32Go3da004887: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:50:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:50:56 splunk3 sendmail[5167]: n32GouO0005167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:51:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:51:56 splunk3 sendmail[5413]: n32GpuS2005413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:52:56 splunk3 sendmail[5648]: n32GquNF005648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:53:56 splunk3 sendmail[5888]: n32Gru4u005888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:54:56 splunk3 sendmail[6120]: n32GsuRF006120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:55:04 splunk3 sendmail[6147]: n32Gt4u0006147: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021655.n32Gt3Wa013895@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 09:55:04 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57558
|
|
Apr 2 09:55:04 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 09:55:04 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 09:55:04 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 09:55:04 splunk3 spamd[20168]: spamd: processing message <200904021655.n32Gt3Wa013895@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 09:55:06 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 09:55:06 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57558,mid=<200904021655.n32Gt3Wa013895@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 09:55:06 splunk3 sendmail[6148]: n32Gt4u0006147: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 09:55:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 09:55:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 09:55:56 splunk3 sendmail[6379]: n32GtuNf006379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:56:03 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 09:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 09:56:56 splunk3 sendmail[6619]: n32Guuh7006619: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:57:56 splunk3 sendmail[6860]: n32GvuEf006860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:58:56 splunk3 sendmail[7097]: n32Gwuu2007097: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 09:59:56 splunk3 sendmail[7336]: n32Gxu9j007336: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:00:04 splunk3 sendmail[7422]: n32H04xs007422: from=root, size=291, class=0, nrcpts=1, msgid=<200904021700.n32H04xs007422@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 10:00:04 splunk3 sendmail[7426]: n32H04g2007426: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021700.n32H04xs007422@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 10:00:04 splunk3 sendmail[7422]: n32H04xs007422: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32H04g2007426 Message accepted for delivery)
|
|
Apr 2 10:00:04 splunk3 sendmail[7431]: n32H04jl007431: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021700.n32H045x014522@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:00:04 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57616
|
|
Apr 2 10:00:04 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:00:04 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 10:00:04 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 10:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:00:05 splunk3 sendmail[7432]: n32H04jl007431: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:00:05 splunk3 sendmail[7427]: n32H04g2007426: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:00:27 splunk3 sendmail[7550]: n32H0RYU007550: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904021700.n32H0RYU007550@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 10:00:27 splunk3 sendmail[7552]: n32H0RYU007550: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 10:00:27 splunk3 sendmail[7552]: n32H0RYU007550: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 2 10:00:27 splunk3 sendmail[7552]: n32H0RYU007550: n32H0RYU007552: postmaster notify: User unknown
|
|
Apr 2 10:00:28 splunk3 sendmail[7552]: n32H0RYU007552: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:00:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:00:56 splunk3 sendmail[7689]: n32H0uHU007689: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:01:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:01:11 splunk3 sendmail[7723]: n32H11cE007723: from=root, size=443, class=0, nrcpts=1, msgid=<200904021701.n32H11cE007723@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 10:01:11 splunk3 sendmail[7759]: n32H1Blo007759: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021701.n32H11cE007723@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 10:01:11 splunk3 sendmail[7723]: n32H11cE007723: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32H1Blo007759 Message accepted for delivery)
|
|
Apr 2 10:01:12 splunk3 sendmail[7760]: n32H1Blo007759: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:01:56 splunk3 sendmail[7942]: n32H1uRg007942: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:02:56 splunk3 sendmail[8177]: n32H2u1A008177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:03:09 splunk3 sendmail[8223]: n32H39v0008223: from=<3ze_USRQKBtsDLLDIB7IBOQP-KLOBMIVDLLDIB.9LJPM7JJBPMIRKHFQ.9LJ@alerts.bounces.google.com>, size=2802, class=0, nrcpts=1, msgid=<00151757089414bc8d046695681f@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.160]
|
|
Apr 2 10:03:09 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57661
|
|
Apr 2 10:03:09 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:03:09 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 10:03:09 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 10:03:09 splunk3 sendmail[8224]: n32H39v0008223: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=33012, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:03:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:03:56 splunk3 sendmail[8422]: n32H3ub1008422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:04:56 splunk3 sendmail[8659]: n32H4u4w008659: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:05:05 splunk3 sendmail[8681]: n32H55NJ008681: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021705.n32H55HJ015196@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:05:05 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57680
|
|
Apr 2 10:05:05 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:05:05 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 10:05:05 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 10:05:05 splunk3 sendmail[8682]: n32H55NJ008681: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:05:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:05:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:05:56 splunk3 sendmail[8918]: n32H5uhZ008918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:06:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:06:56 splunk3 sendmail[9155]: n32H6ukQ009155: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:07:56 splunk3 sendmail[9390]: n32H7un2009390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:08:56 splunk3 sendmail[9637]: n32H8uQq009637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:09:56 splunk3 sendmail[9878]: n32H9uTu009878: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:10:02 splunk3 sendmail[9999]: n32HA2uZ009999: from=root, size=292, class=0, nrcpts=1, msgid=<200904021710.n32HA2uZ009999@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 10:10:02 splunk3 sendmail[10003]: n32HA2aZ010003: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021710.n32HA2uZ009999@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 10:10:02 splunk3 sendmail[9999]: n32HA2uZ009999: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32HA2aZ010003 Message accepted for delivery)
|
|
Apr 2 10:10:03 splunk3 sendmail[10004]: n32HA2aZ010003: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:10:06 splunk3 sendmail[10027]: n32HA6BE010027: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021710.n32HA5JP015799@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:10:06 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57737
|
|
Apr 2 10:10:06 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:10:06 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:10:06 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:10:06 splunk3 spamd[20168]: spamd: processing message <200904021710.n32HA5JP015799@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:10:08 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 10:10:08 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57737,mid=<200904021710.n32HA5JP015799@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 10:10:09 splunk3 sendmail[10028]: n32HA6BE010027: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:10:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:10:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:10:56 splunk3 sendmail[10244]: n32HAuOR010244: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:11:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 10:11:56 splunk3 sendmail[10488]: n32HBuGB010488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:12:56 splunk3 sendmail[10723]: n32HCuZE010723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:13:56 splunk3 sendmail[10963]: n32HDucM010963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:14:56 splunk3 sendmail[11196]: n32HEuPI011196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:15:07 splunk3 sendmail[11238]: n32HF7eA011238: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021715.n32HF6Tu016582@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:15:07 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57793
|
|
Apr 2 10:15:07 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:15:07 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:15:07 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:15:07 splunk3 spamd[20168]: spamd: processing message <200904021715.n32HF6Tu016582@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:15:09 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 10:15:09 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57793,mid=<200904021715.n32HF6Tu016582@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 10:15:09 splunk3 sendmail[11239]: n32HF7eA011238: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:15:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:15:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:15:56 splunk3 sendmail[11453]: n32HFu5b011453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:16:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:16:56 splunk3 sendmail[11693]: n32HGuLI011693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:17:56 splunk3 sendmail[11933]: n32HHu3p011933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:18:56 splunk3 sendmail[12169]: n32HIuYa012169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:19:56 splunk3 sendmail[12409]: n32HJuLp012409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:20:08 splunk3 sendmail[12450]: n32HK8xr012450: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021720.n32HK7P1017205@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:20:08 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57849
|
|
Apr 2 10:20:08 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:20:08 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:20:08 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:20:08 splunk3 spamd[20168]: spamd: processing message <200904021720.n32HK7P1017205@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:20:10 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 2 10:20:10 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57849,mid=<200904021720.n32HK7P1017205@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 10:20:10 splunk3 sendmail[12451]: n32HK8xr012450: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:20:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:20:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:20:56 splunk3 sendmail[12670]: n32HKuiL012670: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:21:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:21:56 splunk3 sendmail[12911]: n32HLu3r012911: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:22:56 splunk3 sendmail[13144]: n32HMuje013144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:23:56 splunk3 sendmail[13427]: n32HNu4i013427: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:24:56 splunk3 sendmail[13663]: n32HOu7G013663: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:25:08 splunk3 sendmail[13706]: n32HP8JN013706: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021725.n32HP8np017806@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:25:08 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57905
|
|
Apr 2 10:25:08 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:25:08 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:25:08 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:25:09 splunk3 spamd[20168]: spamd: processing message <200904021725.n32HP8np017806@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:25:11 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 2 10:25:11 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57905,mid=<200904021725.n32HP8np017806@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 10:25:11 splunk3 sendmail[13707]: n32HP8JN013706: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:25:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:25:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:25:56 splunk3 sendmail[13924]: n32HPuII013924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:26:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 10:26:56 splunk3 sendmail[14163]: n32HQusI014163: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:27:56 splunk3 sendmail[14401]: n32HRu2F014401: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:28:56 splunk3 sendmail[14636]: n32HSutJ014636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:29:56 splunk3 sendmail[14872]: n32HTuj8014872: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:30:09 splunk3 sendmail[14920]: n32HU9PY014920: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021730.n32HU8Gu018426@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:30:09 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57961
|
|
Apr 2 10:30:09 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:30:09 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:30:09 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:30:09 splunk3 spamd[20168]: spamd: processing message <200904021730.n32HU8Gu018426@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:30:11 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 10:30:11 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57961,mid=<200904021730.n32HU8Gu018426@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 10:30:11 splunk3 sendmail[14921]: n32HU9PY014920: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:30:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:30:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:30:56 splunk3 sendmail[15134]: n32HUuct015134: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:31:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:31:56 splunk3 sendmail[15378]: n32HVuHR015378: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:32:56 splunk3 sendmail[15614]: n32HWu0T015614: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:33:56 splunk3 sendmail[15853]: n32HXu5l015853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:34:56 splunk3 sendmail[16089]: n32HYulN016089: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:35:09 splunk3 sendmail[16142]: n32HZ9b4016142: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021735.n32HZ9KM019173@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:35:09 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58025
|
|
Apr 2 10:35:09 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:35:09 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:35:09 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:35:09 splunk3 spamd[20168]: spamd: processing message <200904021735.n32HZ9KM019173@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:35:11 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 10:35:11 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58025,mid=<200904021735.n32HZ9KM019173@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 10:35:11 splunk3 sendmail[16143]: n32HZ9b4016142: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:35:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:35:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:35:56 splunk3 sendmail[16348]: n32HZuH1016348: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:36:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:36:56 splunk3 sendmail[16583]: n32Hauvh016583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:37:56 splunk3 sendmail[16823]: n32Hbud8016823: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:38:56 splunk3 sendmail[17063]: n32Hcuc8017063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:39:56 splunk3 sendmail[17302]: n32Hdua5017302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:40:11 splunk3 sendmail[17375]: n32HeBoI017375: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021740.n32He9Qx019806@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:40:11 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58080
|
|
Apr 2 10:40:11 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:40:11 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:40:11 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:40:11 splunk3 spamd[20168]: spamd: processing message <200904021740.n32He9Qx019806@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:40:13 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 10:40:13 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58080,mid=<200904021740.n32He9Qx019806@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 10:40:13 splunk3 sendmail[17377]: n32HeBoI017375: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:40:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:40:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:40:56 splunk3 sendmail[17564]: n32HeuII017564: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:41:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 10:41:56 splunk3 sendmail[17806]: n32HfuRY017806: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:42:56 splunk3 sendmail[18039]: n32HguBb018039: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:43:56 splunk3 sendmail[18275]: n32HhuMA018275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:44:56 splunk3 sendmail[18511]: n32Hiu2A018511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:45:14 splunk3 sendmail[18587]: n32HjDJK018587: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021745.n32HjBMn020422@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:45:14 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58137
|
|
Apr 2 10:45:14 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:45:14 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:45:14 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:45:14 splunk3 spamd[20168]: spamd: processing message <200904021745.n32HjBMn020422@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:45:16 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 10:45:16 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58137,mid=<200904021745.n32HjBMn020422@virt2.int.splunk.com>,bayes=0.111634486596012,autolearn=no
|
|
Apr 2 10:45:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:45:16 splunk3 sendmail[18588]: n32HjDJK018587: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:45:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:45:56 splunk3 sendmail[18772]: n32Hju7t018772: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:46:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:46:06 splunk3 sendmail[18796]: n32Hk3WN018796: from=<spamme@splunkit.com>, size=2745, class=0, nrcpts=1, msgid=<200904021746.n32Hk3WN018796@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=client-86-0-127-247.nrth.adsl.virgin.net [86.0.127.247]
|
|
Apr 2 10:46:06 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58148
|
|
Apr 2 10:46:06 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:46:06 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:46:06 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:46:06 splunk3 spamd[20168]: spamd: processing message <200904021746.n32Hk3WN018796@splunk3.splunkit.com> for spamme:501
|
|
Apr 2 10:46:10 splunk3 spamd[20168]: spamd: identified spam (40.8/5.0) for spamme:501 in 3.9 seconds, 3176 bytes.
|
|
Apr 2 10:46:10 splunk3 spamd[20168]: spamd: result: Y 40 - BAYES_99,HELO_DYNAMIC_HCC,HELO_DYNAMIC_IPADDR,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=3.9,size=3176,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58148,mid=<200904021746.n32Hk3WN018796@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 2 10:46:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:46:10 splunk3 sendmail[18818]: n32Hk3WN018796: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:06, xdelay=00:00:04, mailer=local, pri=33098, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:46:56 splunk3 sendmail[19018]: n32Hku96019018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:47:56 splunk3 sendmail[19257]: n32HludS019257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:48:56 splunk3 sendmail[19491]: n32Hmub7019491: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:49:56 splunk3 sendmail[19730]: n32HnuGM019730: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:50:14 splunk3 sendmail[19804]: n32HoEih019804: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021750.n32HoEHA021036@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:50:14 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58194
|
|
Apr 2 10:50:14 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:50:14 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:50:14 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:50:14 splunk3 spamd[20168]: spamd: processing message <200904021750.n32HoEHA021036@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:50:16 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 10:50:16 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58194,mid=<200904021750.n32HoEHA021036@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 10:50:16 splunk3 sendmail[19805]: n32HoEih019804: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:50:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:50:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:50:56 splunk3 sendmail[19989]: n32HoutQ019989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:51:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:51:56 splunk3 sendmail[20234]: n32HpuuW020234: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:52:56 splunk3 sendmail[20471]: n32Hqukw020471: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:53:56 splunk3 sendmail[20715]: n32Hruoj020715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:54:56 splunk3 sendmail[20950]: n32Hsufe020950: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:55:15 splunk3 sendmail[21024]: n32HtFCW021024: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021755.n32HtElY021647@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 10:55:15 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58249
|
|
Apr 2 10:55:15 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 10:55:15 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 10:55:15 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 10:55:15 splunk3 spamd[20168]: spamd: processing message <200904021755.n32HtElY021647@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 10:55:17 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 10:55:17 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58249,mid=<200904021755.n32HtElY021647@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 10:55:17 splunk3 sendmail[21025]: n32HtFCW021024: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 10:55:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 10:55:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 10:55:56 splunk3 sendmail[21210]: n32HtuFW021210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:56:00 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 10:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 10:56:56 splunk3 sendmail[21444]: n32Huuix021444: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:57:56 splunk3 sendmail[21679]: n32Hvuwr021679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:58:56 splunk3 sendmail[21915]: n32HwuLJ021915: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 10:59:00 splunk3 sendmail[21920]: n32HwxWN021920: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=219-85-42-125-adsl-TPE.dynamic.so-net.net.tw [219.85.42.125] (may be forged), reject=550 5.7.1 <bibiorm@gmail.com>... Relaying denied. IP name possibly forged [219.85.42.125]
|
|
Apr 2 10:59:56 splunk3 sendmail[22156]: n32HxuZw022156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:00:02 splunk3 sendmail[22243]: n32I02OD022243: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904021800.n32I02OD022243@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 11:00:02 splunk3 sendmail[22245]: n32I02OD022243: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 11:00:02 splunk3 sendmail[22245]: n32I02OD022243: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 11:00:02 splunk3 sendmail[22245]: n32I02OD022243: n32I02OD022245: postmaster notify: User unknown
|
|
Apr 2 11:00:04 splunk3 sendmail[22245]: n32I02OD022245: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:00:04 splunk3 sendmail[22270]: n32I04f0022270: from=root, size=291, class=0, nrcpts=1, msgid=<200904021800.n32I04f0022270@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 11:00:04 splunk3 sendmail[22273]: n32I04Fw022273: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021800.n32I04f0022270@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 11:00:04 splunk3 sendmail[22270]: n32I04f0022270: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32I04Fw022273 Message accepted for delivery)
|
|
Apr 2 11:00:05 splunk3 sendmail[22274]: n32I04Fw022273: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:00:15 splunk3 sendmail[22335]: n32I0F0w022335: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021800.n32I0F6G022287@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:00:15 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58314
|
|
Apr 2 11:00:15 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:00:15 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 11:00:15 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 11:00:15 splunk3 sendmail[22336]: n32I0F0w022335: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:00:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:00:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:00:56 splunk3 sendmail[22503]: n32I0u2L022503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:00:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:01:11 splunk3 sendmail[22533]: n32I11u7022533: from=root, size=443, class=0, nrcpts=1, msgid=<200904021801.n32I11u7022533@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 11:01:11 splunk3 sendmail[22577]: n32I1Bbt022577: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021801.n32I11u7022533@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 11:01:11 splunk3 sendmail[22533]: n32I11u7022533: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32I1Bbt022577 Message accepted for delivery)
|
|
Apr 2 11:01:12 splunk3 sendmail[22578]: n32I1Bbt022577: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:01:56 splunk3 sendmail[22759]: n32I1upG022759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:02:56 splunk3 sendmail[22994]: n32I2uKd022994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:03:56 splunk3 sendmail[23231]: n32I3u5T023231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:04:56 splunk3 sendmail[23465]: n32I4umj023465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:05:16 splunk3 sendmail[23557]: n32I5GSf023557: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021805.n32I5FbQ022969@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:05:16 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58370
|
|
Apr 2 11:05:16 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:05:16 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 11:05:16 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 11:05:16 splunk3 sendmail[23558]: n32I5GSf023557: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:05:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:05:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:05:56 splunk3 sendmail[23725]: n32I5u7d023725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:05:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:06:56 splunk3 sendmail[23964]: n32I6u86023964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:07:56 splunk3 sendmail[24205]: n32I7uMT024205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:08:56 splunk3 sendmail[24444]: n32I8ue2024444: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:09:56 splunk3 sendmail[24685]: n32I9uHC024685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:10:02 splunk3 sendmail[24804]: n32IA27P024804: from=root, size=292, class=0, nrcpts=1, msgid=<200904021810.n32IA27P024804@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 11:10:02 splunk3 sendmail[24809]: n32IA21v024809: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021810.n32IA27P024804@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 11:10:02 splunk3 sendmail[24804]: n32IA27P024804: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32IA21v024809 Message accepted for delivery)
|
|
Apr 2 11:10:03 splunk3 sendmail[24810]: n32IA21v024809: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:10:16 splunk3 sendmail[24881]: n32IAG32024881: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021810.n32IAGRw023616@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:10:16 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58427
|
|
Apr 2 11:10:16 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:10:16 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:10:16 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:10:16 splunk3 spamd[20168]: spamd: processing message <200904021810.n32IAGRw023616@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:10:18 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Apr 2 11:10:18 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58427,mid=<200904021810.n32IAGRw023616@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:10:18 splunk3 sendmail[24882]: n32IAG32024881: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:10:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:10:56 splunk3 sendmail[25050]: n32IAuJQ025050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:10:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 11:11:56 splunk3 sendmail[25290]: n32IBuWW025290: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:12:56 splunk3 sendmail[25525]: n32ICuwS025525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:13:56 splunk3 sendmail[25766]: n32IDuFw025766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:14:56 splunk3 sendmail[26002]: n32IEuJU026002: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:15:17 splunk3 sendmail[26093]: n32IFHZ5026093: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021815.n32IFH3o024410@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:15:17 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58483
|
|
Apr 2 11:15:17 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:15:17 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:15:17 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:15:17 splunk3 spamd[20168]: spamd: processing message <200904021815.n32IFH3o024410@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:15:19 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 11:15:19 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58483,mid=<200904021815.n32IFH3o024410@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:15:20 splunk3 sendmail[26094]: n32IFHZ5026093: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:15:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:15:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:15:56 splunk3 sendmail[26262]: n32IFuhU026262: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:15:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:16:56 splunk3 sendmail[26500]: n32IGuHs026500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:17:56 splunk3 sendmail[26738]: n32IHuoc026738: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:18:56 splunk3 sendmail[26969]: n32IIuSU026969: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:19:56 splunk3 sendmail[27210]: n32IJuGm027210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:20:18 splunk3 sendmail[27304]: n32IKIvn027304: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021820.n32IKHm0025045@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:20:18 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58539
|
|
Apr 2 11:20:18 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:20:18 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:20:18 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:20:18 splunk3 spamd[20168]: spamd: processing message <200904021820.n32IKHm0025045@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:20:20 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 11:20:20 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58539,mid=<200904021820.n32IKHm0025045@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:20:20 splunk3 sendmail[27305]: n32IKIvn027304: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:20:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:20:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:20:56 splunk3 sendmail[27473]: n32IKukj027473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:20:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:21:56 splunk3 sendmail[27716]: n32ILucc027716: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:22:56 splunk3 sendmail[27952]: n32IMuM2027952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:23:56 splunk3 sendmail[28194]: n32INumZ028194: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:24:56 splunk3 sendmail[28428]: n32IOuda028428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:25:18 splunk3 sendmail[28522]: n32IPIAF028522: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021825.n32IPInS025653@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:25:18 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58595
|
|
Apr 2 11:25:18 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:25:18 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:25:18 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:25:18 splunk3 spamd[20168]: spamd: processing message <200904021825.n32IPInS025653@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:25:20 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 11:25:20 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58595,mid=<200904021825.n32IPInS025653@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:25:20 splunk3 sendmail[28523]: n32IPIAF028522: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:25:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:25:47 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:25:56 splunk3 sendmail[28686]: n32IPuQU028686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:25:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 11:26:56 splunk3 sendmail[28926]: n32IQuGi028926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:27:56 splunk3 sendmail[29167]: n32IRuUt029167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:28:56 splunk3 sendmail[29403]: n32ISuVx029403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:29:56 splunk3 sendmail[29641]: n32ITu5U029641: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:30:19 splunk3 sendmail[29734]: n32IUJjS029734: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021830.n32IUITx026275@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:30:19 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58651
|
|
Apr 2 11:30:19 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:30:19 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:30:19 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:30:19 splunk3 spamd[20168]: spamd: processing message <200904021830.n32IUITx026275@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:30:21 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 11:30:21 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58651,mid=<200904021830.n32IUITx026275@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:30:21 splunk3 sendmail[29735]: n32IUJjS029734: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:30:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:30:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:30:56 splunk3 sendmail[29902]: n32IUuPU029902: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:30:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:31:56 splunk3 sendmail[30143]: n32IVuxS030143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:32:56 splunk3 sendmail[30374]: n32IWurn030374: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:33:56 splunk3 sendmail[30613]: n32IXupO030613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:34:57 splunk3 sendmail[30850]: n32IYv2W030850: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:35:19 splunk3 sendmail[30942]: n32IZJfc030942: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021835.n32IZJoU027025@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:35:19 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58707
|
|
Apr 2 11:35:19 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:35:19 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:35:19 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:35:19 splunk3 spamd[20168]: spamd: processing message <200904021835.n32IZJoU027025@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:35:21 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 11:35:21 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58707,mid=<200904021835.n32IZJoU027025@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:35:21 splunk3 sendmail[30943]: n32IZJfc030942: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:35:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:35:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:35:57 splunk3 sendmail[31110]: n32IZvsQ031110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:35:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:36:57 splunk3 sendmail[31347]: n32IavLw031347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:37:57 splunk3 sendmail[31586]: n32IbvEA031586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:38:57 splunk3 sendmail[31828]: n32Icvck031828: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:39:57 splunk3 sendmail[32059]: n32IdvNm032059: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:40:20 splunk3 sendmail[32176]: n32IeKXe032176: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021840.n32IeJIt027656@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:40:20 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58762
|
|
Apr 2 11:40:20 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:40:20 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:40:20 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:40:20 splunk3 spamd[20168]: spamd: processing message <200904021840.n32IeJIt027656@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:40:22 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 2 11:40:22 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58762,mid=<200904021840.n32IeJIt027656@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:40:22 splunk3 sendmail[32177]: n32IeKXe032176: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:40:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:40:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:40:57 splunk3 sendmail[32323]: n32IevDq032323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:40:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 11:41:57 splunk3 sendmail[32568]: n32IfvrA032568: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:42:57 splunk3 sendmail[337]: n32IgvpZ000337: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:43:57 splunk3 sendmail[577]: n32IhvoM000577: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:44:57 splunk3 sendmail[812]: n32Iiv7W000812: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:45:21 splunk3 sendmail[925]: n32IjL8N000925: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021845.n32IjKCV028274@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:45:21 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58819
|
|
Apr 2 11:45:21 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:45:21 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:45:21 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:45:21 splunk3 spamd[20168]: spamd: processing message <200904021845.n32IjKCV028274@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:45:23 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 11:45:23 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58819,mid=<200904021845.n32IjKCV028274@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:45:23 splunk3 sendmail[926]: n32IjL8N000925: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:45:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:45:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:45:57 splunk3 sendmail[1071]: n32IjvmB001071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:45:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:46:57 splunk3 sendmail[1305]: n32Ikve9001305: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:47:57 splunk3 sendmail[1543]: n32Ilvl1001543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:48:57 splunk3 sendmail[1779]: n32Imvu6001779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:49:57 splunk3 sendmail[2021]: n32InvSi002021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:50:21 splunk3 sendmail[2135]: n32IoLCT002135: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021850.n32IoLK5028888@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:50:21 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58874
|
|
Apr 2 11:50:21 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:50:21 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:50:21 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:50:21 splunk3 spamd[20168]: spamd: processing message <200904021850.n32IoLK5028888@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:50:23 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 11:50:23 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58874,mid=<200904021850.n32IoLK5028888@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:50:23 splunk3 sendmail[2136]: n32IoLCT002135: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:50:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:50:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:50:57 splunk3 sendmail[2283]: n32Iov6L002283: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:50:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:51:57 splunk3 sendmail[2524]: n32Ipvf6002524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:52:57 splunk3 sendmail[2773]: n32IqvTD002773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:53:57 splunk3 sendmail[3020]: n32IrvN8003020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:54:57 splunk3 sendmail[3261]: n32Isvwv003261: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:55:22 splunk3 sendmail[3375]: n32ItMYh003375: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021855.n32ItMqq029497@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 11:55:22 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58930
|
|
Apr 2 11:55:22 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:55:22 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:55:22 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:55:22 splunk3 spamd[20168]: spamd: processing message <200904021855.n32ItMqq029497@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 11:55:24 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 11:55:24 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58930,mid=<200904021855.n32ItMqq029497@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 11:55:24 splunk3 sendmail[3376]: n32ItMYh003375: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:55:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:55:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 11:55:57 splunk3 sendmail[3523]: n32Itv8b003523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:55:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 11:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 11:56:36 splunk3 sendmail[3713]: n32IuaOR003713: from=<3ZArVSRQKBo0x55x2vr2v8A9-458v62Fx55x2v.t5396r33v962B41zA.t53@alerts.bounces.google.com>, size=3377, class=0, nrcpts=1, msgid=<0016362834eecd2beb046696fd7b@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 2 11:56:36 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58944
|
|
Apr 2 11:56:36 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 11:56:36 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 11:56:36 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 11:56:36 splunk3 spamd[20168]: spamd: processing message <0016362834eecd2beb046696fd7b@google.com> for spamme:501
|
|
Apr 2 11:56:38 splunk3 spamd[20168]: spamd: clean message (-1.4/5.0) for spamme:501 in 1.5 seconds, 3811 bytes.
|
|
Apr 2 11:56:38 splunk3 spamd[20168]: spamd: result: . -1 - AWL,BAYES_00,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY scantime=1.5,size=3811,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58944,mid=<0016362834eecd2beb046696fd7b@google.com>,bayes=5.55111512312578e-17,autolearn=no
|
|
Apr 2 11:56:38 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 11:56:38 splunk3 sendmail[3714]: n32IuaOR003713: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33592, dsn=2.0.0, stat=Sent
|
|
Apr 2 11:56:57 splunk3 sendmail[3798]: n32IuvK3003798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:57:57 splunk3 sendmail[4047]: n32IvvmI004047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:58:57 splunk3 sendmail[4294]: n32Iwv1i004294: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 11:59:00 splunk3 sendmail[21920]: n32HwxWN021920: timeout waiting for input from 219-85-42-125-adsl-TPE.dynamic.so-net.net.tw during server cmd read
|
|
Apr 2 11:59:00 splunk3 sendmail[21920]: n32HwxWN021920: lost input channel from 219-85-42-125-adsl-TPE.dynamic.so-net.net.tw [219.85.42.125] (may be forged) to MTA after rcpt
|
|
Apr 2 11:59:00 splunk3 sendmail[21920]: n32HwxWN021920: from=<gigi.wu@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=219-85-42-125-adsl-TPE.dynamic.so-net.net.tw [219.85.42.125] (may be forged)
|
|
Apr 2 11:59:57 splunk3 sendmail[4541]: n32IxvMZ004541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:00:04 splunk3 sendmail[4630]: n32J04Se004630: from=root, size=291, class=0, nrcpts=1, msgid=<200904021900.n32J04Se004630@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 12:00:04 splunk3 sendmail[4634]: n32J04Tv004634: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904021900.n32J04Se004630@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 12:00:04 splunk3 sendmail[4630]: n32J04Se004630: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32J04Tv004634 Message accepted for delivery)
|
|
Apr 2 12:00:05 splunk3 sendmail[4635]: n32J04Tv004634: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:00:10 splunk3 sendmail[4684]: n32J0Ag2004684: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904021900.n32J0Ag2004684@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 12:00:10 splunk3 sendmail[4686]: n32J0Ag2004684: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 12:00:10 splunk3 sendmail[4686]: n32J0Ag2004684: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 2 12:00:10 splunk3 sendmail[4686]: n32J0Ag2004684: n32J0Ag2004686: postmaster notify: User unknown
|
|
Apr 2 12:00:11 splunk3 sendmail[4686]: n32J0Ag2004686: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:00:23 splunk3 sendmail[4744]: n32J0NiX004744: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021900.n32J0MXI030138@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:00:23 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58996
|
|
Apr 2 12:00:23 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:00:23 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 12:00:23 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 12:00:23 splunk3 sendmail[4745]: n32J0NiX004744: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:00:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:00:39 splunk3 sendmail[4802]: n32J0bi7004802: from=<nenippo@Bantafoods.com>, size=1926, class=0, nrcpts=1, msgid=<200904021900.n32J0bi7004802@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=Dynamic-IP-186812527.cable.net.co [186.81.25.27] (may be forged)
|
|
Apr 2 12:00:39 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58999
|
|
Apr 2 12:00:39 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:00:39 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 12:00:39 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 12:00:39 splunk3 sendmail[4807]: n32J0bi7004802: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=32281, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:00:39 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:00:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:00:57 splunk3 sendmail[4901]: n32J0vKn004901: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:00:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:01:14 splunk3 sendmail[4931]: n32J119n004931: from=root, size=443, class=0, nrcpts=1, msgid=<200904021901.n32J119n004931@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 12:01:14 splunk3 sendmail[4978]: n32J1EsD004978: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904021901.n32J119n004931@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 12:01:14 splunk3 sendmail[4931]: n32J119n004931: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32J1EsD004978 Message accepted for delivery)
|
|
Apr 2 12:01:15 splunk3 sendmail[4979]: n32J1EsD004978: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:01:57 splunk3 sendmail[5192]: n32J1vHm005192: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:02:57 splunk3 sendmail[5436]: n32J2vKX005436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:03:57 splunk3 sendmail[5671]: n32J3vlO005671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:04:57 splunk3 sendmail[5910]: n32J4v9N005910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:05:23 splunk3 sendmail[6018]: n32J5NAt006018: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021905.n32J5Nja030825@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:05:23 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59053
|
|
Apr 2 12:05:23 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:05:23 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 12:05:23 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 12:05:23 splunk3 sendmail[6019]: n32J5NAt006018: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:05:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:05:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:05:57 splunk3 sendmail[6163]: n32J5vsu006163: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:05:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:06:57 splunk3 sendmail[6404]: n32J6v3c006404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:07:15 splunk3 sendmail[6478]: n32J7Fiw006478: from=<jericgarner@yahoo.com>, size=1607, class=0, nrcpts=1, msgid=<198268.36175.qm@web35308.mail.mud.yahoo.com>, proto=SMTP, daemon=MTA, relay=web35308.mail.mud.yahoo.com [66.163.179.102]
|
|
Apr 2 12:07:15 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59073
|
|
Apr 2 12:07:15 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:07:15 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 12:07:15 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 12:07:15 splunk3 sendmail[6479]: n32J7Fiw006478: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31829, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:07:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:07:57 splunk3 sendmail[6641]: n32J7vZ6006641: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:08:57 splunk3 sendmail[6885]: n32J8vod006885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:09:57 splunk3 sendmail[7123]: n32J9vf4007123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:10:02 splunk3 sendmail[7239]: n32JA2mt007239: from=root, size=292, class=0, nrcpts=1, msgid=<200904021910.n32JA2mt007239@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 12:10:02 splunk3 sendmail[7244]: n32JA23o007244: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904021910.n32JA2mt007239@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 12:10:02 splunk3 sendmail[7239]: n32JA2mt007239: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32JA23o007244 Message accepted for delivery)
|
|
Apr 2 12:10:03 splunk3 sendmail[7245]: n32JA23o007244: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:10:24 splunk3 sendmail[7341]: n32JAN38007341: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021910.n32JANoC031440@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:10:24 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59111
|
|
Apr 2 12:10:24 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:10:24 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:10:24 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:10:24 splunk3 spamd[20168]: spamd: processing message <200904021910.n32JANoC031440@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:10:26 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 12:10:26 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59111,mid=<200904021910.n32JANoC031440@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 12:10:26 splunk3 sendmail[7342]: n32JAN38007341: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:10:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:10:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:10:57 splunk3 sendmail[7494]: n32JAvlQ007494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:10:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 12:11:57 splunk3 sendmail[7742]: n32JBviv007742: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:12:57 splunk3 sendmail[7980]: n32JCvID007980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:13:57 splunk3 sendmail[8215]: n32JDvAY008215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:14:57 splunk3 sendmail[8451]: n32JEvhs008451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:15:24 splunk3 sendmail[8564]: n32JFOqv008564: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904021915.n32JFOGF032232@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:15:24 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59167
|
|
Apr 2 12:15:24 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:15:24 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:15:24 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:15:24 splunk3 spamd[20168]: spamd: processing message <200904021915.n32JFOGF032232@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:15:26 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 12:15:26 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59167,mid=<200904021915.n32JFOGF032232@virt2.int.splunk.com>,bayes=0.111627058767814,autolearn=no
|
|
Apr 2 12:15:26 splunk3 sendmail[8565]: n32JFOqv008564: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:15:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:15:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:15:57 splunk3 sendmail[8707]: n32JFv53008707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:15:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:16:57 splunk3 sendmail[8951]: n32JGvsE008951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:17:57 splunk3 sendmail[9187]: n32JHvwq009187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:18:57 splunk3 sendmail[9426]: n32JIvrM009426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:19:57 splunk3 sendmail[9670]: n32JJvtw009670: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:20:25 splunk3 sendmail[9802]: n32JKPLS009802: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904021920.n32JKO5L000402@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:20:25 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59223
|
|
Apr 2 12:20:25 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:20:25 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:20:25 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:20:25 splunk3 spamd[20168]: spamd: processing message <200904021920.n32JKO5L000402@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:20:27 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1302 bytes.
|
|
Apr 2 12:20:27 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59223,mid=<200904021920.n32JKO5L000402@virt2.int.splunk.com>,bayes=0.0657721801304692,autolearn=no
|
|
Apr 2 12:20:27 splunk3 sendmail[9804]: n32JKPLS009802: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:20:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:20:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:20:57 splunk3 sendmail[9935]: n32JKvNJ009935: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:20:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:21:57 splunk3 sendmail[10171]: n32JLvpr010171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:22:57 splunk3 sendmail[10411]: n32JMvrI010411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:23:57 splunk3 sendmail[10651]: n32JNvif010651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:24:57 splunk3 sendmail[10891]: n32JOvk7010891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:25:25 splunk3 sendmail[11016]: n32JPPB6011016: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021925.n32JPPif001009@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:25:25 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59278
|
|
Apr 2 12:25:25 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:25:25 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:25:25 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:25:25 splunk3 spamd[20168]: spamd: processing message <200904021925.n32JPPif001009@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:25:27 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 12:25:27 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59278,mid=<200904021925.n32JPPif001009@virt2.int.splunk.com>,bayes=0.168452500656574,autolearn=no
|
|
Apr 2 12:25:27 splunk3 sendmail[11017]: n32JPPB6011016: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:25:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:25:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:25:57 splunk3 sendmail[11148]: n32JPv5E011148: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:25:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 12:26:57 splunk3 sendmail[11390]: n32JQvXV011390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:27:57 splunk3 sendmail[11624]: n32JRv6L011624: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:28:57 splunk3 sendmail[11861]: n32JSv21011861: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:29:02 splunk3 sendmail[10153]: n32JLpc0010153: ruleset=check_rcpt, arg1=<rseipel@crowechizek.com>, relay=customer-static-79-45.iplannetworks.net [200.68.74.45] (may be forged), reject=550 5.7.1 <rseipel@crowechizek.com>... Relaying denied. IP name possibly forged [200.68.74.45]
|
|
Apr 2 12:29:02 splunk3 sendmail[10153]: n32JLpc0010153: from=<stana@wolf-howl.com>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=customer-static-79-45.iplannetworks.net [200.68.74.45] (may be forged)
|
|
Apr 2 12:29:57 splunk3 sendmail[12096]: n32JTvEJ012096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:30:26 splunk3 sendmail[12232]: n32JUQtp012232: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021930.n32JUPmp001662@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:30:26 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59335
|
|
Apr 2 12:30:26 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:30:26 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:30:26 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:30:26 splunk3 spamd[20168]: spamd: processing message <200904021930.n32JUPmp001662@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:30:28 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 12:30:28 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59335,mid=<200904021930.n32JUPmp001662@virt2.int.splunk.com>,bayes=0.168452500656574,autolearn=no
|
|
Apr 2 12:30:28 splunk3 sendmail[12233]: n32JUQtp012232: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:30:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:30:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:30:57 splunk3 sendmail[12363]: n32JUvl0012363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:30:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:31:57 splunk3 sendmail[12603]: n32JVvnP012603: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:32:57 splunk3 sendmail[12842]: n32JWvWM012842: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:33:57 splunk3 sendmail[13075]: n32JXvDu013075: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:34:57 splunk3 sendmail[13345]: n32JYvd8013345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:35:26 splunk3 sendmail[13479]: n32JZQZU013479: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021935.n32JZQvD002422@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:35:26 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59390
|
|
Apr 2 12:35:26 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:35:26 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:35:26 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:35:26 splunk3 spamd[20168]: spamd: processing message <200904021935.n32JZQvD002422@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:35:28 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 12:35:28 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59390,mid=<200904021935.n32JZQvD002422@virt2.int.splunk.com>,bayes=0.168452500656574,autolearn=no
|
|
Apr 2 12:35:28 splunk3 sendmail[13480]: n32JZQZU013479: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:35:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:35:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:35:57 splunk3 sendmail[13603]: n32JZv1M013603: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:35:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:36:57 splunk3 sendmail[13846]: n32Jav9v013846: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:37:57 splunk3 sendmail[14083]: n32Jbvda014083: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:38:57 splunk3 sendmail[14325]: n32JcvBv014325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:39:57 splunk3 sendmail[14558]: n32Jdvdh014558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:40:27 splunk3 sendmail[14691]: n32JeRWX014691: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021940.n32JeR20003059@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:40:27 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59446
|
|
Apr 2 12:40:27 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:40:27 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:40:27 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:40:27 splunk3 spamd[20168]: spamd: processing message <200904021940.n32JeR20003059@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:40:29 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 12:40:29 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59446,mid=<200904021940.n32JeR20003059@virt2.int.splunk.com>,bayes=0.168452500656574,autolearn=no
|
|
Apr 2 12:40:29 splunk3 sendmail[14692]: n32JeRWX014691: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:40:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:40:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:40:57 splunk3 sendmail[14825]: n32Jev2q014825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:40:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 12:41:57 splunk3 sendmail[15060]: n32JfvXv015060: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:42:57 splunk3 sendmail[15298]: n32JgvHH015298: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:43:57 splunk3 sendmail[15535]: n32JhvuE015535: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:44:57 splunk3 sendmail[15775]: n32JivFl015775: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:45:27 splunk3 sendmail[15902]: n32JjRcj015902: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021945.n32JjRs8003697@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:45:27 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59502
|
|
Apr 2 12:45:27 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:45:27 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:45:27 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:45:27 splunk3 spamd[20168]: spamd: processing message <200904021945.n32JjRs8003697@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:45:29 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 12:45:29 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59502,mid=<200904021945.n32JjRs8003697@virt2.int.splunk.com>,bayes=0.168452500656574,autolearn=no
|
|
Apr 2 12:45:30 splunk3 sendmail[15903]: n32JjRcj015902: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:45:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:45:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:45:57 splunk3 sendmail[16032]: n32Jjv5P016032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:45:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:46:57 splunk3 sendmail[16274]: n32Jkvde016274: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:46:59 splunk3 sendmail[16276]: n32JkwUd016276: from=<3MhbVSRQKBmcLTTLQJFQJWYX-STWJUQdLTTLQJ.HTRXUFRRJXUQZSPNY.HTR@alerts.bounces.google.com>, size=2850, class=0, nrcpts=1, msgid=<0016e644d6caf74286046697b1ff@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.184]
|
|
Apr 2 12:46:59 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59518
|
|
Apr 2 12:46:59 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:46:59 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:46:59 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:46:59 splunk3 spamd[20168]: spamd: processing message <0016e644d6caf74286046697b1ff@google.com> for spamme:501
|
|
Apr 2 12:47:01 splunk3 spamd[20168]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.6 seconds, 3280 bytes.
|
|
Apr 2 12:47:01 splunk3 spamd[20168]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.6,size=3280,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59518,mid=<0016e644d6caf74286046697b1ff@google.com>,bayes=0,autolearn=ham
|
|
Apr 2 12:47:01 splunk3 sendmail[16278]: n32JkwUd016276: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=33061, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:47:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:47:57 splunk3 sendmail[16513]: n32Jlvwi016513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:48:57 splunk3 sendmail[16750]: n32JmvAD016750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:49:57 splunk3 sendmail[16985]: n32JnvGk016985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:50:28 splunk3 sendmail[17122]: n32JoStg017122: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021950.n32JoRR9004283@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:50:28 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59559
|
|
Apr 2 12:50:28 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:50:28 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:50:28 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:50:28 splunk3 spamd[20168]: spamd: processing message <200904021950.n32JoRR9004283@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:50:30 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 12:50:30 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59559,mid=<200904021950.n32JoRR9004283@virt2.int.splunk.com>,bayes=0.168490372579247,autolearn=no
|
|
Apr 2 12:50:30 splunk3 sendmail[17123]: n32JoStg017122: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:50:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:50:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:50:57 splunk3 sendmail[17251]: n32Jov1K017251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:50:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:51:35 splunk3 sendmail[17413]: n32JpZa9017413: from=<3RxfVSRQKBn0hpphmfbmfsut-opsfqmzhpphmf.dpntqbnnftqmvolju.dpn@alerts.bounces.google.com>, size=18564, class=0, nrcpts=1, msgid=<00151750d9b87301b8046697c2fe@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 2 12:51:35 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59571
|
|
Apr 2 12:51:36 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:51:36 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:51:36 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:51:36 splunk3 spamd[20168]: spamd: processing message <00151750d9b87301b8046697c2fe@google.com> for spamme:501
|
|
Apr 2 12:51:38 splunk3 spamd[20168]: spamd: clean message (-1.3/5.0) for spamme:501 in 2.1 seconds, 18998 bytes.
|
|
Apr 2 12:51:38 splunk3 spamd[20168]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=2.1,size=18998,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59571,mid=<00151750d9b87301b8046697c2fe@google.com>,bayes=0,autolearn=no
|
|
Apr 2 12:51:38 splunk3 sendmail[17414]: n32JpZa9017413: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=48779, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:51:38 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:51:57 splunk3 sendmail[17497]: n32Jpvlu017497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:52:57 splunk3 sendmail[17735]: n32Jqv3L017735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:53:57 splunk3 sendmail[17973]: n32JrvoS017973: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:54:57 splunk3 sendmail[18210]: n32Jsvhl018210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:55:28 splunk3 sendmail[18340]: n32JtSaD018340: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904021955.n32JtSR1004917@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 12:55:28 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59616
|
|
Apr 2 12:55:28 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 12:55:28 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 12:55:28 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 12:55:28 splunk3 spamd[20168]: spamd: processing message <200904021955.n32JtSR1004917@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 12:55:31 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 2 12:55:31 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59616,mid=<200904021955.n32JtSR1004917@virt2.int.splunk.com>,bayes=0.168490372579247,autolearn=no
|
|
Apr 2 12:55:31 splunk3 sendmail[18341]: n32JtSaD018340: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 12:55:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 12:55:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 12:55:57 splunk3 sendmail[18467]: n32JtvPk018467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:55:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 12:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 12:56:57 splunk3 sendmail[18708]: n32JuvGA018708: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:57:57 splunk3 sendmail[18944]: n32JvvoA018944: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:58:57 splunk3 sendmail[19185]: n32Jwv4s019185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 12:59:57 splunk3 sendmail[19420]: n32JxvbW019420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:00:04 splunk3 sendmail[19521]: n32K04xG019521: from=root, size=291, class=0, nrcpts=1, msgid=<200904022000.n32K04xG019521@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 13:00:04 splunk3 sendmail[19525]: n32K04bO019525: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904022000.n32K04xG019521@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 13:00:04 splunk3 sendmail[19521]: n32K04xG019521: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32K04bO019525 Message accepted for delivery)
|
|
Apr 2 13:00:05 splunk3 sendmail[19526]: n32K04bO019525: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:00:15 splunk3 sendmail[19582]: n32K0F0h019582: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904022000.n32K0F0h019582@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 13:00:15 splunk3 sendmail[19584]: n32K0F0h019582: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 13:00:15 splunk3 sendmail[19584]: n32K0F0h019582: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 13:00:15 splunk3 sendmail[19584]: n32K0F0h019582: n32K0F0h019584: postmaster notify: User unknown
|
|
Apr 2 13:00:17 splunk3 sendmail[19584]: n32K0F0h019584: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:00:29 splunk3 sendmail[19655]: n32K0TH8019655: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022000.n32K0STq005529@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:00:29 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59680
|
|
Apr 2 13:00:29 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:00:29 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 13:00:29 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 13:00:29 splunk3 sendmail[19656]: n32K0TH8019655: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:00:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:00:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:00:57 splunk3 sendmail[19771]: n32K0vnL019771: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:00:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:01:13 splunk3 sendmail[19799]: n32K11DT019799: from=root, size=443, class=0, nrcpts=1, msgid=<200904022001.n32K11DT019799@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 13:01:13 splunk3 sendmail[19838]: n32K1DeQ019838: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904022001.n32K11DT019799@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 13:01:13 splunk3 sendmail[19799]: n32K11DT019799: to=root, ctladdr=root (0/0), delay=00:00:12, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32K1DeQ019838 Message accepted for delivery)
|
|
Apr 2 13:01:14 splunk3 sendmail[19839]: n32K1DeQ019838: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:01:57 splunk3 sendmail[20022]: n32K1vZX020022: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:02:57 splunk3 sendmail[20261]: n32K2vc6020261: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:03:57 splunk3 sendmail[20494]: n32K3v0G020494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:04:57 splunk3 sendmail[20736]: n32K4vKC020736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:05:07 splunk3 sendmail[20652]: n32K4cqp020652: from=<shimono@deleteddomains.com>, size=5706, class=0, nrcpts=1, msgid=<f7d9019dc28f$468dbb68$fa1886b3@deleteddomains.com>, proto=ESMTP, daemon=MTA, relay=[92.27.15.175]
|
|
Apr 2 13:05:07 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59726
|
|
Apr 2 13:05:07 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:05:07 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 13:05:07 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 13:05:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:05:07 splunk3 sendmail[20774]: n32K4cqp020652: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:00, mailer=local, pri=35882, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:05:29 splunk3 sendmail[20885]: n32K5T1t020885: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022005.n32K5TTv006235@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:05:29 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59738
|
|
Apr 2 13:05:29 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:05:29 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 13:05:29 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 13:05:29 splunk3 sendmail[20886]: n32K5T1t020885: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:05:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:05:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:05:57 splunk3 sendmail[20995]: n32K5vVa020995: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:05:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:06:57 splunk3 sendmail[21238]: n32K6vPc021238: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:07:57 splunk3 sendmail[21472]: n32K7vRR021472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:08:57 splunk3 sendmail[21715]: n32K8vm7021715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:09:57 splunk3 sendmail[21949]: n32K9vAE021949: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:10:02 splunk3 sendmail[22069]: n32KA2QI022069: from=root, size=292, class=0, nrcpts=1, msgid=<200904022010.n32KA2QI022069@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 13:10:02 splunk3 sendmail[22074]: n32KA2bf022074: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904022010.n32KA2QI022069@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 13:10:02 splunk3 sendmail[22069]: n32KA2QI022069: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32KA2bf022074 Message accepted for delivery)
|
|
Apr 2 13:10:03 splunk3 sendmail[22075]: n32KA2bf022074: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:10:30 splunk3 sendmail[22206]: n32KAUoj022206: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022010.n32KAUXF006829@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:10:30 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59794
|
|
Apr 2 13:10:30 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:10:30 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:10:30 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:10:30 splunk3 spamd[20168]: spamd: processing message <200904022010.n32KAUXF006829@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:10:32 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 13:10:32 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59794,mid=<200904022010.n32KAUXF006829@virt2.int.splunk.com>,bayes=0.168490372579247,autolearn=no
|
|
Apr 2 13:10:32 splunk3 sendmail[22207]: n32KAUoj022206: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:10:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:10:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:10:57 splunk3 sendmail[22318]: n32KAv5u022318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:10:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 13:11:57 splunk3 sendmail[22557]: n32KBvd1022557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:12:57 splunk3 sendmail[22796]: n32KCvQs022796: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:13:57 splunk3 sendmail[23034]: n32KDvdi023034: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:14:57 splunk3 sendmail[23270]: n32KEvSE023270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:15:00 splunk3 sendmail[23290]: n32KF03F023290: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022015.n32KF0up007544@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:15:00 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59839
|
|
Apr 2 13:15:00 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:15:00 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:15:00 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:15:00 splunk3 spamd[20168]: spamd: processing message <200904022015.n32KF0up007544@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:15:02 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 13:15:02 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59839,mid=<200904022015.n32KF0up007544@virt2.int.splunk.com>,bayes=0.168490372579247,autolearn=no
|
|
Apr 2 13:15:02 splunk3 sendmail[23291]: n32KF03F023290: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:15:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:15:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:15:57 splunk3 sendmail[23526]: n32KFvNW023526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:15:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:16:57 splunk3 sendmail[23767]: n32KGvoK023767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:17:57 splunk3 sendmail[24001]: n32KHvT1024001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:18:57 splunk3 sendmail[24241]: n32KIvdg024241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:19:57 splunk3 sendmail[24477]: n32KJvQM024477: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:20:01 splunk3 sendmail[24495]: n32KK1Jl024495: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022020.n32KK0cd008155@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:20:01 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59895
|
|
Apr 2 13:20:01 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:20:01 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:20:01 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:20:01 splunk3 spamd[20168]: spamd: processing message <200904022020.n32KK0cd008155@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:20:03 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 2 13:20:03 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59895,mid=<200904022020.n32KK0cd008155@virt2.int.splunk.com>,bayes=0.168490372579247,autolearn=no
|
|
Apr 2 13:20:03 splunk3 sendmail[24496]: n32KK1Jl024495: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:20:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:20:57 splunk3 sendmail[24743]: n32KKv36024743: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:20:59 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:21:57 splunk3 sendmail[24980]: n32KLv3k024980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:22:57 splunk3 sendmail[25220]: n32KMvKU025220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:23:57 splunk3 sendmail[25457]: n32KNvKF025457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:24:57 splunk3 sendmail[25693]: n32KOvd0025693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:25:01 splunk3 sendmail[25712]: n32KP10u025712: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022025.n32KP1oP008785@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:25:01 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59950
|
|
Apr 2 13:25:01 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:25:01 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:25:01 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:25:01 splunk3 spamd[20168]: spamd: processing message <200904022025.n32KP1oP008785@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:25:03 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 13:25:03 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59950,mid=<200904022025.n32KP1oP008785@virt2.int.splunk.com>,bayes=0.168490372579247,autolearn=no
|
|
Apr 2 13:25:03 splunk3 sendmail[25713]: n32KP10u025712: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:25:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:25:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:25:57 splunk3 sendmail[25950]: n32KPvfe025950: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:25:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 13:26:57 splunk3 sendmail[26194]: n32KQvH6026194: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:27:57 splunk3 sendmail[26429]: n32KRvl4026429: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:28:57 splunk3 sendmail[26665]: n32KSvYV026665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:29:57 splunk3 sendmail[26898]: n32KTvbI026898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:30:02 splunk3 sendmail[26923]: n32KU2n0026923: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022030.n32KU1iP009404@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:30:02 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60007
|
|
Apr 2 13:30:02 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:30:02 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:30:02 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:30:02 splunk3 spamd[20168]: spamd: processing message <200904022030.n32KU1iP009404@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:30:04 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 13:30:04 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60007,mid=<200904022030.n32KU1iP009404@virt2.int.splunk.com>,bayes=0.168490372579247,autolearn=no
|
|
Apr 2 13:30:04 splunk3 sendmail[26924]: n32KU2n0026923: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:30:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:30:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:30:57 splunk3 sendmail[27161]: n32KUvq0027161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:30:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:31:57 splunk3 sendmail[27399]: n32KVvmm027399: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:32:57 splunk3 sendmail[27639]: n32KWvGR027639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:33:57 splunk3 sendmail[27874]: n32KXvPx027874: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:34:57 splunk3 sendmail[28115]: n32KYvx2028115: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:35:02 splunk3 sendmail[28133]: n32KZ2e0028133: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022035.n32KZ2Ul010189@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:35:02 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60062
|
|
Apr 2 13:35:02 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:35:02 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:35:02 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:35:02 splunk3 spamd[20168]: spamd: processing message <200904022035.n32KZ2Ul010189@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:35:04 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 13:35:04 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60062,mid=<200904022035.n32KZ2Ul010189@virt2.int.splunk.com>,bayes=0.111659123063582,autolearn=no
|
|
Apr 2 13:35:04 splunk3 sendmail[28134]: n32KZ2e0028133: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:35:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:35:46 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:35:57 splunk3 sendmail[28369]: n32KZvGj028369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:35:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:36:57 splunk3 sendmail[28611]: n32Kavop028611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:37:57 splunk3 sendmail[28845]: n32KbvJ1028845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:38:57 splunk3 sendmail[29087]: n32KcvTV029087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:39:58 splunk3 sendmail[29323]: n32KdwUZ029323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:40:03 splunk3 sendmail[29348]: n32Ke3X8029348: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022040.n32Ke2Dh010825@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:40:03 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60118
|
|
Apr 2 13:40:03 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:40:03 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:40:03 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:40:03 splunk3 spamd[20168]: spamd: processing message <200904022040.n32Ke2Dh010825@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:40:05 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 2 13:40:05 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60118,mid=<200904022040.n32Ke2Dh010825@virt2.int.splunk.com>,bayes=0.111659123063582,autolearn=no
|
|
Apr 2 13:40:05 splunk3 sendmail[29349]: n32Ke3X8029348: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:40:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:40:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:40:58 splunk3 sendmail[29590]: n32KewIc029590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:40:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 13:41:58 splunk3 sendmail[29831]: n32Kfws7029831: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:42:58 splunk3 sendmail[30068]: n32KgwNS030068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:43:58 splunk3 sendmail[30302]: n32Khwld030302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:44:58 splunk3 sendmail[30538]: n32KiwJf030538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:45:04 splunk3 sendmail[30574]: n32Kj3no030574: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022045.n32Kj3wG011441@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:45:04 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60174
|
|
Apr 2 13:45:04 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:45:04 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:45:04 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:45:04 splunk3 spamd[20168]: spamd: processing message <200904022045.n32Kj3wG011441@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:45:06 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 13:45:06 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60174,mid=<200904022045.n32Kj3wG011441@virt2.int.splunk.com>,bayes=0.111659123063582,autolearn=no
|
|
Apr 2 13:45:06 splunk3 sendmail[30575]: n32Kj3no030574: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:45:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:45:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:45:58 splunk3 sendmail[30791]: n32KjwrI030791: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:45:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:46:58 splunk3 sendmail[31034]: n32Kkw8e031034: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:47:58 splunk3 sendmail[31270]: n32Klwxe031270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:47:58 splunk3 sendmail[31267]: n32KlsdS031267: from=<linda@organicfood.com>, size=1072, class=0, nrcpts=1, msgid=<01C9B3D4.1CC842F3@ragnaros.vm-mreze.hr>, proto=SMTP, daemon=MTA, relay=ragnaros.vm-mreze.hr [80.253.170.42]
|
|
Apr 2 13:47:58 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60210
|
|
Apr 2 13:47:58 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:47:58 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:47:58 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:47:58 splunk3 spamd[20168]: spamd: processing message <01C9B3D4.1CC842F3@ragnaros.vm-mreze.hr> for spamme:501
|
|
Apr 2 13:48:00 splunk3 spamd[20168]: spamd: identified spam (22.1/5.0) for spamme:501 in 2.3 seconds, 1365 bytes.
|
|
Apr 2 13:48:00 splunk3 spamd[20168]: spamd: result: Y 22 - BAYES_99,DNS_FROM_RFC_BOGUSMX,HTML_MESSAGE,MALE_ENHANCE,MIME_HEADER_CTYPE_ONLY,NO_REAL_NAME,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URIBL_JP_SURBL,URIBL_SBL scantime=2.3,size=1365,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60210,mid=<01C9B3D4.1CC842F3@ragnaros.vm-mreze.hr>,bayes=0.999724339231461,autolearn=spam
|
|
Apr 2 13:48:00 splunk3 sendmail[31271]: n32KlsdS031267: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31282, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:48:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:48:58 splunk3 sendmail[31516]: n32KmwSt031516: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:49:58 splunk3 sendmail[31750]: n32KnwIS031750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:50:04 splunk3 sendmail[31793]: n32Ko40b031793: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022050.n32Ko4Yb012055@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:50:04 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60231
|
|
Apr 2 13:50:04 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:50:04 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:50:04 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:50:04 splunk3 spamd[20168]: spamd: processing message <200904022050.n32Ko4Yb012055@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:50:06 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 13:50:06 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60231,mid=<200904022050.n32Ko4Yb012055@virt2.int.splunk.com>,bayes=0.111654669504541,autolearn=no
|
|
Apr 2 13:50:06 splunk3 sendmail[31794]: n32Ko40b031793: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:50:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:50:58 splunk3 sendmail[32015]: n32KowAZ032015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:50:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:51:58 splunk3 sendmail[32252]: n32KpwZY032252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:52:58 splunk3 sendmail[32491]: n32KqwXX032491: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:53:58 splunk3 sendmail[32732]: n32KrwUx032732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:54:58 splunk3 sendmail[502]: n32Kswwj000502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:55:05 splunk3 sendmail[538]: n32Kt5MX000538: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022055.n32Kt4la012663@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 13:55:05 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60286
|
|
Apr 2 13:55:05 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:55:05 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:55:05 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:55:05 splunk3 spamd[20168]: spamd: processing message <200904022055.n32Kt4la012663@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 13:55:07 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 13:55:07 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60286,mid=<200904022055.n32Kt4la012663@virt2.int.splunk.com>,bayes=0.111654669504541,autolearn=no
|
|
Apr 2 13:55:07 splunk3 sendmail[539]: n32Kt5MX000538: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:55:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:55:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 13:55:58 splunk3 sendmail[759]: n32KtwMx000759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:55:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 13:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 13:56:58 splunk3 sendmail[1001]: n32KuwlX001001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:57:58 splunk3 sendmail[1236]: n32KvwOr001236: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:58:58 splunk3 sendmail[1474]: n32KwwYo001474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 13:59:23 splunk3 sendmail[1568]: n32KxKka001568: from=<spammobutterfield@bradford.gov.uk>, size=6421, class=0, nrcpts=1, msgid=<20090402115917.6131.qmail@host-89-228-209-237.kalisz.mm.pl>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=host-89-228-209-237.kalisz.mm.pl [89.228.209.237]
|
|
Apr 2 13:59:23 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60338
|
|
Apr 2 13:59:23 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 13:59:23 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 13:59:23 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 13:59:23 splunk3 spamd[20168]: spamd: processing message <20090402115917.6131.qmail@host-89-228-209-237.kalisz.mm.pl> for spamme:501
|
|
Apr 2 13:59:28 splunk3 spamd[20168]: spamd: identified spam (23.7/5.0) for spamme:501 in 5.0 seconds, 6743 bytes.
|
|
Apr 2 13:59:28 splunk3 spamd[20168]: spamd: result: Y 23 - AWL,BAYES_99,DRUGS_ERECTILE,DRUG_ED_CAPS,HELO_DYNAMIC_IPADDR,HTML_90_100,HTML_FONT_FACE_BAD,HTML_MESSAGE,MIME_HTML_ONLY,NO_REAL_NAME,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_JP_SURBL,URIBL_WS_SURBL scantime=5.0,size=6743,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60338,mid=<20090402115917.6131.qmail@host-89-228-209-237.kalisz.mm.pl>,bayes=1,autolearn=spam
|
|
Apr 2 13:59:28 splunk3 sendmail[1575]: n32KxKka001568: to=<spamme@splunkit.com>, delay=00:00:06, xdelay=00:00:05, mailer=local, pri=36691, dsn=2.0.0, stat=Sent
|
|
Apr 2 13:59:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 13:59:58 splunk3 sendmail[1713]: n32Kxw4r001713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:00:04 splunk3 sendmail[1818]: n32L04oY001818: from=root, size=291, class=0, nrcpts=1, msgid=<200904022100.n32L04oY001818@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 14:00:04 splunk3 sendmail[1822]: n32L04pZ001822: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904022100.n32L04oY001818@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 14:00:04 splunk3 sendmail[1818]: n32L04oY001818: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32L04pZ001822 Message accepted for delivery)
|
|
Apr 2 14:00:05 splunk3 sendmail[1823]: n32L04pZ001822: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:00:06 splunk3 sendmail[1828]: n32L06NJ001828: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022100.n32L05li013302@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:00:06 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60345
|
|
Apr 2 14:00:06 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:00:06 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 14:00:06 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 14:00:06 splunk3 sendmail[1829]: n32L06NJ001828: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:00:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:00:23 splunk3 sendmail[1903]: n32L0N9l001903: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904022100.n32L0N9l001903@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 14:00:23 splunk3 sendmail[1905]: n32L0N9l001903: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 14:00:23 splunk3 sendmail[1905]: n32L0N9l001903: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 2 14:00:23 splunk3 sendmail[1905]: n32L0N9l001903: n32L0N9l001905: postmaster notify: User unknown
|
|
Apr 2 14:00:24 splunk3 sendmail[1905]: n32L0N9l001905: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:00:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:00:58 splunk3 sendmail[2064]: n32L0w6x002064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:00:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:01:08 splunk3 sendmail[2093]: n32L11LU002093: from=root, size=443, class=0, nrcpts=1, msgid=<200904022101.n32L11LU002093@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 14:01:08 splunk3 sendmail[2116]: n32L18rs002116: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904022101.n32L11LU002093@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 14:01:08 splunk3 sendmail[2093]: n32L11LU002093: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32L18rs002116 Message accepted for delivery)
|
|
Apr 2 14:01:09 splunk3 sendmail[2124]: n32L18rs002116: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:01:58 splunk3 sendmail[2316]: n32L1wSl002316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:02:58 splunk3 sendmail[2556]: n32L2wPb002556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:03:58 splunk3 sendmail[2802]: n32L3wXs002802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:04:58 splunk3 sendmail[3053]: n32L4wc7003053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:05:07 splunk3 sendmail[3090]: n32L57x9003090: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022105.n32L564b013988@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:05:07 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60409
|
|
Apr 2 14:05:07 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:05:07 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 14:05:07 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 14:05:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:05:07 splunk3 sendmail[3091]: n32L57x9003090: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:05:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:05:58 splunk3 sendmail[3324]: n32L5wdR003324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:05:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:06:58 splunk3 sendmail[3587]: n32L6wRv003587: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:07:58 splunk3 sendmail[3832]: n32L7wqR003832: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:08:58 splunk3 sendmail[4087]: n32L8wm7004087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:09:58 splunk3 sendmail[4344]: n32L9wrH004344: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:10:02 splunk3 sendmail[4445]: n32LA2kt004445: from=root, size=292, class=0, nrcpts=1, msgid=<200904022110.n32LA2kt004445@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 14:10:02 splunk3 sendmail[4450]: n32LA2q8004450: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904022110.n32LA2kt004445@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 14:10:02 splunk3 sendmail[4445]: n32LA2kt004445: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32LA2q8004450 Message accepted for delivery)
|
|
Apr 2 14:10:03 splunk3 sendmail[4451]: n32LA2q8004450: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:10:07 splunk3 sendmail[4471]: n32LA7H2004471: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022110.n32LA7Nw014604@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:10:07 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60465
|
|
Apr 2 14:10:07 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:10:07 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:10:07 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:10:07 splunk3 spamd[20168]: spamd: processing message <200904022110.n32LA7Nw014604@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:10:09 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1308 bytes.
|
|
Apr 2 14:10:09 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60465,mid=<200904022110.n32LA7Nw014604@virt2.int.splunk.com>,bayes=0.111647241834412,autolearn=no
|
|
Apr 2 14:10:09 splunk3 sendmail[4472]: n32LA7H2004471: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:10:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:10:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:10:58 splunk3 sendmail[4712]: n32LAwBk004712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:10:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 14:11:58 splunk3 sendmail[4963]: n32LBwcb004963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:12:58 splunk3 sendmail[5236]: n32LCwDU005236: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:13:58 splunk3 sendmail[5475]: n32LDwlK005475: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:14:58 splunk3 sendmail[5715]: n32LEww2005715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:15:07 splunk3 sendmail[5737]: n32LF7UL005737: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022115.n32LF7qV015394@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:15:07 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60522
|
|
Apr 2 14:15:07 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:15:07 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:15:07 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:15:08 splunk3 spamd[20168]: spamd: processing message <200904022115.n32LF7qV015394@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:15:10 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 14:15:10 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60522,mid=<200904022115.n32LF7qV015394@virt2.int.splunk.com>,bayes=0.111647241834412,autolearn=no
|
|
Apr 2 14:15:10 splunk3 sendmail[5738]: n32LF7UL005737: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:15:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:15:30 splunk3 sendmail[5800]: n32LFJVv005800: from=<vladimira@barbourville.com>, size=2127, class=0, nrcpts=1, msgid=<583f019dc475$f9306635$d8bf26ad@barbourville.com>, proto=ESMTP, daemon=MTA, relay=ejy210.internetdsl.tpnet.pl [83.15.106.210]
|
|
Apr 2 14:15:30 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60534
|
|
Apr 2 14:15:30 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:15:30 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:15:30 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:15:30 splunk3 spamd[20168]: spamd: processing message <583f019dc475$f9306635$d8bf26ad@barbourville.com> for spamme:501
|
|
Apr 2 14:15:32 splunk3 spamd[20168]: spamd: identified spam (40.5/5.0) for spamme:501 in 1.7 seconds, 2455 bytes.
|
|
Apr 2 14:15:32 splunk3 spamd[20168]: spamd: result: Y 40 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_ABUSE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,REPLICA_WATCH,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.7,size=2455,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60534,mid=<583f019dc475$f9306635$d8bf26ad@barbourville.com>,bayes=1,autolearn=spam
|
|
Apr 2 14:15:32 splunk3 sendmail[5853]: n32LFJVv005800: to=<spamme@splunkit.com>, delay=00:00:11, xdelay=00:00:02, mailer=local, pri=32350, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:15:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:15:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:15:58 splunk3 sendmail[5977]: n32LFw6S005977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:15:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:16:58 splunk3 sendmail[6221]: n32LGwdC006221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:17:58 splunk3 sendmail[6453]: n32LHwJV006453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:18:58 splunk3 sendmail[6691]: n32LIwVL006691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:19:58 splunk3 sendmail[6926]: n32LJwE2006926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:20:08 splunk3 sendmail[6972]: n32LK8px006972: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022120.n32LK830016035@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:20:08 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60578
|
|
Apr 2 14:20:08 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:20:08 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:20:08 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:20:08 splunk3 spamd[20168]: spamd: processing message <200904022120.n32LK830016035@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:20:11 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 14:20:11 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60578,mid=<200904022120.n32LK830016035@virt2.int.splunk.com>,bayes=0.111642789350197,autolearn=no
|
|
Apr 2 14:20:11 splunk3 sendmail[6973]: n32LK8px006972: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:20:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:20:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:20:58 splunk3 sendmail[7191]: n32LKwM6007191: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:20:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:21:58 splunk3 sendmail[7429]: n32LLw5c007429: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:22:58 splunk3 sendmail[7678]: n32LMwFI007678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:23:58 splunk3 sendmail[7918]: n32LNwVr007918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:24:58 splunk3 sendmail[8156]: n32LOwCb008156: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:25:08 splunk3 sendmail[8193]: n32LP89C008193: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022125.n32LP8i4016637@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:25:08 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60634
|
|
Apr 2 14:25:08 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:25:08 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:25:08 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:25:08 splunk3 spamd[20168]: spamd: processing message <200904022125.n32LP8i4016637@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:25:10 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 14:25:10 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60634,mid=<200904022125.n32LP8i4016637@virt2.int.splunk.com>,bayes=0.111642789350197,autolearn=no
|
|
Apr 2 14:25:10 splunk3 sendmail[8194]: n32LP89C008193: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:25:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:25:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:25:58 splunk3 sendmail[8412]: n32LPwkW008412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:25:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 14:26:58 splunk3 sendmail[8654]: n32LQwO6008654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:27:58 splunk3 sendmail[8888]: n32LRwSw008888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:28:58 splunk3 sendmail[9129]: n32LSwOd009129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:29:58 splunk3 sendmail[9363]: n32LTwNF009363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:30:09 splunk3 sendmail[9407]: n32LU98Q009407: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022130.n32LU8VF017255@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:30:09 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60690
|
|
Apr 2 14:30:09 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:30:09 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:30:09 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:30:09 splunk3 spamd[20168]: spamd: processing message <200904022130.n32LU8VF017255@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:30:11 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 14:30:11 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60690,mid=<200904022130.n32LU8VF017255@virt2.int.splunk.com>,bayes=0.111642789350197,autolearn=no
|
|
Apr 2 14:30:11 splunk3 sendmail[9408]: n32LU98Q009407: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:30:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:30:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:30:58 splunk3 sendmail[9640]: n32LUwqa009640: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:30:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:31:58 splunk3 sendmail[9878]: n32LVw1Z009878: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:32:58 splunk3 sendmail[10117]: n32LWwuX010117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:33:21 splunk3 sendmail[10172]: n32LXGVk010172: from=<willyz@bart.nl>, size=2122, class=0, nrcpts=1, msgid=<4082019dc444$07d825ea$b47775ec@bart.nl>, proto=ESMTP, daemon=MTA, relay=5ad85739.bb.sky.com [90.216.87.57]
|
|
Apr 2 14:33:21 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60728
|
|
Apr 2 14:33:21 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:33:21 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:33:21 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:33:21 splunk3 spamd[20168]: spamd: processing message <4082019dc444$07d825ea$b47775ec@bart.nl> for spamme:501
|
|
Apr 2 14:33:24 splunk3 spamd[20168]: spamd: identified spam (40.3/5.0) for spamme:501 in 2.3 seconds, 2409 bytes.
|
|
Apr 2 14:33:24 splunk3 spamd[20168]: spamd: result: Y 40 - BAYES_99,DATE_IN_FUTURE_96_XX,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,REPLICA_WATCH,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.3,size=2409,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60728,mid=<4082019dc444$07d825ea$b47775ec@bart.nl>,bayes=1,autolearn=spam
|
|
Apr 2 14:33:24 splunk3 sendmail[10198]: n32LXGVk010172: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:03, mailer=local, pri=32328, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:33:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:33:58 splunk3 sendmail[10355]: n32LXwdZ010355: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:34:58 splunk3 sendmail[10592]: n32LYwxS010592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:35:09 splunk3 sendmail[10632]: n32LZ9hW010632: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022135.n32LZ9MA018002@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:35:09 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60747
|
|
Apr 2 14:35:09 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:35:09 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:35:09 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:35:09 splunk3 spamd[20168]: spamd: processing message <200904022135.n32LZ9MA018002@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:35:11 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 14:35:11 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60747,mid=<200904022135.n32LZ9MA018002@virt2.int.splunk.com>,bayes=0.111638337229619,autolearn=no
|
|
Apr 2 14:35:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:35:11 splunk3 sendmail[10633]: n32LZ9hW010632: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:35:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:35:58 splunk3 sendmail[10847]: n32LZwIC010847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:35:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:36:58 splunk3 sendmail[11090]: n32LawCw011090: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:37:58 splunk3 sendmail[11325]: n32LbwGi011325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:38:58 splunk3 sendmail[11567]: n32LcwGE011567: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:39:58 splunk3 sendmail[11802]: n32LdwTB011802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:40:10 splunk3 sendmail[11846]: n32LeAmg011846: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022140.n32Le9Te018632@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:40:10 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60802
|
|
Apr 2 14:40:10 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:40:10 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:40:10 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:40:10 splunk3 spamd[20168]: spamd: processing message <200904022140.n32Le9Te018632@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:40:12 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 2 14:40:12 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60802,mid=<200904022140.n32Le9Te018632@virt2.int.splunk.com>,bayes=0.111638337229619,autolearn=no
|
|
Apr 2 14:40:12 splunk3 sendmail[11847]: n32LeAmg011846: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:40:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:40:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:40:58 splunk3 sendmail[12066]: n32LewMg012066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:40:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 14:41:58 splunk3 sendmail[12306]: n32Lfw8N012306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:42:58 splunk3 sendmail[12546]: n32Lgw8D012546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:43:58 splunk3 sendmail[12783]: n32Lhwdt012783: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:44:58 splunk3 sendmail[13021]: n32LiwMP013021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:45:10 splunk3 sendmail[13058]: n32LjAk4013058: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022145.n32LjA7J019246@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:45:10 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60859
|
|
Apr 2 14:45:10 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:45:10 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:45:10 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:45:10 splunk3 spamd[20168]: spamd: processing message <200904022145.n32LjA7J019246@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:45:13 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 14:45:13 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60859,mid=<200904022145.n32LjA7J019246@virt2.int.splunk.com>,bayes=0.111638337229619,autolearn=no
|
|
Apr 2 14:45:13 splunk3 sendmail[13059]: n32LjAk4013058: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:45:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:45:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:45:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:45:58 splunk3 sendmail[13291]: n32Ljw22013291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:46:58 splunk3 sendmail[13558]: n32LkwDt013558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:47:24 splunk3 sendmail[13654]: n32LlN1M013654: from=<3azLVSRQKBrwiqqingcngtvu-pqtgrn0iqqing.eqourcoogurnwpmkv.eqo@alerts.bounces.google.com>, size=3416, class=0, nrcpts=1, msgid=<0016e643486a94a73c0466996072@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.191]
|
|
Apr 2 14:47:24 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60888
|
|
Apr 2 14:47:24 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:47:24 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:47:24 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:47:24 splunk3 spamd[20168]: spamd: processing message <0016e643486a94a73c0466996072@google.com> for spamme:501
|
|
Apr 2 14:47:28 splunk3 spamd[20168]: spamd: clean message (-1.4/5.0) for spamme:501 in 4.2 seconds, 3846 bytes.
|
|
Apr 2 14:47:28 splunk3 spamd[20168]: spamd: result: . -1 - AWL,BAYES_00,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY scantime=4.2,size=3846,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60888,mid=<0016e643486a94a73c0466996072@google.com>,bayes=2.77555756156289e-16,autolearn=no
|
|
Apr 2 14:47:28 splunk3 sendmail[13655]: n32LlN1M013654: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:04, mailer=local, pri=33627, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:47:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:47:58 splunk3 sendmail[13797]: n32LlwJl013797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:48:58 splunk3 sendmail[14033]: n32LmwCO014033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:49:58 splunk3 sendmail[14268]: n32LnwuQ014268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:50:11 splunk3 sendmail[14312]: n32LoB6K014312: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022150.n32LoAcP019859@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:50:11 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60915
|
|
Apr 2 14:50:11 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:50:11 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:50:11 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:50:11 splunk3 spamd[20168]: spamd: processing message <200904022150.n32LoAcP019859@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:50:13 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 14:50:13 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60915,mid=<200904022150.n32LoAcP019859@virt2.int.splunk.com>,bayes=0.111638337229619,autolearn=no
|
|
Apr 2 14:50:13 splunk3 sendmail[14313]: n32LoB6K014312: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:50:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:50:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:50:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:50:58 splunk3 sendmail[14534]: n32LowaV014534: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:51:58 splunk3 sendmail[14769]: n32LpwPP014769: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:52:58 splunk3 sendmail[15008]: n32LqwUx015008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:53:58 splunk3 sendmail[15247]: n32Lrwjc015247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:54:58 splunk3 sendmail[15484]: n32LswXp015484: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:55:11 splunk3 sendmail[15526]: n32LtB9S015526: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022155.n32LtBKs020466@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 14:55:11 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60971
|
|
Apr 2 14:55:11 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 14:55:11 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 14:55:11 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 14:55:11 splunk3 spamd[20168]: spamd: processing message <200904022155.n32LtBKs020466@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 14:55:13 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 14:55:13 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60971,mid=<200904022155.n32LtBKs020466@virt2.int.splunk.com>,bayes=0.111638337229619,autolearn=no
|
|
Apr 2 14:55:13 splunk3 sendmail[15527]: n32LtB9S015526: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 14:55:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 14:55:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 14:55:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 14:55:58 splunk3 sendmail[15741]: n32LtwlD015741: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 14:56:58 splunk3 sendmail[15984]: n32LuwfE015984: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:57:58 splunk3 sendmail[16220]: n32LvwQm016220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:58:58 splunk3 sendmail[16459]: n32LwwFi016459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 14:59:58 splunk3 sendmail[16695]: n32LxwAc016695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:00:04 splunk3 sendmail[16783]: n32M04FP016783: from=root, size=291, class=0, nrcpts=1, msgid=<200904022200.n32M04FP016783@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 15:00:04 splunk3 sendmail[16787]: n32M04Uq016787: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904022200.n32M04FP016783@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 15:00:04 splunk3 sendmail[16783]: n32M04FP016783: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32M04Uq016787 Message accepted for delivery)
|
|
Apr 2 15:00:05 splunk3 sendmail[16788]: n32M04Uq016787: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:00:12 splunk3 sendmail[16809]: n32M0CEY016809: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022200.n32M0Cq1021105@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:00:12 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32798
|
|
Apr 2 15:00:12 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:00:12 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 15:00:12 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 15:00:12 splunk3 sendmail[16810]: n32M0CEY016809: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:00:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:00:28 splunk3 sendmail[16904]: n32M0SRM016904: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904022200.n32M0SRM016904@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 15:00:28 splunk3 sendmail[16906]: n32M0SRM016904: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 15:00:28 splunk3 sendmail[16906]: n32M0SRM016904: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 15:00:28 splunk3 sendmail[16906]: n32M0SRM016904: n32M0SRM016906: postmaster notify: User unknown
|
|
Apr 2 15:00:29 splunk3 sendmail[16906]: n32M0SRM016906: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:00:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:00:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:00:58 splunk3 sendmail[17046]: n32M0wWx017046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:01:11 splunk3 sendmail[17055]: n32M11iu017055: from=root, size=443, class=0, nrcpts=1, msgid=<200904022201.n32M11iu017055@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 15:01:11 splunk3 sendmail[17094]: n32M1Bhj017094: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904022201.n32M11iu017055@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 15:01:11 splunk3 sendmail[17055]: n32M11iu017055: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32M1Bhj017094 Message accepted for delivery)
|
|
Apr 2 15:01:12 splunk3 sendmail[17095]: n32M1Bhj017094: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:01:58 splunk3 sendmail[17295]: n32M1w1u017295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:02:58 splunk3 sendmail[17533]: n32M2wfX017533: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:03:58 splunk3 sendmail[17769]: n32M3wq8017769: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:04:58 splunk3 sendmail[18009]: n32M4wA9018009: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:05:13 splunk3 sendmail[18063]: n32M5DLT018063: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022205.n32M5CD8021787@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:05:13 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32861
|
|
Apr 2 15:05:13 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:05:13 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 15:05:13 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 15:05:13 splunk3 sendmail[18064]: n32M5DLT018063: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:05:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:05:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:05:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:05:58 splunk3 sendmail[18265]: n32M5wEY018265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:06:58 splunk3 sendmail[18502]: n32M6wg5018502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:07:58 splunk3 sendmail[18736]: n32M7w9N018736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:08:58 splunk3 sendmail[18975]: n32M8wEL018975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:09:58 splunk3 sendmail[19211]: n32M9whR019211: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:10:02 splunk3 sendmail[19313]: n32MA2JM019313: from=root, size=292, class=0, nrcpts=1, msgid=<200904022210.n32MA2JM019313@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 15:10:02 splunk3 sendmail[19318]: n32MA2F2019318: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904022210.n32MA2JM019313@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 15:10:02 splunk3 sendmail[19313]: n32MA2JM019313: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32MA2F2019318 Message accepted for delivery)
|
|
Apr 2 15:10:03 splunk3 sendmail[19323]: n32MA2F2019318: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:10:13 splunk3 sendmail[19380]: n32MADQk019380: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022210.n32MADI7022403@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:10:13 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32918
|
|
Apr 2 15:10:13 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:10:13 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:10:13 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:10:13 splunk3 spamd[20168]: spamd: processing message <200904022210.n32MADI7022403@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:10:15 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 15:10:15 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32918,mid=<200904022210.n32MADI7022403@virt2.int.splunk.com>,bayes=0.111638337229619,autolearn=no
|
|
Apr 2 15:10:15 splunk3 sendmail[19381]: n32MADQk019380: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:10:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:10:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:10:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:10:58 splunk3 sendmail[19584]: n32MAwds019584: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 15:11:58 splunk3 sendmail[19823]: n32MBw7E019823: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:12:29 splunk3 sendmail[19937]: n32MCS3H019937: from=<3TDjVSRQKBqMJRRJOHDOHUWV-QRUHSObJRRJOH.FRPVSDPPHVSOXQNLW.FRP@alerts.bounces.google.com>, size=6577, class=0, nrcpts=1, msgid=<0016369204304e5285046699ba16@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.164]
|
|
Apr 2 15:12:29 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32948
|
|
Apr 2 15:12:29 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:12:29 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:12:29 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:12:29 splunk3 spamd[20168]: spamd: processing message <0016369204304e5285046699ba16@google.com> for spamme:501
|
|
Apr 2 15:12:32 splunk3 spamd[20168]: spamd: clean message (-2.2/5.0) for spamme:501 in 3.0 seconds, 7006 bytes.
|
|
Apr 2 15:12:32 splunk3 spamd[20168]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=3.0,size=7006,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32948,mid=<0016369204304e5285046699ba16@google.com>,bayes=0,autolearn=ham
|
|
Apr 2 15:12:32 splunk3 sendmail[19938]: n32MCS3H019937: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=36787, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:12:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:12:58 splunk3 sendmail[20067]: n32MCwpB020067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:13:58 splunk3 sendmail[20308]: n32MDwcE020308: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:14:58 splunk3 sendmail[20547]: n32MEwmt020547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:15:14 splunk3 sendmail[20601]: n32MFEP2020601: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022215.n32MFDs1023194@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:15:14 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32975
|
|
Apr 2 15:15:14 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:15:14 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:15:14 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:15:14 splunk3 spamd[20168]: spamd: processing message <200904022215.n32MFDs1023194@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:15:16 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 15:15:16 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32975,mid=<200904022215.n32MFDs1023194@virt2.int.splunk.com>,bayes=0.111670397177252,autolearn=no
|
|
Apr 2 15:15:16 splunk3 sendmail[20602]: n32MFEP2020601: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:15:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:15:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:15:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:15:58 splunk3 sendmail[20803]: n32MFwXY020803: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:16:58 splunk3 sendmail[21043]: n32MGwM1021043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:17:58 splunk3 sendmail[21280]: n32MHwfI021280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:18:58 splunk3 sendmail[21518]: n32MIw0e021518: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:19:58 splunk3 sendmail[21752]: n32MJwmn021752: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:20:14 splunk3 sendmail[21828]: n32MKEgt021828: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022220.n32MKEr9023862@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:20:14 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33039
|
|
Apr 2 15:20:14 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:20:14 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:20:14 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:20:14 splunk3 spamd[20168]: spamd: processing message <200904022220.n32MKEr9023862@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:20:16 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 15:20:16 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33039,mid=<200904022220.n32MKEr9023862@virt2.int.splunk.com>,bayes=0.111670397177252,autolearn=no
|
|
Apr 2 15:20:16 splunk3 sendmail[21829]: n32MKEgt021828: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:20:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:20:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:20:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:20:58 splunk3 sendmail[22020]: n32MKwBI022020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:21:58 splunk3 sendmail[22255]: n32MLwJg022255: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:22:58 splunk3 sendmail[22492]: n32MMwvT022492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:23:58 splunk3 sendmail[22729]: n32MNwOW022729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:24:58 splunk3 sendmail[22967]: n32MOwcX022967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:25:15 splunk3 sendmail[23037]: n32MPFR7023037: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022225.n32MPFV8024478@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:25:15 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33094
|
|
Apr 2 15:25:15 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:25:15 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:25:15 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:25:15 splunk3 spamd[20168]: spamd: processing message <200904022225.n32MPFV8024478@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:25:17 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 15:25:17 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33094,mid=<200904022225.n32MPFV8024478@virt2.int.splunk.com>,bayes=0.111670397177252,autolearn=no
|
|
Apr 2 15:25:17 splunk3 sendmail[23038]: n32MPFR7023037: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:25:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:25:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:25:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:25:58 splunk3 sendmail[23224]: n32MPwQT023224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 15:26:58 splunk3 sendmail[23464]: n32MQwK6023464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:27:58 splunk3 sendmail[23699]: n32MRwJF023699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:28:58 splunk3 sendmail[23939]: n32MSwMU023939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:29:58 splunk3 sendmail[24171]: n32MTwRR024171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:30:15 splunk3 sendmail[24248]: n32MUFJf024248: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022230.n32MUFL3025096@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:30:15 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33151
|
|
Apr 2 15:30:15 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:30:15 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:30:15 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:30:15 splunk3 spamd[20168]: spamd: processing message <200904022230.n32MUFL3025096@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:30:17 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 2 15:30:17 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33151,mid=<200904022230.n32MUFL3025096@virt2.int.splunk.com>,bayes=0.111670397177252,autolearn=no
|
|
Apr 2 15:30:17 splunk3 sendmail[24249]: n32MUFJf024248: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:30:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:30:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:30:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:30:58 splunk3 sendmail[24439]: n32MUw4a024439: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:31:58 splunk3 sendmail[24677]: n32MVwao024677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:32:58 splunk3 sendmail[24916]: n32MWwJt024916: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:33:58 splunk3 sendmail[25150]: n32MXwm3025150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:34:58 splunk3 sendmail[25388]: n32MYwpr025388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:35:16 splunk3 sendmail[25459]: n32MZGkf025459: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022235.n32MZGN1025844@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:35:16 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33207
|
|
Apr 2 15:35:16 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:35:16 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:35:16 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:35:16 splunk3 spamd[20168]: spamd: processing message <200904022235.n32MZGN1025844@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:35:18 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 2 15:35:18 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33207,mid=<200904022235.n32MZGN1025844@virt2.int.splunk.com>,bayes=0.111670397177252,autolearn=no
|
|
Apr 2 15:35:18 splunk3 sendmail[25460]: n32MZGkf025459: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:35:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:35:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:35:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:35:58 splunk3 sendmail[25645]: n32MZwDn025645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:36:58 splunk3 sendmail[25884]: n32Mawx7025884: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:37:58 splunk3 sendmail[26118]: n32MbwZo026118: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:38:58 splunk3 sendmail[26361]: n32Mcw50026361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:39:58 splunk3 sendmail[26594]: n32MdwND026594: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:40:17 splunk3 sendmail[26690]: n32MeHOj026690: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022240.n32MeH15026474@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:40:17 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33262
|
|
Apr 2 15:40:17 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:40:17 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:40:17 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:40:17 splunk3 spamd[20168]: spamd: processing message <200904022240.n32MeH15026474@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:40:20 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 15:40:20 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33262,mid=<200904022240.n32MeH15026474@virt2.int.splunk.com>,bayes=0.111670397177252,autolearn=no
|
|
Apr 2 15:40:20 splunk3 sendmail[26691]: n32MeHOj026690: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:40:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:40:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:40:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:40:58 splunk3 sendmail[26860]: n32MewFs026860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 15:41:58 splunk3 sendmail[27097]: n32Mfwgd027097: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:42:58 splunk3 sendmail[27336]: n32MgwWc027336: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:43:58 splunk3 sendmail[27570]: n32Mhwh5027570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:44:58 splunk3 sendmail[27809]: n32MiwLS027809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:45:18 splunk3 sendmail[27901]: n32MjIQ0027901: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022245.n32MjHsI027082@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:45:18 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33319
|
|
Apr 2 15:45:18 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:45:18 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:45:18 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:45:18 splunk3 spamd[20168]: spamd: processing message <200904022245.n32MjHsI027082@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:45:20 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 15:45:20 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33319,mid=<200904022245.n32MjHsI027082@virt2.int.splunk.com>,bayes=0.111670397177252,autolearn=no
|
|
Apr 2 15:45:20 splunk3 sendmail[27902]: n32MjIQ0027901: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:45:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:45:45 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:45:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:45:58 splunk3 sendmail[28068]: n32MjweT028068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:46:54 splunk3 sendmail[27673]: n32MiQTB027673: from=<stevef@zdnetasia.com>, size=5735, class=0, nrcpts=1, msgid=<79b5019db447$f1b29912$e0c395df@zdnetasia.com>, proto=ESMTP, daemon=MTA, relay=[78.93.180.58]
|
|
Apr 2 15:46:54 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33335
|
|
Apr 2 15:46:54 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:46:54 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:46:54 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:46:54 splunk3 spamd[20168]: spamd: processing message <79b5019db447$f1b29912$e0c395df@zdnetasia.com> for spamme:501
|
|
Apr 2 15:46:56 splunk3 spamd[20168]: spamd: identified spam (33.9/5.0) for spamme:501 in 1.8 seconds, 6008 bytes.
|
|
Apr 2 15:46:56 splunk3 spamd[20168]: spamd: result: Y 33 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_SORBS_WEB,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.8,size=6008,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33335,mid=<79b5019db447$f1b29912$e0c395df@zdnetasia.com>,bayes=1,autolearn=spam
|
|
Apr 2 15:46:56 splunk3 sendmail[28285]: n32MiQTB027673: to=<spamme@splunkit.com>, delay=00:00:08, xdelay=00:00:02, mailer=local, pri=35915, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:46:56 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:46:58 splunk3 sendmail[28314]: n32MkwR2028314: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:47:58 splunk3 sendmail[28549]: n32Mlw9L028549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:48:59 splunk3 sendmail[28787]: n32Mmwos028787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:49:59 splunk3 sendmail[29023]: n32Mnx5Z029023: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:50:18 splunk3 sendmail[29121]: n32MoIaS029121: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022250.n32MoIJq027698@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:50:18 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33375
|
|
Apr 2 15:50:18 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:50:18 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:50:18 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:50:18 splunk3 spamd[20168]: spamd: processing message <200904022250.n32MoIJq027698@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:50:20 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 15:50:20 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33375,mid=<200904022250.n32MoIJq027698@virt2.int.splunk.com>,bayes=0.111665944492409,autolearn=no
|
|
Apr 2 15:50:20 splunk3 sendmail[29122]: n32MoIaS029121: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:50:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:50:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:50:58 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:50:59 splunk3 sendmail[29289]: n32MoxHN029289: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:51:59 splunk3 sendmail[29524]: n32MpxBX029524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:52:59 splunk3 sendmail[29764]: n32Mqxfa029764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:53:59 splunk3 sendmail[30001]: n32MrxPj030001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:54:59 splunk3 sendmail[30238]: n32Msxd1030238: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:55:19 splunk3 sendmail[30328]: n32MtJl9030328: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022255.n32MtIPa028311@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 15:55:19 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33431
|
|
Apr 2 15:55:19 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 15:55:19 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 15:55:19 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 15:55:19 splunk3 spamd[20168]: spamd: processing message <200904022255.n32MtIPa028311@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 15:55:21 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 15:55:21 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33431,mid=<200904022255.n32MtIPa028311@virt2.int.splunk.com>,bayes=0.111665944492409,autolearn=no
|
|
Apr 2 15:55:21 splunk3 sendmail[30330]: n32MtJl9030328: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 15:55:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 15:55:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 15:55:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 15:55:59 splunk3 sendmail[30496]: n32MtxUL030496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:56:06 splunk3 sendmail[15765]: n32Lu6GG015765: timeout waiting for input from 81.203.90.16.dyn.user.ono.com during server cmd read
|
|
Apr 2 15:56:06 splunk3 sendmail[15765]: n32Lu6GG015765: 81.203.90.16.dyn.user.ono.com [81.203.90.16] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 15:56:59 splunk3 sendmail[30736]: n32MuxFp030736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:57:59 splunk3 sendmail[30968]: n32Mvx74030968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:58:59 splunk3 sendmail[31205]: n32Mwx4H031205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 15:59:59 splunk3 sendmail[31441]: n32Mxxra031441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:00:04 splunk3 sendmail[31530]: n32N04db031530: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904022300.n32N04db031530@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 16:00:04 splunk3 sendmail[31537]: n32N04db031530: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 16:00:04 splunk3 sendmail[31537]: n32N04db031530: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 16:00:04 splunk3 sendmail[31537]: n32N04db031530: n32N04db031537: postmaster notify: User unknown
|
|
Apr 2 16:00:04 splunk3 sendmail[31553]: n32N04QQ031553: from=root, size=291, class=0, nrcpts=1, msgid=<200904022300.n32N04QQ031553@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 16:00:04 splunk3 sendmail[31557]: n32N04I6031557: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904022300.n32N04QQ031553@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 16:00:04 splunk3 sendmail[31553]: n32N04QQ031553: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32N04I6031557 Message accepted for delivery)
|
|
Apr 2 16:00:05 splunk3 sendmail[31537]: n32N04db031537: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:00:13 splunk3 sendmail[31558]: n32N04I6031557: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:09, xdelay=00:00:09, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:00:19 splunk3 sendmail[31624]: n32N0Jca031624: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022300.n32N0JUa028951@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:00:19 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33495
|
|
Apr 2 16:00:19 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:00:19 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 16:00:19 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 16:00:19 splunk3 sendmail[31625]: n32N0Jca031624: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:00:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:00:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:00:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:00:59 splunk3 sendmail[31793]: n32N0xFR031793: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:01:07 splunk3 sendmail[31800]: n32N11Wf031800: from=root, size=443, class=0, nrcpts=1, msgid=<200904022301.n32N11Wf031800@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 16:01:07 splunk3 sendmail[31840]: n32N178x031840: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904022301.n32N11Wf031800@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 16:01:07 splunk3 sendmail[31800]: n32N11Wf031800: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32N178x031840 Message accepted for delivery)
|
|
Apr 2 16:01:09 splunk3 sendmail[31841]: n32N178x031840: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:01:59 splunk3 sendmail[32043]: n32N1xlf032043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:02:59 splunk3 sendmail[32281]: n32N2xQ5032281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:03:59 splunk3 sendmail[32516]: n32N3xOr032516: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:04:59 splunk3 sendmail[32754]: n32N4xGD032754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:05:20 splunk3 sendmail[378]: n32N5Kwh000378: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022305.n32N5Jo9029636@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:05:20 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33552
|
|
Apr 2 16:05:20 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:05:20 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 16:05:20 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 16:05:20 splunk3 sendmail[379]: n32N5Kwh000378: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:05:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:05:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:05:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:05:59 splunk3 sendmail[542]: n32N5x7w000542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:06:59 splunk3 sendmail[783]: n32N6xjO000783: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:07:59 splunk3 sendmail[1019]: n32N7xKB001019: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:08:59 splunk3 sendmail[1263]: n32N8xJo001263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:09:59 splunk3 sendmail[1499]: n32N9xBk001499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:10:02 splunk3 sendmail[1618]: n32NA2Ms001618: from=root, size=292, class=0, nrcpts=1, msgid=<200904022310.n32NA2Ms001618@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 16:10:03 splunk3 sendmail[1623]: n32NA2X5001623: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904022310.n32NA2Ms001618@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 16:10:03 splunk3 sendmail[1618]: n32NA2Ms001618: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n32NA2X5001623 Message accepted for delivery)
|
|
Apr 2 16:10:04 splunk3 sendmail[1624]: n32NA2X5001623: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:10:20 splunk3 sendmail[1701]: n32NAKTC001701: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022310.n32NAKuN030249@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:10:20 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33608
|
|
Apr 2 16:10:20 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:10:20 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:10:20 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:10:20 splunk3 spamd[20168]: spamd: processing message <200904022310.n32NAKuN030249@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:10:22 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 2 16:10:22 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33608,mid=<200904022310.n32NAKuN030249@virt2.int.splunk.com>,bayes=0.111665944492409,autolearn=no
|
|
Apr 2 16:10:22 splunk3 sendmail[1702]: n32NAKTC001701: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:10:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:10:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:10:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:10:59 splunk3 sendmail[1873]: n32NAx2e001873: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 16:11:59 splunk3 sendmail[2110]: n32NBxOW002110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:12:59 splunk3 sendmail[2346]: n32NCxpW002346: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:13:59 splunk3 sendmail[2586]: n32NDx5t002586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:14:59 splunk3 sendmail[2837]: n32NExa6002837: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:15:21 splunk3 sendmail[2932]: n32NFLX8002932: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022315.n32NFKUB031040@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:15:21 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33665
|
|
Apr 2 16:15:21 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:15:21 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:15:21 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:15:21 splunk3 spamd[20168]: spamd: processing message <200904022315.n32NFKUB031040@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:15:23 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 16:15:23 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33665,mid=<200904022315.n32NFKUB031040@virt2.int.splunk.com>,bayes=0.111665944492409,autolearn=no
|
|
Apr 2 16:15:23 splunk3 sendmail[2933]: n32NFLX8002932: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:15:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:15:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:15:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:15:59 splunk3 sendmail[3106]: n32NFxVe003106: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:16:59 splunk3 sendmail[3347]: n32NGx0x003347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:17:59 splunk3 sendmail[3601]: n32NHx6A003601: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:18:59 splunk3 sendmail[3849]: n32NIx22003849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:19:59 splunk3 sendmail[4096]: n32NJxGo004096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:20:22 splunk3 sendmail[4219]: n32NKMx6004219: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022320.n32NKMmP031680@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:20:22 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33721
|
|
Apr 2 16:20:22 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:20:22 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:20:22 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:20:22 splunk3 spamd[20168]: spamd: processing message <200904022320.n32NKMmP031680@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:20:24 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 16:20:24 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33721,mid=<200904022320.n32NKMmP031680@virt2.int.splunk.com>,bayes=0.111665944492409,autolearn=no
|
|
Apr 2 16:20:24 splunk3 sendmail[4220]: n32NKMx6004219: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:20:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:20:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:20:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:20:59 splunk3 sendmail[4384]: n32NKx6J004384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:21:59 splunk3 sendmail[4622]: n32NLxuJ004622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:22:59 splunk3 sendmail[4865]: n32NMxci004865: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:23:59 splunk3 sendmail[5110]: n32NNxAH005110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:24:59 splunk3 sendmail[5388]: n32NOxKl005388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:25:23 splunk3 sendmail[5495]: n32NPNsB005495: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904022325.n32NPMV1032290@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:25:23 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33776
|
|
Apr 2 16:25:23 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:25:23 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:25:23 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:25:23 splunk3 spamd[20168]: spamd: processing message <200904022325.n32NPMV1032290@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:25:25 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 16:25:25 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33776,mid=<200904022325.n32NPMV1032290@virt2.int.splunk.com>,bayes=0.111665944492409,autolearn=no
|
|
Apr 2 16:25:25 splunk3 sendmail[5496]: n32NPNsB005495: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:25:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:25:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:25:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:25:59 splunk3 sendmail[5643]: n32NPxJG005643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 16:26:59 splunk3 sendmail[5883]: n32NQx8S005883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:27:59 splunk3 sendmail[6120]: n32NRxKG006120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:28:19 splunk3 sendmail[6181]: n32NSEU2006181: from=<spamme@splunkit.com>, size=2751, class=0, nrcpts=1, msgid=<200904022328.n32NSEU2006181@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=c953d230.virtua.com.br [201.83.210.48]
|
|
Apr 2 16:28:19 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33807
|
|
Apr 2 16:28:19 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:28:19 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:28:19 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:28:19 splunk3 spamd[20168]: spamd: processing message <200904022328.n32NSEU2006181@splunk3.splunkit.com> for spamme:501
|
|
Apr 2 16:28:21 splunk3 spamd[20168]: spamd: identified spam (27.4/5.0) for spamme:501 in 2.3 seconds, 3147 bytes.
|
|
Apr 2 16:28:21 splunk3 spamd[20168]: spamd: result: Y 27 - AWL,BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.3,size=3147,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33807,mid=<200904022328.n32NSEU2006181@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 2 16:28:21 splunk3 sendmail[6205]: n32NSEU2006181: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:02, mailer=local, pri=33069, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:28:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:28:59 splunk3 sendmail[6367]: n32NSxOf006367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:29:59 splunk3 sendmail[6600]: n32NTxJ0006600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:30:25 splunk3 sendmail[6716]: n32NUPc0006716: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904022330.n32NUN3d000450@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:30:25 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33834
|
|
Apr 2 16:30:25 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:30:25 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:30:25 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:30:25 splunk3 spamd[20168]: spamd: processing message <200904022330.n32NUN3d000450@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:30:27 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1302 bytes.
|
|
Apr 2 16:30:27 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33834,mid=<200904022330.n32NUN3d000450@virt2.int.splunk.com>,bayes=0.0657966521349939,autolearn=no
|
|
Apr 2 16:30:27 splunk3 sendmail[6717]: n32NUPc0006716: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:30:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:30:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:30:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:30:59 splunk3 sendmail[6866]: n32NUxtw006866: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:31:59 splunk3 sendmail[7103]: n32NVxP3007103: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:32:59 splunk3 sendmail[7340]: n32NWxvp007340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:33:59 splunk3 sendmail[7583]: n32NXx7i007583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:34:59 splunk3 sendmail[7824]: n32NYxi1007824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:35:26 splunk3 sendmail[7933]: n32NZQCt007933: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022335.n32NZPM1001203@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:35:26 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33890
|
|
Apr 2 16:35:26 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:35:26 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:35:26 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:35:26 splunk3 spamd[20168]: spamd: processing message <200904022335.n32NZPM1001203@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:35:28 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 2 16:35:28 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33890,mid=<200904022335.n32NZPM1001203@virt2.int.splunk.com>,bayes=0.168489201242275,autolearn=no
|
|
Apr 2 16:35:28 splunk3 sendmail[7934]: n32NZQCt007933: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:35:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:35:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:35:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:35:59 splunk3 sendmail[8081]: n32NZxAO008081: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:36:59 splunk3 sendmail[8321]: n32Nax8X008321: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:37:59 splunk3 sendmail[8556]: n32Nbx4R008556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:38:59 splunk3 sendmail[8799]: n32Ncx2B008799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:39:59 splunk3 sendmail[9032]: n32NdxUV009032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:40:26 splunk3 sendmail[9167]: n32NeQNS009167: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022340.n32NeQLU001875@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:40:26 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33945
|
|
Apr 2 16:40:26 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:40:26 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:40:26 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:40:26 splunk3 spamd[20168]: spamd: processing message <200904022340.n32NeQLU001875@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:40:28 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1305 bytes.
|
|
Apr 2 16:40:28 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33945,mid=<200904022340.n32NeQLU001875@virt2.int.splunk.com>,bayes=0.168489201242275,autolearn=no
|
|
Apr 2 16:40:28 splunk3 sendmail[9168]: n32NeQNS009167: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:40:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:40:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:40:59 splunk3 sendmail[9300]: n32NexXp009300: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 16:41:59 splunk3 sendmail[9541]: n32NfxVU009541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:42:59 splunk3 sendmail[9787]: n32NgxTc009787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:43:59 splunk3 sendmail[10023]: n32NhxLj010023: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:44:59 splunk3 sendmail[10259]: n32NixYD010259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:45:27 splunk3 sendmail[10387]: n32NjREa010387: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022345.n32NjQRc002498@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:45:27 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34002
|
|
Apr 2 16:45:27 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:45:27 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:45:27 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:45:27 splunk3 spamd[20168]: spamd: processing message <200904022345.n32NjQRc002498@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:45:29 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 16:45:29 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34002,mid=<200904022345.n32NjQRc002498@virt2.int.splunk.com>,bayes=0.168489201242275,autolearn=no
|
|
Apr 2 16:45:29 splunk3 sendmail[10388]: n32NjREa010387: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:45:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:45:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:45:59 splunk3 sendmail[10518]: n32NjxS4010518: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:46:59 splunk3 sendmail[10757]: n32NkxGO010757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:47:59 splunk3 sendmail[10990]: n32NlxrK010990: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:48:59 splunk3 sendmail[11230]: n32NmxOE011230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:49:59 splunk3 sendmail[11466]: n32NnxbB011466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:50:27 splunk3 sendmail[11598]: n32NoRlW011598: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022350.n32NoREX003118@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:50:27 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34057
|
|
Apr 2 16:50:27 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:50:27 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:50:27 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:50:27 splunk3 spamd[20168]: spamd: processing message <200904022350.n32NoREX003118@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:50:29 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 2 16:50:29 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34057,mid=<200904022350.n32NoREX003118@virt2.int.splunk.com>,bayes=0.168489201242275,autolearn=no
|
|
Apr 2 16:50:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:50:29 splunk3 sendmail[11599]: n32NoRlW011598: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:50:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:50:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:50:59 splunk3 sendmail[11735]: n32NoxhU011735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:51:59 splunk3 sendmail[11969]: n32NpxVV011969: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:52:59 splunk3 sendmail[12209]: n32Nqxre012209: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:53:59 splunk3 sendmail[12446]: n32NrxxO012446: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:54:59 splunk3 sendmail[12685]: n32Nsxg5012685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:55:29 splunk3 sendmail[12816]: n32NtTwW012816: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904022355.n32NtSOU003749@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 16:55:29 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34113
|
|
Apr 2 16:55:29 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 16:55:29 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 16:55:29 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 16:55:29 splunk3 spamd[20168]: spamd: processing message <200904022355.n32NtSOU003749@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 16:55:31 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 2 16:55:31 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34113,mid=<200904022355.n32NtSOU003749@virt2.int.splunk.com>,bayes=0.168489201242275,autolearn=no
|
|
Apr 2 16:55:31 splunk3 sendmail[12817]: n32NtTwW012816: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 16:55:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 16:55:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 16:55:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 16:55:59 splunk3 sendmail[12945]: n32NtxbP012945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 16:56:59 splunk3 sendmail[13186]: n32Nuxc3013186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:57:59 splunk3 sendmail[13461]: n32Nvx9S013461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:58:59 splunk3 sendmail[13698]: n32NwxL8013698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 16:59:59 splunk3 sendmail[13932]: n32Nxxjl013932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:00:04 splunk3 sendmail[14017]: n33004I9014017: from=root, size=291, class=0, nrcpts=1, msgid=<200904030000.n33004I9014017@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 17:00:05 splunk3 sendmail[14021]: n33004rT014021: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030000.n33004I9014017@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 17:00:05 splunk3 sendmail[14017]: n33004I9014017: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33004rT014021 Message accepted for delivery)
|
|
Apr 2 17:00:06 splunk3 sendmail[14023]: n33004rT014021: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:00:09 splunk3 sendmail[14057]: n33009Y3014057: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904030000.n33009Y3014057@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 17:00:09 splunk3 sendmail[14059]: n33009Y3014057: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 17:00:09 splunk3 sendmail[14059]: n33009Y3014057: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 17:00:09 splunk3 sendmail[14059]: n33009Y3014057: n33009Y3014059: postmaster notify: User unknown
|
|
Apr 2 17:00:11 splunk3 sendmail[14059]: n33009Y3014059: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:00:29 splunk3 sendmail[14152]: n3300Tg3014152: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030000.n3300TBg004363@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:00:29 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34177
|
|
Apr 2 17:00:29 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:00:29 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 17:00:29 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 17:00:29 splunk3 sendmail[14153]: n3300Tg3014152: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:00:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:00:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:00:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:00:59 splunk3 sendmail[14281]: n3300xls014281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:01:05 splunk3 sendmail[14290]: n33011so014290: from=root, size=443, class=0, nrcpts=1, msgid=<200904030001.n33011so014290@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 17:01:05 splunk3 sendmail[14310]: n33015OM014310: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030001.n33011so014290@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 17:01:05 splunk3 sendmail[14290]: n33011so014290: to=root, ctladdr=root (0/0), delay=00:00:04, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33015OM014310 Message accepted for delivery)
|
|
Apr 2 17:01:07 splunk3 sendmail[14311]: n33015OM014310: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:01:59 splunk3 sendmail[14530]: n3301xiE014530: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:02:59 splunk3 sendmail[14767]: n3302x4I014767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:03:59 splunk3 sendmail[15003]: n3303xlo015003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:04:59 splunk3 sendmail[15240]: n3304xI5015240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:05:34 splunk3 sendmail[15386]: n3305YZm015386: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030005.n3305TVe005069@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:05:34 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34234
|
|
Apr 2 17:05:34 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:05:34 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 17:05:34 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 17:05:34 splunk3 sendmail[15387]: n3305YZm015386: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:05:34 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:05:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:05:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:05:59 splunk3 sendmail[15497]: n3305x3K015497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:06:59 splunk3 sendmail[15737]: n3306xPh015737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:07:59 splunk3 sendmail[15971]: n3307xtr015971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:08:59 splunk3 sendmail[16213]: n3308xHv016213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:09:59 splunk3 sendmail[16450]: n3309xdd016450: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:10:03 splunk3 sendmail[16567]: n330A3l2016567: from=root, size=292, class=0, nrcpts=1, msgid=<200904030010.n330A3l2016567@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 17:10:03 splunk3 sendmail[16572]: n330A3CH016572: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030010.n330A3l2016567@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 17:10:03 splunk3 sendmail[16567]: n330A3l2016567: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n330A3CH016572 Message accepted for delivery)
|
|
Apr 2 17:10:04 splunk3 sendmail[16573]: n330A3CH016572: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:10:04 splunk3 sendmail[16577]: n330A4v9016577: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030010.n330A4WW005633@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:10:04 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34279
|
|
Apr 2 17:10:04 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:10:04 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:10:04 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:10:04 splunk3 spamd[20168]: spamd: processing message <200904030010.n330A4WW005633@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:10:06 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 17:10:06 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34279,mid=<200904030010.n330A4WW005633@virt2.int.splunk.com>,bayes=0.168489201242275,autolearn=no
|
|
Apr 2 17:10:06 splunk3 sendmail[16578]: n330A4v9016577: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:10:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:10:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:10:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:10:59 splunk3 sendmail[16823]: n330Ax3r016823: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 17:11:59 splunk3 sendmail[17059]: n330BxnS017059: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:12:59 splunk3 sendmail[17298]: n330CxUX017298: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:13:59 splunk3 sendmail[17534]: n330DxXG017534: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:14:59 splunk3 sendmail[17772]: n330ExOE017772: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:15:04 splunk3 sendmail[17793]: n330F4We017793: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030015.n330F4RE006421@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:15:04 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34335
|
|
Apr 2 17:15:04 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:15:04 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:15:04 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:15:04 splunk3 spamd[20168]: spamd: processing message <200904030015.n330F4RE006421@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:15:06 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 17:15:06 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34335,mid=<200904030015.n330F4RE006421@virt2.int.splunk.com>,bayes=0.168489201242275,autolearn=no
|
|
Apr 2 17:15:06 splunk3 sendmail[17794]: n330F4We017793: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:15:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:15:15 splunk3 sendmail[17771]: n330F06q017771: from=<takujio@shawcable.net>, size=5720, class=0, nrcpts=1, msgid=<4021019dc2e3$99ed189c$56d3778f@shawcable.net>, proto=ESMTP, daemon=MTA, relay=189-11-181-84.fnsce702.dsl.brasiltelecom.net.br [189.11.181.84]
|
|
Apr 2 17:15:15 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34345
|
|
Apr 2 17:15:15 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:15:15 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:15:15 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:15:15 splunk3 spamd[20168]: spamd: processing message <4021019dc2e3$99ed189c$56d3778f@shawcable.net> for spamme:501
|
|
Apr 2 17:15:18 splunk3 spamd[20168]: spamd: identified spam (49.1/5.0) for spamme:501 in 2.8 seconds, 6078 bytes.
|
|
Apr 2 17:15:18 splunk3 spamd[20168]: spamd: result: Y 49 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_HCC,HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.8,size=6078,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34345,mid=<4021019dc2e3$99ed189c$56d3778f@shawcable.net>,bayes=1,autolearn=spam
|
|
Apr 2 17:15:18 splunk3 sendmail[17847]: n330F06q017771: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:03, mailer=local, pri=35983, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:15:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:15:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:15:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:15:59 splunk3 sendmail[18035]: n330Fxmv018035: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:16:59 splunk3 sendmail[18276]: n330Gx8c018276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:17:59 splunk3 sendmail[18510]: n330Hxtv018510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:18:59 splunk3 sendmail[18747]: n330IxR0018747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:19:59 splunk3 sendmail[18983]: n330JxI6018983: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:20:05 splunk3 sendmail[19008]: n330K5H5019008: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030020.n330K5d0007061@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:20:05 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34391
|
|
Apr 2 17:20:05 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:20:05 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:20:05 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:20:05 splunk3 spamd[20168]: spamd: processing message <200904030020.n330K5d0007061@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:20:07 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 2 17:20:07 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34391,mid=<200904030020.n330K5d0007061@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 17:20:07 splunk3 sendmail[19010]: n330K5H5019008: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:20:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:20:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:20:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:20:59 splunk3 sendmail[19251]: n330KxCl019251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:21:59 splunk3 sendmail[19486]: n330LxvR019486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:22:59 splunk3 sendmail[19725]: n330Mxb0019725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:23:59 splunk3 sendmail[19965]: n330Nxeg019965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:24:59 splunk3 sendmail[20205]: n330OxjM020205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:25:06 splunk3 sendmail[20240]: n330P6lF020240: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030025.n330P5Aw007669@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:25:06 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34447
|
|
Apr 2 17:25:06 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:25:06 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:25:06 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:25:06 splunk3 spamd[20168]: spamd: processing message <200904030025.n330P5Aw007669@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:25:09 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 2 17:25:09 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34447,mid=<200904030025.n330P5Aw007669@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 17:25:09 splunk3 sendmail[20241]: n330P6lF020240: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:25:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:25:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:25:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:25:59 splunk3 sendmail[20464]: n330PxOu020464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 17:26:59 splunk3 sendmail[20705]: n330Qxne020705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:27:59 splunk3 sendmail[20940]: n330RxZ5020940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:28:59 splunk3 sendmail[21178]: n330SxSr021178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:29:59 splunk3 sendmail[21411]: n330TxBK021411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:30:06 splunk3 sendmail[21455]: n330U6OI021455: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030030.n330U6m8008291@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:30:06 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34503
|
|
Apr 2 17:30:06 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:30:06 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:30:06 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:30:06 splunk3 spamd[20168]: spamd: processing message <200904030030.n330U6m8008291@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:30:09 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 17:30:09 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34503,mid=<200904030030.n330U6m8008291@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 17:30:09 splunk3 sendmail[21456]: n330U6OI021455: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:30:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:30:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:30:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:30:59 splunk3 sendmail[21678]: n330Uxsa021678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:31:59 splunk3 sendmail[21916]: n330Vxr6021916: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:32:59 splunk3 sendmail[22154]: n330WxS7022154: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:33:59 splunk3 sendmail[22387]: n330XxYG022387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:34:59 splunk3 sendmail[22627]: n330Yx5N022627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:35:07 splunk3 sendmail[22663]: n330Z7PG022663: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030035.n330Z7V1009036@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:35:07 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34559
|
|
Apr 2 17:35:07 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:35:07 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:35:07 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:35:07 splunk3 spamd[20168]: spamd: processing message <200904030035.n330Z7V1009036@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:35:09 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 2 17:35:09 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34559,mid=<200904030035.n330Z7V1009036@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 17:35:09 splunk3 sendmail[22664]: n330Z7PG022663: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:35:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:35:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:35:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:35:59 splunk3 sendmail[22883]: n330ZxO1022883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:36:59 splunk3 sendmail[23122]: n330axei023122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:37:59 splunk3 sendmail[23359]: n330bxto023359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:38:59 splunk3 sendmail[23603]: n330cxvH023603: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:39:59 splunk3 sendmail[23839]: n330dxla023839: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:40:08 splunk3 sendmail[23880]: n330e85u023880: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030040.n330e7O6009665@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:40:08 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34615
|
|
Apr 2 17:40:08 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:40:08 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:40:08 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:40:08 splunk3 spamd[20168]: spamd: processing message <200904030040.n330e7O6009665@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:40:10 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 17:40:10 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34615,mid=<200904030040.n330e7O6009665@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 17:40:10 splunk3 sendmail[23881]: n330e85u023880: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:40:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:40:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:40:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:40:59 splunk3 sendmail[24107]: n330exFo024107: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 17:41:59 splunk3 sendmail[24344]: n330fxaX024344: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:42:59 splunk3 sendmail[24581]: n330gxEY024581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:43:59 splunk3 sendmail[24816]: n330hxBl024816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:44:59 splunk3 sendmail[25055]: n330ixnP025055: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:45:08 splunk3 sendmail[25094]: n330j8IX025094: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030045.n330j8q7010281@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:45:08 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34671
|
|
Apr 2 17:45:08 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:45:08 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:45:08 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:45:08 splunk3 spamd[20168]: spamd: processing message <200904030045.n330j8q7010281@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:45:10 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Apr 2 17:45:10 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34671,mid=<200904030045.n330j8q7010281@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 17:45:10 splunk3 sendmail[25095]: n330j8IX025094: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:45:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:45:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:45:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:45:59 splunk3 sendmail[25314]: n330jxSr025314: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:46:59 splunk3 sendmail[25555]: n330kx2C025555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:47:59 splunk3 sendmail[25788]: n330lxG0025788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:48:59 splunk3 sendmail[26024]: n330mxpj026024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:49:59 splunk3 sendmail[26257]: n330nxgs026257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:50:09 splunk3 sendmail[26302]: n330o91M026302: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030050.n330o9P2010897@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:50:09 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34727
|
|
Apr 2 17:50:09 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:50:09 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:50:09 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:50:09 splunk3 spamd[20168]: spamd: processing message <200904030050.n330o9P2010897@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:50:11 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 2 17:50:11 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34727,mid=<200904030050.n330o9P2010897@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 17:50:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:50:11 splunk3 sendmail[26303]: n330o91M026302: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:50:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:50:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:50:59 splunk3 sendmail[26524]: n330oxd0026524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:51:59 splunk3 sendmail[26759]: n330pxrg026759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:52:59 splunk3 sendmail[26999]: n330qxas026999: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:53:59 splunk3 sendmail[27236]: n330rxxw027236: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:54:59 splunk3 sendmail[27473]: n330sx8R027473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:55:10 splunk3 sendmail[27511]: n330t9mF027511: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030055.n330t937011507@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 17:55:10 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34782
|
|
Apr 2 17:55:10 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 17:55:10 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 17:55:10 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 17:55:10 splunk3 spamd[20168]: spamd: processing message <200904030055.n330t937011507@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 17:55:12 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 17:55:12 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34782,mid=<200904030055.n330t937011507@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 17:55:12 splunk3 sendmail[27512]: n330t9mF027511: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 17:55:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 17:55:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 17:55:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 17:55:59 splunk3 sendmail[27733]: n330txOG027733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 17:56:59 splunk3 sendmail[27972]: n330uxmu027972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:58:00 splunk3 sendmail[28206]: n330vxRD028206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 17:59:00 splunk3 sendmail[28449]: n330x0cF028449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:00:00 splunk3 sendmail[28686]: n33100NC028686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:00:04 splunk3 sendmail[28771]: n33104eE028771: from=root, size=291, class=0, nrcpts=1, msgid=<200904030100.n33104eE028771@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 18:00:05 splunk3 sendmail[28775]: n33104Wa028775: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030100.n33104eE028771@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 18:00:05 splunk3 sendmail[28771]: n33104eE028771: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33104Wa028775 Message accepted for delivery)
|
|
Apr 2 18:00:06 splunk3 sendmail[28776]: n33104Wa028775: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:00:10 splunk3 sendmail[28798]: n3310A3V028798: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030100.n3310A97012151@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:00:10 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34840
|
|
Apr 2 18:00:10 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:00:10 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 18:00:10 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 18:00:10 splunk3 sendmail[28810]: n3310A3V028798: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:00:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:00:15 splunk3 sendmail[28835]: n3310FX5028835: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904030100.n3310FX5028835@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 18:00:15 splunk3 sendmail[28841]: n3310FX5028835: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 18:00:15 splunk3 sendmail[28841]: n3310FX5028835: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 18:00:15 splunk3 sendmail[28841]: n3310FX5028835: n3310FX5028841: postmaster notify: User unknown
|
|
Apr 2 18:00:16 splunk3 sendmail[28841]: n3310FX5028841: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:00:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:00:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:01:00 splunk3 sendmail[29038]: n33110xC029038: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:01:07 splunk3 sendmail[29060]: n33111he029060: from=root, size=443, class=0, nrcpts=1, msgid=<200904030101.n33111he029060@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 18:01:07 splunk3 sendmail[29081]: n33117jD029081: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030101.n33111he029060@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 18:01:07 splunk3 sendmail[29060]: n33111he029060: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33117jD029081 Message accepted for delivery)
|
|
Apr 2 18:01:08 splunk3 sendmail[29082]: n33117jD029081: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:02:00 splunk3 sendmail[29287]: n33120UN029287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:03:00 splunk3 sendmail[29527]: n33130km029527: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:04:00 splunk3 sendmail[29760]: n33140b1029760: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:05:00 splunk3 sendmail[29998]: n33150kD029998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:05:10 splunk3 sendmail[30053]: n3315A9D030053: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030105.n3315AVv012833@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:05:10 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34903
|
|
Apr 2 18:05:10 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:05:10 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 18:05:10 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 18:05:10 splunk3 sendmail[30055]: n3315A9D030053: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:05:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:05:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:05:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:06:00 splunk3 sendmail[30255]: n33160pa030255: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:07:00 splunk3 sendmail[30494]: n33170hq030494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:08:00 splunk3 sendmail[30729]: n33180wc030729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:09:00 splunk3 sendmail[30969]: n33190A9030969: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:10:00 splunk3 sendmail[31206]: n331A0Cj031206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:10:02 splunk3 sendmail[31322]: n331A2Tu031322: from=root, size=292, class=0, nrcpts=1, msgid=<200904030110.n331A2Tu031322@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 18:10:02 splunk3 sendmail[31327]: n331A2kg031327: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030110.n331A2Tu031322@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 18:10:02 splunk3 sendmail[31322]: n331A2Tu031322: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n331A2kg031327 Message accepted for delivery)
|
|
Apr 2 18:10:03 splunk3 sendmail[31328]: n331A2kg031327: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:10:11 splunk3 sendmail[31369]: n331ABQ9031369: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030110.n331ABQ8013447@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:10:11 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34960
|
|
Apr 2 18:10:11 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:10:11 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:10:11 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:10:11 splunk3 spamd[20168]: spamd: processing message <200904030110.n331ABQ8013447@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:10:13 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 18:10:13 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34960,mid=<200904030110.n331ABQ8013447@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:10:13 splunk3 sendmail[31370]: n331ABQ9031369: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:10:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:10:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:10:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:11:00 splunk3 sendmail[31576]: n331B0oN031576: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 18:12:00 splunk3 sendmail[31812]: n331C0FS031812: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:13:00 splunk3 sendmail[32051]: n331D0DO032051: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:14:00 splunk3 sendmail[32288]: n331E0TN032288: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:15:00 splunk3 sendmail[32528]: n331F0t2032528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:15:12 splunk3 sendmail[32581]: n331FCoI032581: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030115.n331FCAD014241@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:15:12 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35016
|
|
Apr 2 18:15:12 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:15:12 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:15:12 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:15:12 splunk3 spamd[20168]: spamd: processing message <200904030115.n331FCAD014241@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:15:14 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 18:15:14 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35016,mid=<200904030115.n331FCAD014241@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:15:14 splunk3 sendmail[32582]: n331FCoI032581: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:15:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:15:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:15:57 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:16:00 splunk3 sendmail[318]: n331G0FD000318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:17:00 splunk3 sendmail[559]: n331H03U000559: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:18:00 splunk3 sendmail[793]: n331I0OP000793: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:19:00 splunk3 sendmail[1031]: n331J0dT001031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:20:00 splunk3 sendmail[1268]: n331K0qQ001268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:20:13 splunk3 sendmail[1330]: n331KDpc001330: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030120.n331KCC8014877@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:20:13 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35072
|
|
Apr 2 18:20:13 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:20:13 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:20:13 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:20:13 splunk3 spamd[20168]: spamd: processing message <200904030120.n331KCC8014877@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:20:15 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 18:20:15 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35072,mid=<200904030120.n331KCC8014877@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:20:15 splunk3 sendmail[1331]: n331KDpc001330: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:20:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:20:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:20:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:21:00 splunk3 sendmail[1536]: n331L03a001536: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:22:00 splunk3 sendmail[1772]: n331M01U001772: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:23:00 splunk3 sendmail[2011]: n331N0A7002011: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:24:00 splunk3 sendmail[2265]: n331O0r0002265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:25:00 splunk3 sendmail[2501]: n331P0YZ002501: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:25:13 splunk3 sendmail[2543]: n331PD9J002543: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030125.n331PDVq015483@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:25:13 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35128
|
|
Apr 2 18:25:13 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:25:13 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:25:13 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:25:13 splunk3 spamd[20168]: spamd: processing message <200904030125.n331PDVq015483@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:25:15 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 18:25:15 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35128,mid=<200904030125.n331PDVq015483@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:25:15 splunk3 sendmail[2544]: n331PD9J002543: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:25:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:25:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:25:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:26:00 splunk3 sendmail[2773]: n331Q0O5002773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 18:27:00 splunk3 sendmail[3024]: n331R0oo003024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:28:00 splunk3 sendmail[3263]: n331S0g0003263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:29:00 splunk3 sendmail[3503]: n331T017003503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:30:00 splunk3 sendmail[3766]: n331U0Mt003766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:30:14 splunk3 sendmail[3811]: n331UEb5003811: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030130.n331UELf016100@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:30:14 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35184
|
|
Apr 2 18:30:14 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:30:14 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:30:14 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:30:14 splunk3 spamd[20168]: spamd: processing message <200904030130.n331UELf016100@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:30:16 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 18:30:16 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35184,mid=<200904030130.n331UELf016100@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:30:16 splunk3 sendmail[3812]: n331UEb5003811: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:30:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:30:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:30:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:31:00 splunk3 sendmail[4044]: n331V0cZ004044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:32:00 splunk3 sendmail[4291]: n331W06m004291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:33:00 splunk3 sendmail[4539]: n331X0La004539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:34:00 splunk3 sendmail[4775]: n331Y0Ya004775: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:35:00 splunk3 sendmail[5027]: n331Z05P005027: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:35:15 splunk3 sendmail[5087]: n331ZF8I005087: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030135.n331ZFSa016853@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:35:15 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35240
|
|
Apr 2 18:35:15 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:35:15 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:35:15 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:35:15 splunk3 spamd[20168]: spamd: processing message <200904030135.n331ZFSa016853@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:35:17 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 2 18:35:17 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35240,mid=<200904030135.n331ZFSa016853@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:35:17 splunk3 sendmail[5088]: n331ZF8I005087: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:35:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:35:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:35:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:36:00 splunk3 sendmail[5320]: n331a0kb005320: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:37:00 splunk3 sendmail[5563]: n331b0tm005563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:38:00 splunk3 sendmail[5798]: n331c0Nl005798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:39:00 splunk3 sendmail[6038]: n331d001006038: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:40:00 splunk3 sendmail[6271]: n331e0B4006271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:40:16 splunk3 sendmail[6339]: n331eGIn006339: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030140.n331eGM2017484@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:40:16 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35295
|
|
Apr 2 18:40:16 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:40:16 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:40:16 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:40:16 splunk3 spamd[20168]: spamd: processing message <200904030140.n331eGM2017484@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:40:18 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 2 18:40:18 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35295,mid=<200904030140.n331eGM2017484@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:40:18 splunk3 sendmail[6340]: n331eGIn006339: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:40:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:40:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:40:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:41:00 splunk3 sendmail[6539]: n331f0aC006539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 18:42:00 splunk3 sendmail[6776]: n331g0QH006776: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:43:00 splunk3 sendmail[7015]: n331h08B007015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:44:00 splunk3 sendmail[7250]: n331i0kT007250: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:45:00 splunk3 sendmail[7490]: n331j05l007490: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:45:17 splunk3 sendmail[7556]: n331jH0b007556: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030145.n331jHI5018093@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:45:17 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35352
|
|
Apr 2 18:45:17 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:45:17 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:45:17 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:45:17 splunk3 spamd[20168]: spamd: processing message <200904030145.n331jHI5018093@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:45:19 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 18:45:19 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35352,mid=<200904030145.n331jHI5018093@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:45:19 splunk3 sendmail[7557]: n331jH0b007556: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:45:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:45:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:45:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:46:00 splunk3 sendmail[7755]: n331k0O0007755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:47:00 splunk3 sendmail[7995]: n331l0tF007995: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:48:00 splunk3 sendmail[8230]: n331m027008230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:49:00 splunk3 sendmail[8470]: n331n0Jx008470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:50:00 splunk3 sendmail[8705]: n331o0mF008705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:50:18 splunk3 sendmail[8773]: n331oIMZ008773: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030150.n331oIwl018705@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:50:18 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35408
|
|
Apr 2 18:50:18 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:50:18 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:50:18 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:50:18 splunk3 spamd[20168]: spamd: processing message <200904030150.n331oIwl018705@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:50:20 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 2 18:50:20 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35408,mid=<200904030150.n331oIwl018705@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:50:20 splunk3 sendmail[8774]: n331oIMZ008773: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:50:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:50:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:50:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:51:00 splunk3 sendmail[8973]: n331p0TI008973: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:52:00 splunk3 sendmail[9210]: n331q0CL009210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:53:00 splunk3 sendmail[9448]: n331r0DP009448: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:54:00 splunk3 sendmail[9697]: n331s0vA009697: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:55:00 splunk3 sendmail[9936]: n331t0DS009936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:55:20 splunk3 sendmail[10015]: n331tKaL010015: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030155.n331tJuJ019311@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 18:55:20 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35463
|
|
Apr 2 18:55:20 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 18:55:20 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 18:55:20 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 18:55:20 splunk3 spamd[20168]: spamd: processing message <200904030155.n331tJuJ019311@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 18:55:24 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1308 bytes.
|
|
Apr 2 18:55:24 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35463,mid=<200904030155.n331tJuJ019311@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 18:55:24 splunk3 sendmail[10016]: n331tKaL010015: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 18:55:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 18:55:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 18:55:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 18:56:00 splunk3 sendmail[10193]: n331u0YG010193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 18:57:00 splunk3 sendmail[10434]: n331v0bt010434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:58:00 splunk3 sendmail[10667]: n331w0h9010667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 18:59:00 splunk3 sendmail[10906]: n331x0tq010906: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:00:00 splunk3 sendmail[11139]: n33200CV011139: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:00:04 splunk3 sendmail[11209]: n33204Jk011209: from=root, size=291, class=0, nrcpts=1, msgid=<200904030200.n33204Jk011209@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 19:00:04 splunk3 sendmail[11213]: n33204mY011213: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030200.n33204Jk011209@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 19:00:04 splunk3 sendmail[11209]: n33204Jk011209: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33204mY011213 Message accepted for delivery)
|
|
Apr 2 19:00:05 splunk3 sendmail[11214]: n33204mY011213: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:00:20 splunk3 sendmail[11292]: n3320Ko2011292: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030200.n3320Kn6019959@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:00:20 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35521
|
|
Apr 2 19:00:20 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:00:20 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 19:00:20 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 19:00:20 splunk3 sendmail[11293]: n3320Ko2011292: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:00:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:00:20 splunk3 sendmail[11309]: n3320Kx8011309: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904030200.n3320Kx8011309@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 19:00:21 splunk3 sendmail[11312]: n3320Kx8011309: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 19:00:21 splunk3 sendmail[11312]: n3320Kx8011309: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 19:00:21 splunk3 sendmail[11312]: n3320Kx8011309: n3320Lx8011312: postmaster notify: User unknown
|
|
Apr 2 19:00:22 splunk3 sendmail[11312]: n3320Lx8011312: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:00:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:00:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:01:00 splunk3 sendmail[11489]: n33210UF011489: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:01:14 splunk3 sendmail[11497]: n33211oF011497: from=root, size=443, class=0, nrcpts=1, msgid=<200904030201.n33211oF011497@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 19:01:14 splunk3 sendmail[11543]: n3321Exf011543: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030201.n33211oF011497@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 19:01:14 splunk3 sendmail[11497]: n33211oF011497: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3321Exf011543 Message accepted for delivery)
|
|
Apr 2 19:01:16 splunk3 sendmail[11552]: n3321Exf011543: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:02:00 splunk3 sendmail[11739]: n33220xA011739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:03:00 splunk3 sendmail[11978]: n33230fJ011978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:04:00 splunk3 sendmail[12213]: n332404N012213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:05:00 splunk3 sendmail[12452]: n33250LE012452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:05:21 splunk3 sendmail[12531]: n3325L7a012531: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030205.n3325L2R020641@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:05:21 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35589
|
|
Apr 2 19:05:21 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:05:21 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 19:05:21 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 19:05:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:05:21 splunk3 sendmail[12537]: n3325L7a012531: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:05:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:05:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:06:00 splunk3 sendmail[12710]: n33260CY012710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:07:00 splunk3 sendmail[12948]: n33270rZ012948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:08:00 splunk3 sendmail[13183]: n33280xF013183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:09:00 splunk3 sendmail[13466]: n33290x4013466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:10:00 splunk3 sendmail[13701]: n332A0HZ013701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:10:03 splunk3 sendmail[13802]: n332A3qh013802: from=root, size=292, class=0, nrcpts=1, msgid=<200904030210.n332A3qh013802@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 19:10:03 splunk3 sendmail[13807]: n332A3sV013807: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030210.n332A3qh013802@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 19:10:03 splunk3 sendmail[13802]: n332A3qh013802: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n332A3sV013807 Message accepted for delivery)
|
|
Apr 2 19:10:04 splunk3 sendmail[13808]: n332A3sV013807: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:10:22 splunk3 sendmail[13902]: n332AMl3013902: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030210.n332AMIL021253@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:10:22 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35649
|
|
Apr 2 19:10:22 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:10:22 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:10:22 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:10:22 splunk3 spamd[20168]: spamd: processing message <200904030210.n332AMIL021253@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:10:24 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 19:10:24 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35649,mid=<200904030210.n332AMIL021253@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:10:24 splunk3 sendmail[13903]: n332AMl3013902: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:10:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:10:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:10:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:11:00 splunk3 sendmail[14072]: n332B0bY014072: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 19:12:00 splunk3 sendmail[14307]: n332C0Sc014307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:13:00 splunk3 sendmail[14546]: n332D09c014546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:14:00 splunk3 sendmail[14780]: n332E0qj014780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:15:00 splunk3 sendmail[15017]: n332F0ex015017: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:15:23 splunk3 sendmail[15107]: n332FN8u015107: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030215.n332FMAa022038@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:15:23 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35706
|
|
Apr 2 19:15:23 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:15:23 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:15:23 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:15:23 splunk3 spamd[20168]: spamd: processing message <200904030215.n332FMAa022038@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:15:25 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 19:15:25 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35706,mid=<200904030215.n332FMAa022038@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:15:25 splunk3 sendmail[15108]: n332FN8u015107: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:15:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:15:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:15:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:16:00 splunk3 sendmail[15275]: n332G0nt015275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:17:00 splunk3 sendmail[15514]: n332H0eJ015514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:18:00 splunk3 sendmail[15750]: n332I0jH015750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:19:00 splunk3 sendmail[15988]: n332J0A3015988: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:20:00 splunk3 sendmail[16225]: n332K0IE016225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:20:23 splunk3 sendmail[16322]: n332KNEI016322: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030220.n332KNFv022676@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:20:23 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35761
|
|
Apr 2 19:20:23 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:20:23 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:20:23 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:20:23 splunk3 spamd[20168]: spamd: processing message <200904030220.n332KNFv022676@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:20:25 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 19:20:25 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35761,mid=<200904030220.n332KNFv022676@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:20:25 splunk3 sendmail[16323]: n332KNEI016322: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:20:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:20:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:20:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:21:00 splunk3 sendmail[16491]: n332L0pl016491: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:22:00 splunk3 sendmail[16726]: n332M0Gb016726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:23:00 splunk3 sendmail[16967]: n332N0mi016967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:24:00 splunk3 sendmail[17205]: n332O0Rg017205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:25:00 splunk3 sendmail[17444]: n332P0Fk017444: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:25:24 splunk3 sendmail[17536]: n332POIx017536: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030225.n332PNIk023285@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:25:24 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35817
|
|
Apr 2 19:25:24 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:25:24 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:25:24 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:25:24 splunk3 spamd[20168]: spamd: processing message <200904030225.n332PNIk023285@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:25:26 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 19:25:26 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35817,mid=<200904030225.n332PNIk023285@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:25:26 splunk3 sendmail[17537]: n332POIx017536: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:25:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:25:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:26:00 splunk3 sendmail[17701]: n332Q0RN017701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 19:27:00 splunk3 sendmail[17942]: n332R00m017942: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:28:00 splunk3 sendmail[18175]: n332S00I018175: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:29:00 splunk3 sendmail[18412]: n332T0Hc018412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:30:00 splunk3 sendmail[18646]: n332U0M2018646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:30:24 splunk3 sendmail[18759]: n332UO7t018759: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030230.n332UOKw023935@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:30:24 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35873
|
|
Apr 2 19:30:24 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:30:24 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:30:24 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:30:24 splunk3 spamd[20168]: spamd: processing message <200904030230.n332UOKw023935@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:30:26 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 2 19:30:26 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35873,mid=<200904030230.n332UOKw023935@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:30:26 splunk3 sendmail[18760]: n332UO7t018759: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:30:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:30:44 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:30:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:31:00 splunk3 sendmail[18914]: n332V0UD018914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:32:00 splunk3 sendmail[19148]: n332W01T019148: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:33:00 splunk3 sendmail[19386]: n332X0r2019386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:33:17 splunk3 sendmail[19446]: n332XGF9019446: from=<3bHXVSRQKBgEhpphmfbmfsut-opsfqmzhpphmf.dpntqbnnftqmvolju.dpn@alerts.bounces.google.com>, size=11722, class=0, nrcpts=1, msgid=<001636920611008ea804669d5f17@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.191]
|
|
Apr 2 19:33:17 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35901
|
|
Apr 2 19:33:17 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:33:17 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:33:17 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:33:17 splunk3 spamd[20168]: spamd: processing message <001636920611008ea804669d5f17@google.com> for spamme:501
|
|
Apr 2 19:33:19 splunk3 spamd[20168]: spamd: clean message (-0.5/5.0) for spamme:501 in 1.6 seconds, 12152 bytes.
|
|
Apr 2 19:33:19 splunk3 spamd[20168]: spamd: result: . 0 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY,URIBL_SBL scantime=1.6,size=12152,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35901,mid=<001636920611008ea804669d5f17@google.com>,bayes=1.11022302462516e-16,autolearn=no
|
|
Apr 2 19:33:19 splunk3 sendmail[19448]: n332XGF9019446: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=41933, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:33:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:34:00 splunk3 sendmail[19628]: n332Y0J5019628: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:35:00 splunk3 sendmail[19867]: n332Z0lX019867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:35:25 splunk3 sendmail[19977]: n332ZP2C019977: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030235.n332ZPDV024682@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:35:25 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35930
|
|
Apr 2 19:35:25 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:35:25 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:35:25 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:35:25 splunk3 spamd[20168]: spamd: processing message <200904030235.n332ZPDV024682@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:35:27 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 19:35:27 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35930,mid=<200904030235.n332ZPDV024682@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:35:27 splunk3 sendmail[19978]: n332ZP2C019977: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:35:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:35:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:35:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:36:00 splunk3 sendmail[20124]: n332a0gV020124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:37:00 splunk3 sendmail[20367]: n332b0GC020367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:38:00 splunk3 sendmail[20603]: n332c0Bp020603: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:39:00 splunk3 sendmail[20846]: n332d0ZG020846: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:40:00 splunk3 sendmail[21079]: n332e0h3021079: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:40:25 splunk3 sendmail[21196]: n332ePKl021196: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030240.n332ePaI025323@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:40:25 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35985
|
|
Apr 2 19:40:25 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:40:25 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:40:25 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:40:25 splunk3 spamd[20168]: spamd: processing message <200904030240.n332ePaI025323@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:40:27 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 19:40:27 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35985,mid=<200904030240.n332ePaI025323@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:40:27 splunk3 sendmail[21197]: n332ePKl021196: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:40:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:40:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:40:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:41:00 splunk3 sendmail[21349]: n332f0B4021349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 19:42:00 splunk3 sendmail[21583]: n332g09F021583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:43:00 splunk3 sendmail[21822]: n332h0pu021822: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:44:00 splunk3 sendmail[22061]: n332i06x022061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:45:00 splunk3 sendmail[22300]: n332j0DL022300: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:45:26 splunk3 sendmail[22408]: n332jQq6022408: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030245.n332jPdM025928@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:45:26 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36042
|
|
Apr 2 19:45:26 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:45:26 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:45:26 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:45:26 splunk3 spamd[20168]: spamd: processing message <200904030245.n332jPdM025928@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:45:28 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 19:45:28 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36042,mid=<200904030245.n332jPdM025928@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:45:28 splunk3 sendmail[22409]: n332jQq6022408: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:45:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:45:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:45:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:46:00 splunk3 sendmail[22558]: n332k0id022558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:47:00 splunk3 sendmail[22794]: n332l0Tx022794: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:48:00 splunk3 sendmail[23031]: n332m0eo023031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:49:00 splunk3 sendmail[23268]: n332n0CL023268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:50:00 splunk3 sendmail[23503]: n332o0Vb023503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:50:26 splunk3 sendmail[23619]: n332oQjg023619: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030250.n332oQej026546@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:50:26 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36097
|
|
Apr 2 19:50:26 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:50:26 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:50:26 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:50:26 splunk3 spamd[20168]: spamd: processing message <200904030250.n332oQej026546@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:50:28 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 19:50:28 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36097,mid=<200904030250.n332oQej026546@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:50:28 splunk3 sendmail[23622]: n332oQjg023619: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:50:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:50:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:50:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:51:00 splunk3 sendmail[23772]: n332p0Pa023772: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:52:00 splunk3 sendmail[24007]: n332q0WP024007: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:53:00 splunk3 sendmail[24248]: n332r0k0024248: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:54:00 splunk3 sendmail[24485]: n332s0hF024485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:55:00 splunk3 sendmail[24725]: n332t0eJ024725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:55:27 splunk3 sendmail[24834]: n332tRdl024834: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030255.n332tQFI027153@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 19:55:27 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36153
|
|
Apr 2 19:55:27 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 19:55:27 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 19:55:27 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 19:55:27 splunk3 spamd[20168]: spamd: processing message <200904030255.n332tQFI027153@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 19:55:29 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 2 19:55:29 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36153,mid=<200904030255.n332tQFI027153@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 19:55:29 splunk3 sendmail[24835]: n332tRdl024834: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 19:55:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 19:55:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 19:55:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 19:56:00 splunk3 sendmail[24982]: n332u0DS024982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 19:57:00 splunk3 sendmail[25221]: n332v0fm025221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:58:00 splunk3 sendmail[25457]: n332w0Wo025457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 19:59:00 splunk3 sendmail[25696]: n332x0Sb025696: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:00:00 splunk3 sendmail[25930]: n33300kj025930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:00:05 splunk3 sendmail[26014]: n33305hL026014: from=root, size=291, class=0, nrcpts=1, msgid=<200904030300.n33305hL026014@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 20:00:05 splunk3 sendmail[26018]: n333056F026018: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030300.n33305hL026014@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 20:00:05 splunk3 sendmail[26014]: n33305hL026014: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n333056F026018 Message accepted for delivery)
|
|
Apr 2 20:00:06 splunk3 sendmail[26019]: n333056F026018: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:00:26 splunk3 sendmail[26113]: n3330QGf026113: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904030300.n3330QGf026113@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 20:00:26 splunk3 sendmail[26116]: n3330QGf026113: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 20:00:26 splunk3 sendmail[26116]: n3330QGf026113: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 20:00:26 splunk3 sendmail[26116]: n3330QGf026113: n3330QGf026116: postmaster notify: User unknown
|
|
Apr 2 20:00:27 splunk3 sendmail[26130]: n3330RTH026130: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030300.n3330RoK027802@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:00:27 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36218
|
|
Apr 2 20:00:27 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:00:27 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 20:00:27 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 20:00:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:00:27 splunk3 sendmail[26131]: n3330RTH026130: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:00:27 splunk3 sendmail[26116]: n3330QGf026116: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:00:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:00:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:01:00 splunk3 sendmail[26279]: n333108J026279: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:01:09 splunk3 sendmail[26285]: n33311ns026285: from=root, size=443, class=0, nrcpts=1, msgid=<200904030301.n33311ns026285@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 20:01:10 splunk3 sendmail[26325]: n33319EO026325: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030301.n33311ns026285@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 20:01:10 splunk3 sendmail[26285]: n33311ns026285: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33319EO026325 Message accepted for delivery)
|
|
Apr 2 20:01:11 splunk3 sendmail[26326]: n33319EO026325: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:02:00 splunk3 sendmail[26528]: n333204X026528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:03:00 splunk3 sendmail[26765]: n33330bF026765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:04:00 splunk3 sendmail[26998]: n33340L3026998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:05:00 splunk3 sendmail[27238]: n333501T027238: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:05:27 splunk3 sendmail[27346]: n3335RWM027346: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030305.n3335REk028513@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:05:27 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36274
|
|
Apr 2 20:05:27 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:05:28 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 20:05:28 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 20:05:28 splunk3 sendmail[27348]: n3335RWM027346: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:05:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:05:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:05:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:06:00 splunk3 sendmail[27495]: n33360Cx027495: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:07:00 splunk3 sendmail[27733]: n333708T027733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:08:00 splunk3 sendmail[27969]: n33380jh027969: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:09:00 splunk3 sendmail[28213]: n33390ov028213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:10:00 splunk3 sendmail[28448]: n333A0r8028448: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:10:02 splunk3 sendmail[28549]: n333A2Jo028549: from=root, size=292, class=0, nrcpts=1, msgid=<200904030310.n333A2Jo028549@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 20:10:02 splunk3 sendmail[28554]: n333A21Y028554: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030310.n333A2Jo028549@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 20:10:02 splunk3 sendmail[28549]: n333A2Jo028549: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n333A21Y028554 Message accepted for delivery)
|
|
Apr 2 20:10:03 splunk3 sendmail[28555]: n333A21Y028554: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:10:28 splunk3 sendmail[28668]: n333ASVm028668: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030310.n333ASkJ029107@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:10:28 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36331
|
|
Apr 2 20:10:28 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:10:28 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:10:28 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:10:28 splunk3 spamd[20168]: spamd: processing message <200904030310.n333ASkJ029107@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:10:30 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 20:10:30 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36331,mid=<200904030310.n333ASkJ029107@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 20:10:30 splunk3 sendmail[28669]: n333ASVm028668: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:10:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:10:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:10:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:11:00 splunk3 sendmail[28819]: n333B0pL028819: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 20:12:00 splunk3 sendmail[29056]: n333C0XB029056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:13:00 splunk3 sendmail[29296]: n333D0HU029296: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:14:01 splunk3 sendmail[29531]: n333E0Gv029531: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:15:01 splunk3 sendmail[29770]: n333F1pS029770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:15:29 splunk3 sendmail[29898]: n333FTnM029898: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030315.n333FT0J029919@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:15:29 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36387
|
|
Apr 2 20:15:29 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:15:29 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:15:29 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:15:29 splunk3 spamd[20168]: spamd: processing message <200904030315.n333FT0J029919@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:15:31 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 20:15:31 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36387,mid=<200904030315.n333FT0J029919@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 20:15:31 splunk3 sendmail[29899]: n333FTnM029898: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:15:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:15:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:15:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:16:01 splunk3 sendmail[30029]: n333G10C030029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:17:01 splunk3 sendmail[30268]: n333H1Hd030268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:18:01 splunk3 sendmail[30502]: n333I1F2030502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:19:01 splunk3 sendmail[30740]: n333J1xW030740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:20:01 splunk3 sendmail[30975]: n333K1xS030975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:20:30 splunk3 sendmail[31106]: n333KTXi031106: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030320.n333KT6r030525@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:20:30 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36443
|
|
Apr 2 20:20:30 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:20:30 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:20:30 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:20:30 splunk3 spamd[20168]: spamd: processing message <200904030320.n333KT6r030525@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:20:32 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 20:20:32 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36443,mid=<200904030320.n333KT6r030525@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 20:20:32 splunk3 sendmail[31107]: n333KTXi031106: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:20:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:20:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:20:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:21:01 splunk3 sendmail[31241]: n333L1E1031241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:22:01 splunk3 sendmail[31475]: n333M1kD031475: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:23:01 splunk3 sendmail[31717]: n333N1dx031717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:24:01 splunk3 sendmail[31954]: n333O1Uh031954: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:25:01 splunk3 sendmail[32192]: n333P11M032192: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:25:30 splunk3 sendmail[32321]: n333PUYB032321: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030325.n333PUvE031155@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:25:30 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36498
|
|
Apr 2 20:25:30 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:25:30 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:25:30 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:25:30 splunk3 spamd[20168]: spamd: processing message <200904030325.n333PUvE031155@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:25:32 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 20:25:32 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36498,mid=<200904030325.n333PUvE031155@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 20:25:32 splunk3 sendmail[32322]: n333PUYB032321: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:25:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:25:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:25:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:26:01 splunk3 sendmail[32452]: n333Q1j7032452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 20:27:01 splunk3 sendmail[32692]: n333R1pm032692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:28:01 splunk3 sendmail[461]: n333S1vI000461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:29:01 splunk3 sendmail[699]: n333T16B000699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:30:00 splunk3 sendmail[934]: n333U0rH000934: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030330.n333U03Q031681@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:30:00 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36542
|
|
Apr 2 20:30:00 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:30:00 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:30:00 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:30:00 splunk3 spamd[20168]: spamd: processing message <200904030330.n333U03Q031681@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:30:01 splunk3 sendmail[940]: n333U1Te000940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:30:02 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 20:30:02 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36542,mid=<200904030330.n333U03Q031681@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 20:30:02 splunk3 sendmail[935]: n333U0rH000934: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:30:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:30:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:30:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:31:01 splunk3 sendmail[1200]: n333V152001200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:32:01 splunk3 sendmail[1436]: n333W1lc001436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:33:01 splunk3 sendmail[1677]: n333X11F001677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:34:01 splunk3 sendmail[1911]: n333Y1u0001911: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:35:01 splunk3 sendmail[2152]: n333Z1Qc002152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:35:01 splunk3 sendmail[2153]: n333Z1mg002153: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030335.n333Z11r032430@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:35:01 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36598
|
|
Apr 2 20:35:01 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:35:01 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:35:01 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:35:01 splunk3 spamd[20168]: spamd: processing message <200904030335.n333Z11r032430@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:35:03 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 20:35:03 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36598,mid=<200904030335.n333Z11r032430@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 20:35:03 splunk3 sendmail[2154]: n333Z1mg002153: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:35:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:35:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:35:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:36:01 splunk3 sendmail[2407]: n333a1De002407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:37:01 splunk3 sendmail[2653]: n333b1Hx002653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:38:01 splunk3 sendmail[2900]: n333c1Lr002900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:39:01 splunk3 sendmail[3153]: n333d1VA003153: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:40:01 splunk3 sendmail[3400]: n333e1Kn003400: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:40:02 splunk3 sendmail[3407]: n333e2xE003407: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904030340.n333e1F3000618@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:40:02 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36661
|
|
Apr 2 20:40:02 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:40:02 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:40:02 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:40:02 splunk3 spamd[20168]: spamd: processing message <200904030340.n333e1F3000618@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:40:04 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1302 bytes.
|
|
Apr 2 20:40:04 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36661,mid=<200904030340.n333e1F3000618@virt2.int.splunk.com>,bayes=0.0657946294208017,autolearn=no
|
|
Apr 2 20:40:04 splunk3 sendmail[3408]: n333e2xE003407: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:40:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:40:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:40:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:41:01 splunk3 sendmail[3683]: n333f16O003683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 20:42:01 splunk3 sendmail[3926]: n333g1L1003926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:43:01 splunk3 sendmail[4179]: n333h1Gr004179: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:44:01 splunk3 sendmail[4431]: n333i1LQ004431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:45:01 splunk3 sendmail[4678]: n333j16Q004678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:45:02 splunk3 sendmail[4680]: n333j22D004680: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030345.n333j2TZ001262@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:45:02 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36718
|
|
Apr 2 20:45:02 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:45:02 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:45:02 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:45:02 splunk3 spamd[20168]: spamd: processing message <200904030345.n333j2TZ001262@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:45:04 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 20:45:04 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36718,mid=<200904030345.n333j2TZ001262@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 20:45:04 splunk3 sendmail[4681]: n333j22D004680: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:45:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:45:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:45:56 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:46:01 splunk3 sendmail[4934]: n333k1tA004934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:47:01 splunk3 sendmail[5213]: n333l1KR005213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:48:01 splunk3 sendmail[5453]: n333m1YJ005453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:48:14 splunk3 sendmail[5492]: n333mDZA005492: ruleset=check_rcpt, arg1=<sanjinn001@yahoo.com.tw>, relay=61-231-68-105.dynamic.hinet.net [61.231.68.105], reject=550 5.7.1 <sanjinn001@yahoo.com.tw>... Relaying denied
|
|
Apr 2 20:49:01 splunk3 sendmail[5692]: n333n1pA005692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:50:01 splunk3 sendmail[5936]: n333o1Zf005936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:50:04 splunk3 sendmail[5961]: n333o4tD005961: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030350.n333o3vw001898@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:50:04 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36773
|
|
Apr 2 20:50:04 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:50:04 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:50:04 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:50:04 splunk3 spamd[20168]: spamd: processing message <200904030350.n333o3vw001898@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:50:06 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1305 bytes.
|
|
Apr 2 20:50:06 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36773,mid=<200904030350.n333o3vw001898@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 20:50:06 splunk3 sendmail[5962]: n333o4tD005961: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:50:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:50:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:51:01 splunk3 sendmail[6195]: n333p1MA006195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:52:01 splunk3 sendmail[6425]: n333q1RT006425: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:53:01 splunk3 sendmail[6661]: n333r1qV006661: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:54:01 splunk3 sendmail[6900]: n333s1ED006900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:55:01 splunk3 sendmail[7140]: n333t16d007140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:55:04 splunk3 sendmail[7170]: n333t483007170: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030355.n333t4RB002523@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 20:55:04 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36829
|
|
Apr 2 20:55:04 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 20:55:04 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 20:55:04 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 20:55:04 splunk3 spamd[20168]: spamd: processing message <200904030355.n333t4RB002523@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 20:55:06 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 20:55:06 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36829,mid=<200904030355.n333t4RB002523@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 20:55:06 splunk3 sendmail[7171]: n333t483007170: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 20:55:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 20:55:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 20:55:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 20:56:01 splunk3 sendmail[7399]: n333u157007399: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 20:57:01 splunk3 sendmail[7647]: n333v1sH007647: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:58:01 splunk3 sendmail[7883]: n333w19I007883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 20:59:01 splunk3 sendmail[8122]: n333x117008122: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:00:01 splunk3 sendmail[8411]: n33401Ku008411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:00:02 splunk3 sendmail[8424]: n33402w0008424: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904030400.n33402w0008424@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 21:00:02 splunk3 sendmail[8426]: n33402w0008424: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 21:00:02 splunk3 sendmail[8426]: n33402w0008424: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 2 21:00:02 splunk3 sendmail[8426]: n33402w0008424: n33402w0008426: postmaster notify: User unknown
|
|
Apr 2 21:00:03 splunk3 sendmail[8426]: n33402w0008426: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:00:04 splunk3 sendmail[8469]: n33404us008469: from=root, size=291, class=0, nrcpts=1, msgid=<200904030400.n33404us008469@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 21:00:04 splunk3 sendmail[8473]: n33404El008473: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030400.n33404us008469@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 21:00:04 splunk3 sendmail[8469]: n33404us008469: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33404El008473 Message accepted for delivery)
|
|
Apr 2 21:00:05 splunk3 sendmail[8479]: n33405Ol008479: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030400.n33404lJ003157@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:00:05 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36893
|
|
Apr 2 21:00:05 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:00:05 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 21:00:05 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 21:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:00:05 splunk3 sendmail[8480]: n33405Ol008479: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:00:05 splunk3 sendmail[8474]: n33404El008473: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:00:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:00:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:01:01 splunk3 sendmail[8713]: n334115k008713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:01:15 splunk3 sendmail[8716]: n334114U008716: from=root, size=443, class=0, nrcpts=1, msgid=<200904030401.n334114U008716@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 21:01:15 splunk3 sendmail[8780]: n3341FVn008780: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030401.n334114U008716@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 21:01:15 splunk3 sendmail[8716]: n334114U008716: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3341FVn008780 Message accepted for delivery)
|
|
Apr 2 21:01:16 splunk3 sendmail[8781]: n3341FVn008780: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:02:01 splunk3 sendmail[8958]: n33421ja008958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:03:01 splunk3 sendmail[9197]: n33431oq009197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:04:01 splunk3 sendmail[9431]: n33441cE009431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:05:01 splunk3 sendmail[9682]: n334516c009682: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:05:06 splunk3 sendmail[9713]: n334567j009713: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030405.n33455Jd003843@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:05:06 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36949
|
|
Apr 2 21:05:06 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:05:06 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 21:05:06 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 21:05:06 splunk3 sendmail[9714]: n334567j009713: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:05:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:05:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:05:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:06:01 splunk3 sendmail[9938]: n33461xe009938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:07:01 splunk3 sendmail[10173]: n33471D4010173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:08:01 splunk3 sendmail[10410]: n33481tp010410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:09:01 splunk3 sendmail[10652]: n33491sp010652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:10:01 splunk3 sendmail[10888]: n334A1JN010888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:10:02 splunk3 sendmail[10988]: n334A27W010988: from=root, size=292, class=0, nrcpts=1, msgid=<200904030410.n334A27W010988@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 21:10:02 splunk3 sendmail[10993]: n334A2UA010993: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030410.n334A27W010988@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 21:10:02 splunk3 sendmail[10988]: n334A27W010988: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n334A2UA010993 Message accepted for delivery)
|
|
Apr 2 21:10:04 splunk3 sendmail[10994]: n334A2UA010993: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:10:06 splunk3 sendmail[11027]: n334A6Fr011027: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030410.n334A6tl004452@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:10:06 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37006
|
|
Apr 2 21:10:06 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:10:06 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:10:06 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:10:06 splunk3 spamd[20168]: spamd: processing message <200904030410.n334A6tl004452@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:10:08 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 21:10:08 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37006,mid=<200904030410.n334A6tl004452@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 21:10:08 splunk3 sendmail[11028]: n334A6Fr011027: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:10:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:10:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:10:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:11:01 splunk3 sendmail[11258]: n334B1uQ011258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 21:12:01 splunk3 sendmail[11494]: n334C15p011494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:13:01 splunk3 sendmail[11734]: n334D1uw011734: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:14:01 splunk3 sendmail[11973]: n334E1Ia011973: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:15:01 splunk3 sendmail[12212]: n334F1JD012212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:15:07 splunk3 sendmail[12244]: n334F7ZL012244: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030415.n334F69L005243@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:15:07 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37062
|
|
Apr 2 21:15:07 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:15:07 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:15:07 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:15:07 splunk3 spamd[20168]: spamd: processing message <200904030415.n334F69L005243@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:15:09 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 2 21:15:09 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37062,mid=<200904030415.n334F69L005243@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 21:15:09 splunk3 sendmail[12245]: n334F7ZL012244: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:15:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:15:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:15:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:16:01 splunk3 sendmail[12470]: n334G1If012470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:17:01 splunk3 sendmail[12710]: n334H1Pq012710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:18:01 splunk3 sendmail[12946]: n334I1hO012946: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:19:01 splunk3 sendmail[13185]: n334J1Nm013185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:20:01 splunk3 sendmail[13465]: n334K1K9013465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:20:07 splunk3 sendmail[13497]: n334K7cY013497: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030420.n334K7bi005878@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:20:07 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37118
|
|
Apr 2 21:20:07 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:20:07 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:20:07 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:20:07 splunk3 spamd[20168]: spamd: processing message <200904030420.n334K7bi005878@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:20:09 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 2 21:20:09 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37118,mid=<200904030420.n334K7bi005878@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 21:20:09 splunk3 sendmail[13498]: n334K7cY013497: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:20:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:20:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:20:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:21:01 splunk3 sendmail[13726]: n334L1Ou013726: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:22:01 splunk3 sendmail[13961]: n334M1Qv013961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:23:01 splunk3 sendmail[14201]: n334N1MR014201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:24:01 splunk3 sendmail[14438]: n334O1PZ014438: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:25:01 splunk3 sendmail[14674]: n334P1pj014674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:25:08 splunk3 sendmail[14723]: n334P8SD014723: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030425.n334P7eR006494@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:25:08 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37173
|
|
Apr 2 21:25:08 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:25:08 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:25:08 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:25:08 splunk3 spamd[20168]: spamd: processing message <200904030425.n334P7eR006494@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:25:10 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1305 bytes.
|
|
Apr 2 21:25:10 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37173,mid=<200904030425.n334P7eR006494@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 21:25:10 splunk3 sendmail[14724]: n334P8SD014723: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:25:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:25:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:25:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:26:01 splunk3 sendmail[14932]: n334Q1hH014932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 21:27:01 splunk3 sendmail[15171]: n334R1bL015171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:28:01 splunk3 sendmail[15406]: n334S14v015406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:29:01 splunk3 sendmail[15646]: n334T17N015646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:30:01 splunk3 sendmail[15888]: n334U1Tp015888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:30:08 splunk3 sendmail[15936]: n334U8Cg015936: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030430.n334U8pX007111@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:30:08 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37230
|
|
Apr 2 21:30:08 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:30:08 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:30:08 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:30:08 splunk3 spamd[20168]: spamd: processing message <200904030430.n334U8pX007111@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:30:10 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 21:30:10 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37230,mid=<200904030430.n334U8pX007111@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 21:30:10 splunk3 sendmail[15937]: n334U8Cg015936: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:30:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:30:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:30:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:31:01 splunk3 sendmail[16150]: n334V173016150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:32:01 splunk3 sendmail[16385]: n334W1Sl016385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:33:01 splunk3 sendmail[16625]: n334X1sP016625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:34:01 splunk3 sendmail[16859]: n334Y1lk016859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:35:01 splunk3 sendmail[17099]: n334Z1mB017099: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:35:09 splunk3 sendmail[17149]: n334Z9OZ017149: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030435.n334Z8Cg007856@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:35:09 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37285
|
|
Apr 2 21:35:09 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:35:09 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:35:09 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:35:09 splunk3 spamd[20168]: spamd: processing message <200904030435.n334Z8Cg007856@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:35:11 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 21:35:11 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37285,mid=<200904030435.n334Z8Cg007856@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 21:35:11 splunk3 sendmail[17150]: n334Z9OZ017149: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:35:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:35:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:35:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:36:01 splunk3 sendmail[17357]: n334a1nV017357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:37:01 splunk3 sendmail[17596]: n334b1ib017596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:38:01 splunk3 sendmail[17834]: n334c1GJ017834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:39:01 splunk3 sendmail[18073]: n334d1kT018073: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:40:01 splunk3 sendmail[18312]: n334e1n5018312: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:40:11 splunk3 sendmail[18363]: n334eBZW018363: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030440.n334e9Sk008492@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:40:11 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37341
|
|
Apr 2 21:40:11 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:40:11 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:40:11 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:40:11 splunk3 spamd[20168]: spamd: processing message <200904030440.n334e9Sk008492@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:40:13 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 2 21:40:13 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37341,mid=<200904030440.n334e9Sk008492@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 21:40:13 splunk3 sendmail[18364]: n334eBZW018363: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:40:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:40:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:40:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:41:01 splunk3 sendmail[18574]: n334f1Lo018574: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 21:42:01 splunk3 sendmail[18807]: n334g17k018807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:43:01 splunk3 sendmail[19047]: n334h1lG019047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:44:01 splunk3 sendmail[19279]: n334i1p6019279: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:45:01 splunk3 sendmail[19517]: n334j1VY019517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:45:12 splunk3 sendmail[19566]: n334jCrH019566: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030445.n334jCtk009101@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:45:12 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37398
|
|
Apr 2 21:45:12 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:45:12 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:45:12 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:45:12 splunk3 spamd[20168]: spamd: processing message <200904030445.n334jCtk009101@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:45:14 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 2 21:45:14 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37398,mid=<200904030445.n334jCtk009101@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 21:45:14 splunk3 sendmail[19567]: n334jCrH019566: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:45:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:45:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:45:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:46:01 splunk3 sendmail[19774]: n334k1Tf019774: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:47:01 splunk3 sendmail[20014]: n334l1gM020014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:48:01 splunk3 sendmail[20252]: n334m1KF020252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:48:14 splunk3 sendmail[5492]: n333mDZA005492: timeout waiting for input from 61-231-68-105.dynamic.hinet.net during server cmd read
|
|
Apr 2 21:48:14 splunk3 sendmail[5492]: n333mDZA005492: lost input channel from 61-231-68-105.dynamic.hinet.net [61.231.68.105] to MTA after rcpt
|
|
Apr 2 21:48:14 splunk3 sendmail[5492]: n333mDZA005492: from=<0403pc@163.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=61-231-68-105.dynamic.hinet.net [61.231.68.105]
|
|
Apr 2 21:49:01 splunk3 sendmail[20489]: n334n1q8020489: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:50:01 splunk3 sendmail[20731]: n334o1ro020731: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:50:13 splunk3 sendmail[20802]: n334oCC0020802: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030450.n334oC9A009716@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:50:13 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37453
|
|
Apr 2 21:50:13 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:50:13 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:50:13 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:50:13 splunk3 spamd[20168]: spamd: processing message <200904030450.n334oC9A009716@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:50:15 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1305 bytes.
|
|
Apr 2 21:50:15 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37453,mid=<200904030450.n334oC9A009716@virt2.int.splunk.com>,bayes=0.168483853974362,autolearn=no
|
|
Apr 2 21:50:15 splunk3 sendmail[20803]: n334oCC0020802: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:50:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:50:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:50:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:51:01 splunk3 sendmail[20993]: n334p16D020993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:52:01 splunk3 sendmail[21229]: n334q1Mx021229: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:53:01 splunk3 sendmail[21468]: n334r1ZD021468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:54:01 splunk3 sendmail[21708]: n334s1BA021708: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:55:01 splunk3 sendmail[21947]: n334t1UM021947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:55:17 splunk3 sendmail[22022]: n334tH55022022: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030455.n334tDih010322@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 21:55:17 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37509
|
|
Apr 2 21:55:17 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 21:55:17 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 21:55:17 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 21:55:17 splunk3 spamd[20168]: spamd: processing message <200904030455.n334tDih010322@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 21:55:19 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 21:55:19 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37509,mid=<200904030455.n334tDih010322@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 21:55:19 splunk3 sendmail[22024]: n334tH55022022: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 21:55:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 21:55:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 21:55:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 21:56:01 splunk3 sendmail[22205]: n334u19i022205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 21:57:01 splunk3 sendmail[22444]: n334v1NH022444: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:58:01 splunk3 sendmail[22678]: n334w1Xq022678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 21:59:01 splunk3 sendmail[22917]: n334x14A022917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:00:01 splunk3 sendmail[23202]: n33501B4023202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:00:04 splunk3 sendmail[23236]: n33504QL023236: from=root, size=291, class=0, nrcpts=1, msgid=<200904030500.n33504QL023236@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 22:00:04 splunk3 sendmail[23240]: n335047t023240: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030500.n33504QL023236@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 22:00:04 splunk3 sendmail[23236]: n33504QL023236: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n335047t023240 Message accepted for delivery)
|
|
Apr 2 22:00:06 splunk3 sendmail[23241]: n335047t023240: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:00:07 splunk3 sendmail[23274]: n33507Sj023274: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904030500.n33507Sj023274@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 22:00:07 splunk3 sendmail[23276]: n33507Sj023274: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 22:00:07 splunk3 sendmail[23276]: n33507Sj023274: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 2 22:00:07 splunk3 sendmail[23276]: n33507Sj023274: n33507Sj023276: postmaster notify: User unknown
|
|
Apr 2 22:00:09 splunk3 sendmail[23276]: n33507Sj023276: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:00:18 splunk3 sendmail[23330]: n3350IkR023330: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030500.n3350H0O010961@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:00:18 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37574
|
|
Apr 2 22:00:18 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:00:18 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 22:00:18 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 22:00:18 splunk3 sendmail[23331]: n3350IkR023330: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:00:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:00:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:00:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:01:01 splunk3 sendmail[23502]: n33511qW023502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:01:11 splunk3 sendmail[23508]: n33511Me023508: from=root, size=443, class=0, nrcpts=1, msgid=<200904030501.n33511Me023508@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 22:01:11 splunk3 sendmail[23552]: n3351BUu023552: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030501.n33511Me023508@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 22:01:11 splunk3 sendmail[23508]: n33511Me023508: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3351BUu023552 Message accepted for delivery)
|
|
Apr 2 22:01:13 splunk3 sendmail[23554]: n3351BUu023552: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:02:01 splunk3 sendmail[23750]: n33521Wv023750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:03:01 splunk3 sendmail[23989]: n33531RT023989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:04:01 splunk3 sendmail[24224]: n33541qK024224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:05:01 splunk3 sendmail[24464]: n33551ed024464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:05:18 splunk3 sendmail[24554]: n3355IZF024554: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030505.n3355IU8011643@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:05:18 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37631
|
|
Apr 2 22:05:18 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:05:18 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 22:05:18 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 22:05:18 splunk3 sendmail[24555]: n3355IZF024554: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:05:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:05:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:05:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:06:01 splunk3 sendmail[24724]: n33561Vk024724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:07:01 splunk3 sendmail[24960]: n33571qg024960: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:08:01 splunk3 sendmail[25197]: n33581Ik025197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:09:01 splunk3 sendmail[25439]: n33591lJ025439: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:10:01 splunk3 sendmail[25675]: n335A1Ku025675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:10:03 splunk3 sendmail[25792]: n335A3Z5025792: from=root, size=292, class=0, nrcpts=1, msgid=<200904030510.n335A3Z5025792@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 22:10:03 splunk3 sendmail[25797]: n335A3d1025797: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030510.n335A3Z5025792@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 22:10:03 splunk3 sendmail[25792]: n335A3Z5025792: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n335A3d1025797 Message accepted for delivery)
|
|
Apr 2 22:10:04 splunk3 sendmail[25798]: n335A3d1025797: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:10:19 splunk3 sendmail[25876]: n335AJdR025876: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030510.n335AIwE012260@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:10:19 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37687
|
|
Apr 2 22:10:19 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:10:19 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:10:19 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:10:19 splunk3 spamd[20168]: spamd: processing message <200904030510.n335AIwE012260@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:10:21 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 22:10:21 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37687,mid=<200904030510.n335AIwE012260@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:10:21 splunk3 sendmail[25877]: n335AJdR025876: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:10:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:10:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:10:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:11:01 splunk3 sendmail[26046]: n335B10c026046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 22:12:01 splunk3 sendmail[26281]: n335C1ar026281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:13:01 splunk3 sendmail[26521]: n335D1VW026521: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:14:01 splunk3 sendmail[26754]: n335E1Nb026754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:15:01 splunk3 sendmail[26994]: n335F1vw026994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:15:19 splunk3 sendmail[27085]: n335FJgg027085: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030515.n335FJag013050@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:15:19 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37744
|
|
Apr 2 22:15:19 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:15:19 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:15:19 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:15:19 splunk3 spamd[20168]: spamd: processing message <200904030515.n335FJag013050@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:15:21 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 22:15:21 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37744,mid=<200904030515.n335FJag013050@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:15:21 splunk3 sendmail[27086]: n335FJgg027085: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:15:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:15:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:15:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:16:01 splunk3 sendmail[27252]: n335G1rx027252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:17:01 splunk3 sendmail[27488]: n335H133027488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:18:01 splunk3 sendmail[27722]: n335I1qQ027722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:19:01 splunk3 sendmail[27961]: n335J1HH027961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:20:01 splunk3 sendmail[28204]: n335K1Mm028204: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:20:20 splunk3 sendmail[28292]: n335KKgS028292: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030520.n335KK9V013691@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:20:20 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37799
|
|
Apr 2 22:20:20 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:20:20 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:20:20 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:20:20 splunk3 spamd[20168]: spamd: processing message <200904030520.n335KK9V013691@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:20:22 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 2 22:20:22 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37799,mid=<200904030520.n335KK9V013691@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:20:22 splunk3 sendmail[28293]: n335KKgS028292: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:20:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:20:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:20:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:21:01 splunk3 sendmail[28464]: n335L1ED028464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:22:01 splunk3 sendmail[28699]: n335M1GZ028699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:23:01 splunk3 sendmail[28941]: n335N1v6028941: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:24:01 splunk3 sendmail[29178]: n335O10e029178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:25:01 splunk3 sendmail[29417]: n335P198029417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:25:21 splunk3 sendmail[29510]: n335PKS2029510: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030525.n335PKOp014296@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:25:21 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37855
|
|
Apr 2 22:25:21 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:25:21 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:25:21 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:25:21 splunk3 spamd[20168]: spamd: processing message <200904030525.n335PKOp014296@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:25:23 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 22:25:23 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37855,mid=<200904030525.n335PKOp014296@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:25:23 splunk3 sendmail[29511]: n335PKS2029510: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:25:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:25:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:25:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:26:01 splunk3 sendmail[29676]: n335Q1JT029676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 22:27:01 splunk3 sendmail[29917]: n335R1MT029917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:28:02 splunk3 sendmail[30151]: n335S2KN030151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:28:33 splunk3 sendmail[24578]: n3355Oda024578: 118-165-74-61.dynamic.hinet.net [118.165.74.61] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:29:02 splunk3 sendmail[30391]: n335T209030391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:30:02 splunk3 sendmail[30637]: n335U2hb030637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:30:21 splunk3 sendmail[30723]: n335ULjp030723: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030530.n335ULq1014921@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:30:21 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37911
|
|
Apr 2 22:30:21 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:30:21 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:30:21 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:30:21 splunk3 spamd[20168]: spamd: processing message <200904030530.n335ULq1014921@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:30:23 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 22:30:23 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37911,mid=<200904030530.n335ULq1014921@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:30:23 splunk3 sendmail[30724]: n335ULjp030723: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:30:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:30:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:30:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:31:02 splunk3 sendmail[30896]: n335V2Hl030896: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:32:02 splunk3 sendmail[31139]: n335W2MB031139: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:32:08 splunk3 sendmail[31162]: n335W74b031162: ruleset=check_rcpt, arg1=<sanjinn001@yahoo.com.tw>, relay=220-133-119-46.HINET-IP.hinet.net [220.133.119.46], reject=550 5.7.1 <sanjinn001@yahoo.com.tw>... Relaying denied
|
|
Apr 2 22:33:02 splunk3 sendmail[31370]: n335X256031370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:34:02 splunk3 sendmail[31617]: n335Y2h7031617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:35:02 splunk3 sendmail[31855]: n335Z2TU031855: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:35:21 splunk3 sendmail[31930]: n335ZLUP031930: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030535.n335ZLjh015668@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:35:21 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37967
|
|
Apr 2 22:35:21 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:35:21 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:35:21 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:35:21 splunk3 spamd[20168]: spamd: processing message <200904030535.n335ZLjh015668@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:35:23 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 2 22:35:23 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37967,mid=<200904030535.n335ZLjh015668@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:35:23 splunk3 sendmail[31931]: n335ZLUP031930: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:35:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:35:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:36:02 splunk3 sendmail[32113]: n335a2Tc032113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:37:02 splunk3 sendmail[32342]: n335b2qF032342: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:38:02 splunk3 sendmail[32586]: n335c21v032586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:39:02 splunk3 sendmail[363]: n335d2rF000363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:40:02 splunk3 sendmail[604]: n335e2oE000604: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:40:24 splunk3 sendmail[696]: n335eOUV000696: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030540.n335eMdb016301@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:40:24 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38023
|
|
Apr 2 22:40:24 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:40:24 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:40:24 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:40:24 splunk3 spamd[20168]: spamd: processing message <200904030540.n335eMdb016301@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:40:26 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 22:40:26 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38023,mid=<200904030540.n335eMdb016301@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:40:26 splunk3 sendmail[697]: n335eOUV000696: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:40:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:40:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:40:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:41:02 splunk3 sendmail[868]: n335f2X7000868: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 22:42:02 splunk3 sendmail[1103]: n335g2d9001103: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:43:02 splunk3 sendmail[1344]: n335h2Mv001344: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:44:02 splunk3 sendmail[1579]: n335i2aG001579: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:45:02 splunk3 sendmail[1816]: n335j21v001816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:45:25 splunk3 sendmail[1911]: n335jPpI001911: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030545.n335jOOC016911@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:45:25 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38078
|
|
Apr 2 22:45:25 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:45:25 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:45:25 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:45:25 splunk3 spamd[20168]: spamd: processing message <200904030545.n335jOOC016911@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:45:27 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 22:45:27 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38078,mid=<200904030545.n335jOOC016911@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:45:27 splunk3 sendmail[1912]: n335jPpI001911: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:45:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:45:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:45:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:46:02 splunk3 sendmail[2076]: n335k2aL002076: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:47:02 splunk3 sendmail[2314]: n335l2IX002314: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:48:02 splunk3 sendmail[2551]: n335m2mO002551: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:49:02 splunk3 sendmail[2802]: n335n2b1002802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:50:02 splunk3 sendmail[3055]: n335o2DX003055: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:50:25 splunk3 sendmail[3148]: n335oPGQ003148: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030550.n335oPVs017534@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:50:25 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38134
|
|
Apr 2 22:50:25 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:50:25 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:50:25 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:50:25 splunk3 spamd[20168]: spamd: processing message <200904030550.n335oPVs017534@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:50:27 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 22:50:27 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38134,mid=<200904030550.n335oPVs017534@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:50:27 splunk3 sendmail[3149]: n335oPGQ003148: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:50:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:50:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:50:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:51:02 splunk3 sendmail[3318]: n335p2uV003318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:52:02 splunk3 sendmail[3557]: n335q2Ls003557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:53:02 splunk3 sendmail[3822]: n335r2Mf003822: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:54:02 splunk3 sendmail[4074]: n335s2gW004074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:55:02 splunk3 sendmail[4332]: n335t25V004332: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:55:26 splunk3 sendmail[4425]: n335tQsP004425: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030555.n335tPWN018136@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 22:55:26 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38189
|
|
Apr 2 22:55:26 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 22:55:26 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 22:55:26 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 22:55:26 splunk3 spamd[20168]: spamd: processing message <200904030555.n335tPWN018136@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 22:55:30 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Apr 2 22:55:30 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38189,mid=<200904030555.n335tPWN018136@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 22:55:30 splunk3 sendmail[4426]: n335tQsP004425: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 22:55:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 22:55:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 22:55:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 22:56:02 splunk3 sendmail[4590]: n335u2kB004590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 22:57:02 splunk3 sendmail[4831]: n335v2Rg004831: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:58:02 splunk3 sendmail[5078]: n335w2x2005078: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 22:59:02 splunk3 sendmail[5352]: n335x2b9005352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:00:02 splunk3 sendmail[5647]: n33602ug005647: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:00:05 splunk3 sendmail[5660]: n33605Dq005660: from=root, size=291, class=0, nrcpts=1, msgid=<200904030600.n33605Dq005660@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 23:00:05 splunk3 sendmail[5664]: n33605EP005664: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030600.n33605Dq005660@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 23:00:05 splunk3 sendmail[5660]: n33605Dq005660: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33605EP005664 Message accepted for delivery)
|
|
Apr 2 23:00:06 splunk3 sendmail[5665]: n33605EP005664: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:00:13 splunk3 sendmail[5723]: n3360D7Y005723: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904030600.n3360D7Y005723@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 23:00:13 splunk3 sendmail[5725]: n3360D7Y005723: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 2 23:00:13 splunk3 sendmail[5725]: n3360D7Y005723: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 2 23:00:13 splunk3 sendmail[5725]: n3360D7Y005723: n3360D7Y005725: postmaster notify: User unknown
|
|
Apr 2 23:00:14 splunk3 sendmail[5725]: n3360D7Y005725: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:00:26 splunk3 sendmail[5776]: n3360QCC005776: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030600.n3360QLQ018780@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:00:26 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38254
|
|
Apr 2 23:00:26 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:00:26 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 23:00:26 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 23:00:26 splunk3 sendmail[5786]: n3360QCC005776: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:00:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:00:43 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:00:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:01:02 splunk3 sendmail[5951]: n336126e005951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:01:09 splunk3 sendmail[5933]: n33611J7005933: from=root, size=443, class=0, nrcpts=1, msgid=<200904030601.n33611J7005933@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 23:01:09 splunk3 sendmail[5971]: n33619tN005971: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030601.n33611J7005933@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 23:01:09 splunk3 sendmail[5933]: n33611J7005933: to=root, ctladdr=root (0/0), delay=00:00:08, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33619tN005971 Message accepted for delivery)
|
|
Apr 2 23:01:11 splunk3 sendmail[5972]: n33619tN005971: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:02:02 splunk3 sendmail[6191]: n33622pJ006191: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:03:02 splunk3 sendmail[6429]: n33632us006429: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:04:02 splunk3 sendmail[6664]: n33642Ps006664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:05:02 splunk3 sendmail[6903]: n33652OQ006903: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:05:27 splunk3 sendmail[7012]: n3365Ra4007012: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030605.n3365QZL019459@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:05:27 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38310
|
|
Apr 2 23:05:27 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:05:27 splunk3 spamd[20168]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 2 23:05:27 splunk3 spamd[20168]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 2 23:05:27 splunk3 sendmail[7013]: n3365Ra4007012: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:05:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:05:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:05:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:06:02 splunk3 sendmail[7157]: n33662Yh007157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:07:02 splunk3 sendmail[7396]: n33672kY007396: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:08:02 splunk3 sendmail[7642]: n33682Nr007642: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:09:02 splunk3 sendmail[7886]: n33692Q1007886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:10:02 splunk3 sendmail[8217]: n336A2Mt008217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:10:03 splunk3 sendmail[8221]: n336A2s0008221: from=root, size=292, class=0, nrcpts=1, msgid=<200904030610.n336A2s0008221@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 2 23:10:03 splunk3 sendmail[8226]: n336A3SI008226: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030610.n336A2s0008221@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 2 23:10:03 splunk3 sendmail[8221]: n336A2s0008221: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n336A3SI008226 Message accepted for delivery)
|
|
Apr 2 23:10:04 splunk3 sendmail[8227]: n336A3SI008226: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:10:27 splunk3 sendmail[8341]: n336AREP008341: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030610.n336ARYG020073@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:10:27 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38367
|
|
Apr 2 23:10:27 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:10:27 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:10:27 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:10:27 splunk3 spamd[20168]: spamd: processing message <200904030610.n336ARYG020073@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:10:29 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 2 23:10:29 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38367,mid=<200904030610.n336ARYG020073@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:10:29 splunk3 sendmail[8342]: n336AREP008341: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:10:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:10:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:10:55 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:11:02 splunk3 sendmail[8494]: n336B2jn008494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 23:12:02 splunk3 sendmail[8729]: n336C2Rh008729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:13:02 splunk3 sendmail[8967]: n336D2Uq008967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:14:02 splunk3 sendmail[9203]: n336E2SC009203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:15:02 splunk3 sendmail[9442]: n336F2nc009442: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:15:28 splunk3 sendmail[9565]: n336FSdP009565: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030615.n336FRMM020890@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:15:28 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38423
|
|
Apr 2 23:15:28 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:15:28 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:15:28 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:15:28 splunk3 spamd[20168]: spamd: processing message <200904030615.n336FRMM020890@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:15:30 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 23:15:30 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38423,mid=<200904030615.n336FRMM020890@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:15:30 splunk3 sendmail[9566]: n336FSdP009565: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:15:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:15:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:15:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:16:02 splunk3 sendmail[9713]: n336G2Ai009713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:17:02 splunk3 sendmail[9952]: n336H2f1009952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:18:02 splunk3 sendmail[10189]: n336I2Xo010189: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:19:02 splunk3 sendmail[10425]: n336J2ut010425: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:20:02 splunk3 sendmail[10664]: n336K28i010664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:20:29 splunk3 sendmail[10776]: n336KTWr010776: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030620.n336KSom021506@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:20:29 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38479
|
|
Apr 2 23:20:29 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:20:29 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:20:29 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:20:29 splunk3 spamd[20168]: spamd: processing message <200904030620.n336KSom021506@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:20:31 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 2 23:20:31 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38479,mid=<200904030620.n336KSom021506@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:20:31 splunk3 sendmail[10777]: n336KTWr010776: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:20:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:20:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:20:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:21:02 splunk3 sendmail[10926]: n336L2Y4010926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:22:02 splunk3 sendmail[11160]: n336M2pI011160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:23:02 splunk3 sendmail[11402]: n336N2XA011402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:24:02 splunk3 sendmail[11637]: n336O2RU011637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:25:02 splunk3 sendmail[11877]: n336P23U011877: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:25:29 splunk3 sendmail[11987]: n336PTdo011987: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030625.n336PTWE022133@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:25:29 splunk3 spamd[20168]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38535
|
|
Apr 2 23:25:29 splunk3 spamd[20168]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:25:29 splunk3 spamd[20168]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:25:29 splunk3 spamd[20168]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:25:29 splunk3 spamd[20168]: spamd: processing message <200904030625.n336PTWE022133@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:25:31 splunk3 spamd[20168]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 23:25:31 splunk3 spamd[20168]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38535,mid=<200904030625.n336PTWE022133@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:25:31 splunk3 sendmail[11988]: n336PTdo011987: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:25:31 splunk3 spamd[3033]: prefork: child states: BI
|
|
Apr 2 23:25:31 splunk3 spamd[3033]: spamd: handled cleanup of child pid 20168 due to SIGCHLD
|
|
Apr 2 23:25:31 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 12010
|
|
Apr 2 23:25:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:25:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:25:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:26:02 splunk3 sendmail[12135]: n336Q2Mr012135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 23:27:02 splunk3 sendmail[12374]: n336R2ef012374: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:28:02 splunk3 sendmail[12610]: n336S2Mb012610: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:29:02 splunk3 sendmail[12850]: n336T2Yd012850: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:30:02 splunk3 sendmail[13092]: n336U2p0013092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:30:29 splunk3 sendmail[13202]: n336UTiX013202: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030630.n336UTnX022728@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:30:29 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38591
|
|
Apr 2 23:30:29 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:30:29 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:30:29 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:30:29 splunk3 spamd[12010]: spamd: processing message <200904030630.n336UTnX022728@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:30:31 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Apr 2 23:30:31 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38591,mid=<200904030630.n336UTnX022728@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:30:31 splunk3 sendmail[13203]: n336UTiX013202: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:30:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:30:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:30:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:31:02 splunk3 sendmail[13391]: n336V29M013391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:32:02 splunk3 sendmail[13627]: n336W2bY013627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:32:08 splunk3 sendmail[31162]: n335W74b031162: timeout waiting for input from 220-133-119-46.HINET-IP.hinet.net during server cmd read
|
|
Apr 2 23:32:08 splunk3 sendmail[31162]: n335W74b031162: lost input channel from 220-133-119-46.HINET-IP.hinet.net [220.133.119.46] to MTA after rcpt
|
|
Apr 2 23:32:08 splunk3 sendmail[31162]: n335W74b031162: from=<0403in@163.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=220-133-119-46.HINET-IP.hinet.net [220.133.119.46]
|
|
Apr 2 23:33:02 splunk3 sendmail[13867]: n336X28Q013867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:34:02 splunk3 sendmail[14102]: n336Y2ZO014102: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:35:00 splunk3 sendmail[14324]: n336Z0kM014324: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030635.n336Z0c7023401@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:35:00 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38635
|
|
Apr 2 23:35:00 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:35:00 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:35:00 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:35:00 splunk3 spamd[12010]: spamd: processing message <200904030635.n336Z0c7023401@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:35:02 splunk3 sendmail[14347]: n336Z2Mb014347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:35:02 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 2 23:35:02 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38635,mid=<200904030635.n336Z0c7023401@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:35:02 splunk3 sendmail[14325]: n336Z0kM014324: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:35:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:35:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:35:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:36:02 splunk3 sendmail[14599]: n336a2nn014599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:37:02 splunk3 sendmail[14837]: n336b2WB014837: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:38:02 splunk3 sendmail[15072]: n336c2oK015072: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:39:02 splunk3 sendmail[15315]: n336d26X015315: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:40:01 splunk3 sendmail[15532]: n336e10N015532: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030640.n336e0pr024046@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:40:01 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38691
|
|
Apr 2 23:40:01 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:40:01 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:40:01 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:40:01 splunk3 spamd[12010]: spamd: processing message <200904030640.n336e0pr024046@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:40:02 splunk3 sendmail[15561]: n336e2Po015561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:40:03 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 23:40:03 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38691,mid=<200904030640.n336e0pr024046@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:40:03 splunk3 sendmail[15533]: n336e10N015532: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:40:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:40:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:40:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:41:02 splunk3 sendmail[15817]: n336f2jx015817: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 23:42:02 splunk3 sendmail[16054]: n336g2ux016054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:43:02 splunk3 sendmail[16294]: n336h26q016294: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:44:02 splunk3 sendmail[16531]: n336i2Jn016531: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:45:01 splunk3 sendmail[16768]: n336j1dk016768: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030645.n336j1VD024677@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:45:01 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38747
|
|
Apr 2 23:45:01 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:45:01 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:45:01 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:45:01 splunk3 spamd[12010]: spamd: processing message <200904030645.n336j1VD024677@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:45:02 splunk3 sendmail[16774]: n336j21S016774: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:45:03 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 2 23:45:03 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38747,mid=<200904030645.n336j1VD024677@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:45:03 splunk3 sendmail[16769]: n336j1dk016768: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:45:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:45:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:45:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:46:02 splunk3 sendmail[17025]: n336k2cY017025: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:47:02 splunk3 sendmail[17264]: n336l2Do017264: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:48:02 splunk3 sendmail[17500]: n336m2cc017500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:49:02 splunk3 sendmail[17737]: n336n2va017737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:50:01 splunk3 sendmail[17979]: n336o1RC017979: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030650.n336o1XL025292@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:50:02 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38803
|
|
Apr 2 23:50:02 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:50:02 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:50:02 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:50:02 splunk3 spamd[12010]: spamd: processing message <200904030650.n336o1XL025292@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:50:02 splunk3 sendmail[17985]: n336o2S0017985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:50:04 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 23:50:04 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38803,mid=<200904030650.n336o1XL025292@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:50:04 splunk3 sendmail[17980]: n336o1RC017979: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:50:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:50:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:50:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:51:02 splunk3 sendmail[18243]: n336p2bR018243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:52:02 splunk3 sendmail[18474]: n336q2Zv018474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:53:02 splunk3 sendmail[18722]: n336r28f018722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:54:02 splunk3 sendmail[18959]: n336s2ju018959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:55:02 splunk3 sendmail[19198]: n336t2Aa019198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:55:02 splunk3 sendmail[19199]: n336t2xf019199: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030655.n336t2FU025939@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 2 23:55:02 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38858
|
|
Apr 2 23:55:02 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:55:02 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:55:02 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:55:02 splunk3 spamd[12010]: spamd: processing message <200904030655.n336t2FU025939@virt2.int.splunk.com> for spamme:501
|
|
Apr 2 23:55:04 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 2 23:55:04 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38858,mid=<200904030655.n336t2FU025939@virt2.int.splunk.com>,bayes=0.11165406679174,autolearn=no
|
|
Apr 2 23:55:05 splunk3 sendmail[19200]: n336t2xf019199: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:55:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:55:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 2 23:55:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 2 23:56:02 splunk3 sendmail[19456]: n336u2UT019456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 2 23:57:02 splunk3 sendmail[19695]: n336v2Jw019695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:57:57 splunk3 sendmail[19914]: n336vubG019914: from=<3dLPVSRQKBkcpxxpunjun021-wx0nyu7pxxpun.lxv1yjvvn1yu3wtr2.lxv@alerts.bounces.google.com>, size=3591, class=0, nrcpts=1, msgid=<001485f91dd28327460466a111da@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.185]
|
|
Apr 2 23:57:57 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38895
|
|
Apr 2 23:57:57 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 2 23:57:57 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 2 23:57:57 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 2 23:57:57 splunk3 spamd[12010]: spamd: processing message <001485f91dd28327460466a111da@google.com> for spamme:501
|
|
Apr 2 23:57:59 splunk3 spamd[12010]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.8 seconds, 4021 bytes.
|
|
Apr 2 23:57:59 splunk3 spamd[12010]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.8,size=4021,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38895,mid=<001485f91dd28327460466a111da@google.com>,bayes=1.66533453693773e-16,autolearn=ham
|
|
Apr 2 23:57:59 splunk3 sendmail[19915]: n336vubG019914: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33802, dsn=2.0.0, stat=Sent
|
|
Apr 2 23:58:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 2 23:58:02 splunk3 sendmail[19939]: n336w2Ol019939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 2 23:59:02 splunk3 sendmail[20177]: n336x2fE020177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:00:02 splunk3 sendmail[20467]: n33702Nc020467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:00:03 splunk3 sendmail[20471]: n33703lO020471: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030700.n33702Be026588@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:00:03 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38916
|
|
Apr 3 00:00:03 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:00:03 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 00:00:03 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 00:00:03 splunk3 sendmail[20472]: n33703lO020471: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:00:04 splunk3 sendmail[20486]: n33704IT020486: from=root, size=291, class=0, nrcpts=1, msgid=<200904030700.n33704IT020486@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 00:00:05 splunk3 sendmail[20490]: n33705V4020490: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030700.n33704IT020486@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 00:00:05 splunk3 sendmail[20486]: n33704IT020486: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33705V4020490 Message accepted for delivery)
|
|
Apr 3 00:00:06 splunk3 sendmail[20491]: n33705V4020490: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:00:18 splunk3 sendmail[20565]: n3370Iff020565: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904030700.n3370Iff020565@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 00:00:18 splunk3 sendmail[20567]: n3370Iff020565: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 00:00:18 splunk3 sendmail[20567]: n3370Iff020565: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 00:00:18 splunk3 sendmail[20567]: n3370Iff020565: n3370Iff020567: postmaster notify: User unknown
|
|
Apr 3 00:00:20 splunk3 sendmail[20567]: n3370Iff020567: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:00:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:00:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:01:02 splunk3 sendmail[20770]: n33712Nb020770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:01:09 splunk3 sendmail[20751]: n33711Jh020751: from=root, size=443, class=0, nrcpts=1, msgid=<200904030701.n33711Jh020751@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 00:01:09 splunk3 sendmail[20791]: n33719NT020791: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030701.n33711Jh020751@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 00:01:09 splunk3 sendmail[20751]: n33711Jh020751: to=root, ctladdr=root (0/0), delay=00:00:08, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33719NT020791 Message accepted for delivery)
|
|
Apr 3 00:01:10 splunk3 sendmail[20792]: n33719NT020791: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:02:02 splunk3 sendmail[21012]: n33722g4021012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:03:02 splunk3 sendmail[21251]: n33732nR021251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:04:02 splunk3 sendmail[21486]: n33742tK021486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:05:02 splunk3 sendmail[21727]: n33752d3021727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:05:03 splunk3 sendmail[21728]: n33753gB021728: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030705.n33753Ak027279@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:05:03 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38980
|
|
Apr 3 00:05:03 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:05:04 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 00:05:04 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 00:05:04 splunk3 sendmail[21729]: n33753gB021728: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:05:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:05:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:05:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:06:02 splunk3 sendmail[21982]: n33762FA021982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:07:02 splunk3 sendmail[22222]: n33772In022222: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:08:02 splunk3 sendmail[22457]: n33782hd022457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:09:02 splunk3 sendmail[22702]: n33792da022702: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:10:02 splunk3 sendmail[23036]: n337A2OR023036: from=root, size=292, class=0, nrcpts=1, msgid=<200904030710.n337A2OR023036@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 00:10:02 splunk3 sendmail[23041]: n337A2IV023041: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030710.n337A2OR023036@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 00:10:02 splunk3 sendmail[23036]: n337A2OR023036: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n337A2IV023041 Message accepted for delivery)
|
|
Apr 3 00:10:02 splunk3 sendmail[23046]: n337A289023046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:10:03 splunk3 sendmail[23042]: n337A2IV023041: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:10:04 splunk3 sendmail[23047]: n337A4bD023047: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030710.n337A4SC027894@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:10:04 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39037
|
|
Apr 3 00:10:04 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:10:04 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:10:04 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:10:04 splunk3 spamd[12010]: spamd: processing message <200904030710.n337A4SC027894@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:10:06 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 00:10:06 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39037,mid=<200904030710.n337A4SC027894@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 00:10:06 splunk3 sendmail[23048]: n337A4bD023047: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:10:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:10:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:10:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:11:02 splunk3 sendmail[23307]: n337B2VZ023307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 00:12:02 splunk3 sendmail[23544]: n337C2a9023544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:13:02 splunk3 sendmail[23783]: n337D20W023783: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:14:02 splunk3 sendmail[24018]: n337E27W024018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:15:02 splunk3 sendmail[24256]: n337F2ip024256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:15:04 splunk3 sendmail[24258]: n337F4kS024258: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030715.n337F4QI028685@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:15:04 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39093
|
|
Apr 3 00:15:04 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:15:04 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:15:04 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:15:05 splunk3 spamd[12010]: spamd: processing message <200904030715.n337F4QI028685@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:15:07 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 3 00:15:07 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39093,mid=<200904030715.n337F4QI028685@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 00:15:07 splunk3 sendmail[24260]: n337F4kS024258: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:15:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:15:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:15:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:16:02 splunk3 sendmail[24513]: n337G240024513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:17:02 splunk3 sendmail[24752]: n337H2UO024752: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:18:02 splunk3 sendmail[24987]: n337I22n024987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:19:02 splunk3 sendmail[25226]: n337J2Nw025226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:20:02 splunk3 sendmail[25468]: n337K2rW025468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:20:07 splunk3 sendmail[25488]: n337K7Ra025488: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030720.n337K56W029320@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:20:07 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39149
|
|
Apr 3 00:20:07 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:20:07 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:20:07 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:20:07 splunk3 spamd[12010]: spamd: processing message <200904030720.n337K56W029320@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:20:09 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 00:20:09 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39149,mid=<200904030720.n337K56W029320@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 00:20:09 splunk3 sendmail[25489]: n337K7Ra025488: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:20:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:20:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:20:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:21:02 splunk3 sendmail[25731]: n337L25D025731: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:22:02 splunk3 sendmail[25964]: n337M232025964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:23:02 splunk3 sendmail[26203]: n337N20r026203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:24:02 splunk3 sendmail[26441]: n337O2M9026441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:25:02 splunk3 sendmail[26678]: n337P2ih026678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:25:06 splunk3 sendmail[26696]: n337P5OU026696: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030725.n337P5bN029932@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:25:06 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39204
|
|
Apr 3 00:25:06 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:25:06 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:25:06 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:25:06 splunk3 spamd[12010]: spamd: processing message <200904030725.n337P5bN029932@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:25:08 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 3 00:25:08 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39204,mid=<200904030725.n337P5bN029932@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 00:25:08 splunk3 sendmail[26697]: n337P5OU026696: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:25:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:25:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:25:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:26:02 splunk3 sendmail[26935]: n337Q2VU026935: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 00:27:02 splunk3 sendmail[27175]: n337R2Cd027175: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:28:02 splunk3 sendmail[27413]: n337S2xn027413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:29:02 splunk3 sendmail[27650]: n337T2Qp027650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:30:03 splunk3 sendmail[27887]: n337U2pg027887: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:30:06 splunk3 sendmail[27907]: n337U6g1027907: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030730.n337U6B1030550@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:30:06 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39261
|
|
Apr 3 00:30:06 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:30:06 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:30:06 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:30:06 splunk3 spamd[12010]: spamd: processing message <200904030730.n337U6B1030550@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:30:08 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 00:30:08 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39261,mid=<200904030730.n337U6B1030550@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 00:30:08 splunk3 sendmail[27908]: n337U6g1027907: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:30:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:30:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:30:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:31:03 splunk3 sendmail[28150]: n337V3Rr028150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:32:03 splunk3 sendmail[28385]: n337W3uN028385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:33:03 splunk3 sendmail[28624]: n337X3BW028624: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:34:03 splunk3 sendmail[28859]: n337Y37T028859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:35:03 splunk3 sendmail[29100]: n337Z30k029100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:35:07 splunk3 sendmail[29117]: n337Z7Jg029117: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030735.n337Z66u031296@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:35:07 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39317
|
|
Apr 3 00:35:07 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:35:07 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:35:07 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:35:07 splunk3 spamd[12010]: spamd: processing message <200904030735.n337Z66u031296@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:35:09 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 00:35:09 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39317,mid=<200904030735.n337Z66u031296@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 00:35:09 splunk3 sendmail[29118]: n337Z7Jg029117: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:35:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:35:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:35:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:36:03 splunk3 sendmail[29356]: n337a3UY029356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:37:03 splunk3 sendmail[29593]: n337b3ID029593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:38:03 splunk3 sendmail[29830]: n337c3fh029830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:39:03 splunk3 sendmail[30073]: n337d3V6030073: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:40:03 splunk3 sendmail[30312]: n337e3Pj030312: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:40:07 splunk3 sendmail[30332]: n337e7CQ030332: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030740.n337e7rN031932@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:40:07 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39372
|
|
Apr 3 00:40:07 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:40:07 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:40:07 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:40:07 splunk3 spamd[12010]: spamd: processing message <200904030740.n337e7rN031932@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:40:09 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 3 00:40:09 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39372,mid=<200904030740.n337e7rN031932@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 00:40:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:40:09 splunk3 sendmail[30333]: n337e7CQ030332: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:40:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:40:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:41:03 splunk3 sendmail[30575]: n337f33Q030575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 00:42:03 splunk3 sendmail[30811]: n337g3Tj030811: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:43:03 splunk3 sendmail[31049]: n337h3gp031049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:44:03 splunk3 sendmail[31282]: n337i36F031282: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:45:03 splunk3 sendmail[31523]: n337j3da031523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:45:08 splunk3 sendmail[31542]: n337j8aN031542: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030745.n337j7t7032543@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:45:08 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39429
|
|
Apr 3 00:45:08 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:45:08 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:45:08 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:45:08 splunk3 spamd[12010]: spamd: processing message <200904030745.n337j7t7032543@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:45:10 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 00:45:10 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39429,mid=<200904030745.n337j7t7032543@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 00:45:10 splunk3 sendmail[31543]: n337j8aN031542: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:45:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:45:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:45:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:46:03 splunk3 sendmail[31782]: n337k3Ji031782: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:47:03 splunk3 sendmail[32020]: n337l3Uf032020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:48:03 splunk3 sendmail[32256]: n337m3dQ032256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:49:03 splunk3 sendmail[32496]: n337n3Kb032496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:50:03 splunk3 sendmail[32737]: n337o3qo032737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:50:09 splunk3 sendmail[32757]: n337o9O9032757: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904030750.n337o8TU000690@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:50:09 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39484
|
|
Apr 3 00:50:09 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:50:09 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:50:09 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:50:09 splunk3 spamd[12010]: spamd: processing message <200904030750.n337o8TU000690@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:50:11 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1302 bytes.
|
|
Apr 3 00:50:11 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39484,mid=<200904030750.n337o8TU000690@virt2.int.splunk.com>,bayes=0.0658152163546543,autolearn=no
|
|
Apr 3 00:50:11 splunk3 sendmail[32758]: n337o9O9032757: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:50:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:50:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:50:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:51:03 splunk3 sendmail[529]: n337p3j7000529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:52:03 splunk3 sendmail[766]: n337q3OK000766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:53:03 splunk3 sendmail[1005]: n337r3an001005: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:54:03 splunk3 sendmail[1246]: n337s3iu001246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:55:03 splunk3 sendmail[1484]: n337t3b3001484: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:55:10 splunk3 sendmail[1525]: n337tAEN001525: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030755.n337t9mk001320@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 00:55:10 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39540
|
|
Apr 3 00:55:10 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 00:55:10 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 00:55:10 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 00:55:10 splunk3 spamd[12010]: spamd: processing message <200904030755.n337t9mk001320@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 00:55:13 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 00:55:13 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39540,mid=<200904030755.n337t9mk001320@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 00:55:13 splunk3 sendmail[1526]: n337tAEN001525: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 00:55:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 00:55:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 00:55:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 00:56:03 splunk3 sendmail[1745]: n337u3Cn001745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 00:57:03 splunk3 sendmail[1983]: n337v34u001983: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:58:03 splunk3 sendmail[2220]: n337w3ud002220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 00:59:03 splunk3 sendmail[2460]: n337x3OM002460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:00:03 splunk3 sendmail[2768]: n33803CQ002768: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:00:04 splunk3 sendmail[2778]: n33804SU002778: from=root, size=291, class=0, nrcpts=1, msgid=<200904030800.n33804SU002778@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 01:00:04 splunk3 sendmail[2782]: n33804hH002782: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030800.n33804SU002778@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 01:00:04 splunk3 sendmail[2778]: n33804SU002778: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33804hH002782 Message accepted for delivery)
|
|
Apr 3 01:00:05 splunk3 sendmail[2783]: n33804hH002782: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:00:11 splunk3 sendmail[2825]: n3380BTu002825: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030800.n3380AJw001979@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:00:11 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39598
|
|
Apr 3 01:00:11 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:00:11 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 01:00:11 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 01:00:11 splunk3 sendmail[2826]: n3380BTu002825: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:00:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:00:24 splunk3 sendmail[2883]: n3380OSq002883: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904030800.n3380OSq002883@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 01:00:24 splunk3 sendmail[2885]: n3380OSq002883: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 01:00:24 splunk3 sendmail[2885]: n3380OSq002883: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 3 01:00:24 splunk3 sendmail[2885]: n3380OSq002883: n3380OSq002885: postmaster notify: User unknown
|
|
Apr 3 01:00:25 splunk3 sendmail[2885]: n3380OSq002885: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:00:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:00:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:01:03 splunk3 sendmail[3081]: n338131V003081: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:01:03 splunk3 sendmail[3077]: n338113m003077: from=root, size=443, class=0, nrcpts=1, msgid=<200904030801.n338113m003077@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 01:01:03 splunk3 sendmail[3082]: n33813Bd003082: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030801.n338113m003077@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 01:01:03 splunk3 sendmail[3077]: n338113m003077: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33813Bd003082 Message accepted for delivery)
|
|
Apr 3 01:01:05 splunk3 sendmail[3083]: n33813Bd003082: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:02:03 splunk3 sendmail[3323]: n33823xx003323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:03:03 splunk3 sendmail[3581]: n33833RG003581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:04:03 splunk3 sendmail[3824]: n33843O6003824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:05:03 splunk3 sendmail[4076]: n33853nH004076: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:05:12 splunk3 sendmail[4120]: n3385Cgs004120: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030805.n3385BLV002675@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:05:12 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39661
|
|
Apr 3 01:05:12 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:05:12 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 01:05:12 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 01:05:12 splunk3 sendmail[4121]: n3385Cgs004120: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:05:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:05:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:05:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:06:03 splunk3 sendmail[4352]: n33863qn004352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:07:03 splunk3 sendmail[4591]: n33873tX004591: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:08:03 splunk3 sendmail[4829]: n33883MU004829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:09:03 splunk3 sendmail[5082]: n33893TC005082: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:10:03 splunk3 sendmail[5459]: n338A3wu005459: from=root, size=292, class=0, nrcpts=1, msgid=<200904030810.n338A3wu005459@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 01:10:03 splunk3 sendmail[5464]: n338A3FH005464: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030810.n338A3wu005459@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 01:10:03 splunk3 sendmail[5459]: n338A3wu005459: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n338A3FH005464 Message accepted for delivery)
|
|
Apr 3 01:10:03 splunk3 sendmail[5469]: n338A3rB005469: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:10:04 splunk3 sendmail[5465]: n338A3FH005464: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:10:12 splunk3 sendmail[5510]: n338ACsU005510: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030810.n338ACKM003285@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:10:12 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39718
|
|
Apr 3 01:10:12 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:10:12 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:10:12 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:10:12 splunk3 spamd[12010]: spamd: processing message <200904030810.n338ACKM003285@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:10:14 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 01:10:14 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39718,mid=<200904030810.n338ACKM003285@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:10:14 splunk3 sendmail[5511]: n338ACsU005510: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:10:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:10:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:10:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:11:03 splunk3 sendmail[5729]: n338B3Zs005729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 01:12:03 splunk3 sendmail[5964]: n338C3Vr005964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:13:03 splunk3 sendmail[6205]: n338D3Ie006205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:14:03 splunk3 sendmail[6440]: n338E36r006440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:15:03 splunk3 sendmail[6678]: n338F3g5006678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:15:13 splunk3 sendmail[6719]: n338FCfL006719: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030815.n338FCxa004081@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:15:13 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39774
|
|
Apr 3 01:15:13 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:15:13 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:15:13 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:15:13 splunk3 spamd[12010]: spamd: processing message <200904030815.n338FCxa004081@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:15:15 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 3 01:15:15 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39774,mid=<200904030815.n338FCxa004081@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:15:15 splunk3 sendmail[6720]: n338FCfL006719: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:15:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:15:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:15:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:16:03 splunk3 sendmail[6934]: n338G3bf006934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:17:03 splunk3 sendmail[7174]: n338H3J9007174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:18:03 splunk3 sendmail[7407]: n338I3fa007407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:19:03 splunk3 sendmail[7654]: n338J3oV007654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:20:03 splunk3 sendmail[7898]: n338K3O5007898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:20:13 splunk3 sendmail[7941]: n338KDO7007941: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030820.n338KDVa004713@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:20:13 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39830
|
|
Apr 3 01:20:13 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:20:13 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:20:13 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:20:13 splunk3 spamd[12010]: spamd: processing message <200904030820.n338KDVa004713@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:20:15 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 3 01:20:15 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39830,mid=<200904030820.n338KDVa004713@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:20:15 splunk3 sendmail[7942]: n338KDO7007941: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:20:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:20:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:20:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:21:03 splunk3 sendmail[8160]: n338L30j008160: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:22:03 splunk3 sendmail[8394]: n338M3MN008394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:23:03 splunk3 sendmail[8634]: n338N37P008634: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:24:03 splunk3 sendmail[8875]: n338O3GX008875: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:25:03 splunk3 sendmail[9112]: n338P3pG009112: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:25:13 splunk3 sendmail[9157]: n338PD8u009157: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030825.n338PDqG005320@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:25:13 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39885
|
|
Apr 3 01:25:13 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:25:13 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:25:13 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:25:13 splunk3 spamd[12010]: spamd: processing message <200904030825.n338PDqG005320@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:25:15 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1305 bytes.
|
|
Apr 3 01:25:15 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39885,mid=<200904030825.n338PDqG005320@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:25:15 splunk3 sendmail[9158]: n338PD8u009157: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:25:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:25:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:25:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:26:03 splunk3 sendmail[9371]: n338Q3E4009371: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 01:27:03 splunk3 sendmail[9622]: n338R3b7009622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:28:03 splunk3 sendmail[9858]: n338S3M4009858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:29:03 splunk3 sendmail[10098]: n338T3O2010098: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:30:03 splunk3 sendmail[10336]: n338U3QO010336: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:30:14 splunk3 sendmail[10377]: n338UE4w010377: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030830.n338UEHp005941@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:30:14 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39942
|
|
Apr 3 01:30:14 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:30:14 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:30:14 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:30:14 splunk3 spamd[12010]: spamd: processing message <200904030830.n338UEHp005941@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:30:16 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 01:30:16 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39942,mid=<200904030830.n338UEHp005941@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:30:16 splunk3 sendmail[10378]: n338UE4w010377: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:30:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:30:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:30:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:31:03 splunk3 sendmail[10598]: n338V3Gp010598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:32:03 splunk3 sendmail[10832]: n338W37n010832: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:33:03 splunk3 sendmail[11070]: n338X3DK011070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:34:03 splunk3 sendmail[11304]: n338Y3Vu011304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:35:03 splunk3 sendmail[11543]: n338Z38w011543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:35:15 splunk3 sendmail[11601]: n338ZFqN011601: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030835.n338ZEr2006693@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:35:15 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39997
|
|
Apr 3 01:35:15 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:35:15 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:35:15 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:35:15 splunk3 spamd[12010]: spamd: processing message <200904030835.n338ZEr2006693@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:35:17 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 3 01:35:17 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39997,mid=<200904030835.n338ZEr2006693@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:35:17 splunk3 sendmail[11602]: n338ZFqN011601: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:35:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:35:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:35:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:36:03 splunk3 sendmail[11798]: n338a3QQ011798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:37:03 splunk3 sendmail[12039]: n338b3Ui012039: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:38:03 splunk3 sendmail[12276]: n338c3A8012276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:39:03 splunk3 sendmail[12518]: n338d3Uw012518: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:40:03 splunk3 sendmail[12759]: n338e3bb012759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:40:15 splunk3 sendmail[12820]: n338eFqE012820: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030840.n338eFDT007326@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:40:15 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40053
|
|
Apr 3 01:40:15 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:40:15 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:40:15 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:40:15 splunk3 spamd[12010]: spamd: processing message <200904030840.n338eFDT007326@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:40:18 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 01:40:18 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40053,mid=<200904030840.n338eFDT007326@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:40:18 splunk3 sendmail[12821]: n338eFqE012820: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:40:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:40:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:40:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:41:03 splunk3 sendmail[13022]: n338f3CJ013022: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 01:42:03 splunk3 sendmail[13263]: n338g31B013263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:43:03 splunk3 sendmail[13536]: n338h3vF013536: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:44:03 splunk3 sendmail[13771]: n338i3dm013771: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:45:03 splunk3 sendmail[14009]: n338j3bY014009: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:45:16 splunk3 sendmail[14067]: n338jGLK014067: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030845.n338jGbx007940@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:45:16 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40110
|
|
Apr 3 01:45:16 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:45:16 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:45:16 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:45:16 splunk3 spamd[12010]: spamd: processing message <200904030845.n338jGbx007940@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:45:19 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 3 01:45:19 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40110,mid=<200904030845.n338jGbx007940@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:45:19 splunk3 sendmail[14068]: n338jGLK014067: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:45:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:45:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:45:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:46:03 splunk3 sendmail[14265]: n338k33t014265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:47:03 splunk3 sendmail[14504]: n338l3cJ014504: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:48:03 splunk3 sendmail[14740]: n338m3Ta014740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:49:03 splunk3 sendmail[14978]: n338n3BK014978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:50:03 splunk3 sendmail[15218]: n338o3ei015218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:50:16 splunk3 sendmail[15277]: n338oGKq015277: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030850.n338oGFO008556@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:50:16 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40165
|
|
Apr 3 01:50:16 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:50:16 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:50:16 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:50:16 splunk3 spamd[12010]: spamd: processing message <200904030850.n338oGFO008556@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:50:19 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 01:50:19 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40165,mid=<200904030850.n338oGFO008556@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:50:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:50:19 splunk3 sendmail[15278]: n338oGKq015277: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:50:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:50:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:51:03 splunk3 sendmail[15479]: n338p368015479: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:52:03 splunk3 sendmail[15714]: n338q3sm015714: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:53:03 splunk3 sendmail[15952]: n338r3vx015952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:54:03 splunk3 sendmail[16191]: n338s3SD016191: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:55:03 splunk3 sendmail[16430]: n338t3Ip016430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:55:17 splunk3 sendmail[16491]: n338tHAF016491: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030855.n338tH4H009163@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 01:55:17 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40221
|
|
Apr 3 01:55:17 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 01:55:17 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 01:55:17 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 01:55:17 splunk3 spamd[12010]: spamd: processing message <200904030855.n338tH4H009163@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 01:55:19 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 3 01:55:19 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40221,mid=<200904030855.n338tH4H009163@virt2.int.splunk.com>,bayes=0.168521714348029,autolearn=no
|
|
Apr 3 01:55:19 splunk3 sendmail[16492]: n338tHAF016491: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 01:55:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 01:55:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 01:55:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 01:56:03 splunk3 sendmail[16690]: n338u3XB016690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 01:57:03 splunk3 sendmail[16929]: n338v3LY016929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:58:03 splunk3 sendmail[17164]: n338w3I5017164: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 01:59:03 splunk3 sendmail[17405]: n338x3WO017405: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:00:03 splunk3 sendmail[17695]: n33903rU017695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:00:04 splunk3 sendmail[17723]: n33904SI017723: from=root, size=291, class=0, nrcpts=1, msgid=<200904030900.n33904SI017723@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 02:00:04 splunk3 sendmail[17727]: n33904R3017727: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904030900.n33904SI017723@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 02:00:04 splunk3 sendmail[17723]: n33904SI017723: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33904R3017727 Message accepted for delivery)
|
|
Apr 3 02:00:06 splunk3 sendmail[17728]: n33904R3017727: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:00:18 splunk3 sendmail[17775]: n3390IOl017775: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904030900.n3390HAD009797@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:00:18 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40278
|
|
Apr 3 02:00:18 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:00:18 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 02:00:18 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 02:00:18 splunk3 sendmail[17776]: n3390IOl017775: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:00:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:00:29 splunk3 sendmail[17832]: n3390TJv017832: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904030900.n3390TJv017832@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 02:00:29 splunk3 sendmail[17849]: n3390TJv017832: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 02:00:29 splunk3 sendmail[17849]: n3390TJv017832: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 02:00:29 splunk3 sendmail[17849]: n3390TJv017832: n3390TJv017849: postmaster notify: User unknown
|
|
Apr 3 02:00:31 splunk3 sendmail[17849]: n3390TJv017849: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:00:42 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:00:54 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:01:03 splunk3 sendmail[17998]: n33913vm017998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:01:09 splunk3 sendmail[17995]: n33911Qw017995: from=root, size=443, class=0, nrcpts=1, msgid=<200904030901.n33911Qw017995@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 02:01:09 splunk3 sendmail[18021]: n33919Yu018021: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904030901.n33911Qw017995@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 02:01:09 splunk3 sendmail[17995]: n33911Qw017995: to=root, ctladdr=root (0/0), delay=00:00:08, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33919Yu018021 Message accepted for delivery)
|
|
Apr 3 02:01:11 splunk3 sendmail[18040]: n33919Yu018021: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:02:03 splunk3 sendmail[18243]: n33923ot018243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:03:03 splunk3 sendmail[18483]: n33933LH018483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:04:03 splunk3 sendmail[18717]: n33943D2018717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:05:03 splunk3 sendmail[18963]: n33953n7018963: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:05:18 splunk3 sendmail[19023]: n3395IMS019023: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030905.n3395Ioo010479@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:05:18 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40350
|
|
Apr 3 02:05:18 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:05:18 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 02:05:18 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 02:05:18 splunk3 sendmail[19024]: n3395IMS019023: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:05:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:05:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:05:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:06:03 splunk3 sendmail[19210]: n33963AH019210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:06:41 splunk3 sendmail[19344]: n3396dSt019344: from=<spammaster@mail333.com>, size=1028, class=0, nrcpts=1, msgid=<200904030906.n3396dSt019344@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=dsl.static81214222234.ttnet.net.tr [81.214.222.234] (may be forged)
|
|
Apr 3 02:06:41 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40364
|
|
Apr 3 02:06:41 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:06:41 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 02:06:41 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 02:06:41 splunk3 sendmail[19367]: n3396dSt019344: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31365, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:06:41 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:07:03 splunk3 sendmail[19453]: n3397302019453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:08:03 splunk3 sendmail[19688]: n33983HT019688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:09:03 splunk3 sendmail[19933]: n33993Ig019933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:10:03 splunk3 sendmail[20277]: n339A3Pf020277: from=root, size=292, class=0, nrcpts=1, msgid=<200904030910.n339A3Pf020277@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 02:10:03 splunk3 sendmail[20282]: n339A3OD020282: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904030910.n339A3Pf020277@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 02:10:03 splunk3 sendmail[20277]: n339A3Pf020277: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n339A3OD020282 Message accepted for delivery)
|
|
Apr 3 02:10:03 splunk3 sendmail[20288]: n339A3l5020288: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:10:04 splunk3 sendmail[20283]: n339A3OD020282: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:10:19 splunk3 sendmail[20349]: n339AJU3020349: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030910.n339AISH011093@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:10:19 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40407
|
|
Apr 3 02:10:19 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:10:19 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:10:19 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:10:19 splunk3 spamd[12010]: spamd: processing message <200904030910.n339AISH011093@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:10:21 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 3 02:10:21 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40407,mid=<200904030910.n339AISH011093@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 02:10:21 splunk3 sendmail[20350]: n339AJU3020349: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:10:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:10:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:10:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:11:03 splunk3 sendmail[20541]: n339B34v020541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 02:12:03 splunk3 sendmail[20777]: n339C3rn020777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:13:03 splunk3 sendmail[21017]: n339D3aB021017: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:14:03 splunk3 sendmail[21252]: n339E3xk021252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:15:03 splunk3 sendmail[21498]: n339F3be021498: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:15:19 splunk3 sendmail[21577]: n339FJ4O021577: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030915.n339FJlw011892@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:15:19 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40464
|
|
Apr 3 02:15:19 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:15:19 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:15:19 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:15:19 splunk3 spamd[12010]: spamd: processing message <200904030915.n339FJlw011892@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:15:21 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 02:15:21 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40464,mid=<200904030915.n339FJlw011892@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 02:15:21 splunk3 sendmail[21578]: n339FJ4O021577: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:15:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:15:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:15:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:16:03 splunk3 sendmail[21749]: n339G34T021749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:17:03 splunk3 sendmail[21991]: n339H3lu021991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:18:03 splunk3 sendmail[22225]: n339I3NS022225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:19:03 splunk3 sendmail[22462]: n339J3Q3022462: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:20:03 splunk3 sendmail[22712]: n339K361022712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:20:20 splunk3 sendmail[22788]: n339KKtq022788: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030920.n339KJ7t012533@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:20:20 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40519
|
|
Apr 3 02:20:20 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:20:20 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:20:20 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:20:20 splunk3 spamd[12010]: spamd: processing message <200904030920.n339KJ7t012533@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:20:22 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 02:20:22 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40519,mid=<200904030920.n339KJ7t012533@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 02:20:22 splunk3 sendmail[22789]: n339KKtq022788: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:20:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:20:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:20:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:21:03 splunk3 sendmail[22962]: n339L3JY022962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:22:03 splunk3 sendmail[23195]: n339M3Iu023195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:23:03 splunk3 sendmail[23435]: n339N36V023435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:24:03 splunk3 sendmail[23676]: n339O3dV023676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:25:03 splunk3 sendmail[23921]: n339P3Gi023921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:25:20 splunk3 sendmail[23999]: n339PKfR023999: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030925.n339PKlU013139@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:25:20 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40575
|
|
Apr 3 02:25:20 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:25:20 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:25:20 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:25:20 splunk3 spamd[12010]: spamd: processing message <200904030925.n339PKlU013139@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:25:22 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 02:25:22 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40575,mid=<200904030925.n339PKlU013139@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 02:25:22 splunk3 sendmail[24000]: n339PKfR023999: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:25:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:25:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:25:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:26:03 splunk3 sendmail[24169]: n339Q3GI024169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 02:27:03 splunk3 sendmail[24410]: n339R3Ns024410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:28:03 splunk3 sendmail[24643]: n339S3sT024643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:29:03 splunk3 sendmail[24882]: n339T35P024882: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:30:03 splunk3 sendmail[25133]: n339U3kM025133: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:30:21 splunk3 sendmail[25211]: n339ULoc025211: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030930.n339UK3S013763@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:30:21 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40631
|
|
Apr 3 02:30:21 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:30:21 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:30:21 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:30:21 splunk3 spamd[12010]: spamd: processing message <200904030930.n339UK3S013763@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:30:23 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 02:30:23 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40631,mid=<200904030930.n339UK3S013763@virt2.int.splunk.com>,bayes=0.111686123320133,autolearn=no
|
|
Apr 3 02:30:23 splunk3 sendmail[25212]: n339ULoc025211: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:30:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:30:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:30:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:31:03 splunk3 sendmail[25388]: n339V3KC025388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:32:03 splunk3 sendmail[25623]: n339W3WH025623: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:33:03 splunk3 sendmail[25861]: n339X388025861: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:34:03 splunk3 sendmail[26097]: n339Y3ct026097: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:35:03 splunk3 sendmail[26343]: n339Z3uU026343: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:35:10 splunk3 sendmail[26383]: n339Z9f5026383: from=<3TdjVSRQKBkUnvvnslhsly0z-uvylws5nvvnsl.jvtzwhttlzws1urp0.jvt@alerts.bounces.google.com>, size=5037, class=0, nrcpts=1, msgid=<000e0cd56b48c61fd90466a343b9@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.164]
|
|
Apr 3 02:35:10 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40686
|
|
Apr 3 02:35:10 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:35:10 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:35:10 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:35:10 splunk3 spamd[12010]: spamd: processing message <000e0cd56b48c61fd90466a343b9@google.com> for spamme:501
|
|
Apr 3 02:35:12 splunk3 spamd[12010]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.3 seconds, 5466 bytes.
|
|
Apr 3 02:35:12 splunk3 spamd[12010]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.3,size=5466,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40686,mid=<000e0cd56b48c61fd90466a343b9@google.com>,bayes=0,autolearn=ham
|
|
Apr 3 02:35:12 splunk3 sendmail[26384]: n339Z9f5026383: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=35247, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:35:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:35:21 splunk3 sendmail[26426]: n339ZLso026426: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030935.n339ZLJZ014511@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:35:21 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40688
|
|
Apr 3 02:35:21 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:35:21 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:35:21 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:35:21 splunk3 spamd[12010]: spamd: processing message <200904030935.n339ZLJZ014511@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:35:23 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 02:35:23 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40688,mid=<200904030935.n339ZLJZ014511@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 02:35:23 splunk3 sendmail[26427]: n339ZLso026426: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:35:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:35:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:36:03 splunk3 sendmail[26596]: n339a3lK026596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:37:03 splunk3 sendmail[26836]: n339b3Yt026836: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:38:03 splunk3 sendmail[27072]: n339c3V1027072: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:39:03 splunk3 sendmail[27313]: n339d3Ww027313: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:40:03 splunk3 sendmail[27561]: n339e3CZ027561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:40:22 splunk3 sendmail[27642]: n339eLLI027642: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030940.n339eLi8015143@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:40:22 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40744
|
|
Apr 3 02:40:22 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:40:22 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:40:22 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:40:22 splunk3 spamd[12010]: spamd: processing message <200904030940.n339eLi8015143@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:40:24 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 02:40:24 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40744,mid=<200904030940.n339eLi8015143@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 02:40:24 splunk3 sendmail[27643]: n339eLLI027642: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:40:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:40:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:40:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:41:03 splunk3 sendmail[27816]: n339f3bR027816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 02:42:03 splunk3 sendmail[28049]: n339g30V028049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:43:03 splunk3 sendmail[28303]: n339h3Uc028303: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:44:04 splunk3 sendmail[28541]: n339i4nM028541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:45:04 splunk3 sendmail[28789]: n339j4qO028789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:45:22 splunk3 sendmail[28851]: n339jMCM028851: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030945.n339jMHX015760@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:45:22 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40800
|
|
Apr 3 02:45:22 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:45:22 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:45:22 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:45:22 splunk3 spamd[12010]: spamd: processing message <200904030945.n339jMHX015760@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:45:24 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 02:45:24 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40800,mid=<200904030945.n339jMHX015760@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 02:45:24 splunk3 sendmail[28852]: n339jMCM028851: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:45:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:45:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:45:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:46:04 splunk3 sendmail[29038]: n339k4sm029038: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:47:04 splunk3 sendmail[29277]: n339l4BL029277: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:48:04 splunk3 sendmail[29513]: n339m4Ir029513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:49:04 splunk3 sendmail[29748]: n339n4KB029748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:50:04 splunk3 sendmail[29989]: n339o4Dv029989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:50:23 splunk3 sendmail[30065]: n339oNkD030065: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030950.n339oNVj016375@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:50:23 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40856
|
|
Apr 3 02:50:23 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:50:23 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:50:23 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:50:23 splunk3 spamd[12010]: spamd: processing message <200904030950.n339oNVj016375@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:50:25 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 02:50:25 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40856,mid=<200904030950.n339oNVj016375@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 02:50:25 splunk3 sendmail[30066]: n339oNkD030065: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:50:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:50:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:51:04 splunk3 sendmail[30253]: n339p4aU030253: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:52:04 splunk3 sendmail[30488]: n339q4Nh030488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:53:04 splunk3 sendmail[30729]: n339r4eg030729: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:54:04 splunk3 sendmail[30965]: n339s4ft030965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:55:04 splunk3 sendmail[31203]: n339t4A6031203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:55:24 splunk3 sendmail[31295]: n339tOVL031295: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904030955.n339tOoe016982@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 02:55:24 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40911
|
|
Apr 3 02:55:24 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 02:55:24 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 02:55:24 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 02:55:24 splunk3 spamd[12010]: spamd: processing message <200904030955.n339tOoe016982@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 02:55:26 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 02:55:26 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40911,mid=<200904030955.n339tOoe016982@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 02:55:26 splunk3 sendmail[31296]: n339tOVL031295: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 02:55:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 02:55:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 02:55:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 02:56:04 splunk3 sendmail[31458]: n339u428031458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 02:57:04 splunk3 sendmail[31698]: n339v4SF031698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:58:04 splunk3 sendmail[31933]: n339w4PL031933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 02:59:04 splunk3 sendmail[32174]: n339x4f3032174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:00:04 splunk3 sendmail[32468]: n33A04Oj032468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:00:04 splunk3 sendmail[32477]: n33A0457032477: from=root, size=291, class=0, nrcpts=1, msgid=<200904031000.n33A0457032477@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 03:00:04 splunk3 sendmail[32481]: n33A046Q032481: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031000.n33A0457032477@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 03:00:04 splunk3 sendmail[32477]: n33A0457032477: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33A046Q032481 Message accepted for delivery)
|
|
Apr 3 03:00:05 splunk3 sendmail[32498]: n33A05Lj032498: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904031000.n33A05Lj032498@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 03:00:05 splunk3 sendmail[32500]: n33A05Lj032498: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 03:00:05 splunk3 sendmail[32500]: n33A05Lj032498: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 03:00:05 splunk3 sendmail[32500]: n33A05Lj032498: n33A05Lj032500: postmaster notify: User unknown
|
|
Apr 3 03:00:06 splunk3 sendmail[32482]: n33A046Q032481: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:00:14 splunk3 sendmail[32500]: n33A05Lj032500: to=root, delay=00:00:09, xdelay=00:00:09, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:00:25 splunk3 sendmail[32592]: n33A0PC5032592: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031000.n33A0Osu017622@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:00:25 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40976
|
|
Apr 3 03:00:25 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:00:25 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 03:00:25 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 03:00:25 splunk3 sendmail[32593]: n33A0PC5032592: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:00:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:00:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:00:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:01:03 splunk3 sendmail[32751]: n33A1279032751: from=root, size=443, class=0, nrcpts=1, msgid=<200904031001.n33A1279032751@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 03:01:03 splunk3 sendmail[32753]: n33A13fL032753: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031001.n33A1279032751@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 03:01:03 splunk3 sendmail[32751]: n33A1279032751: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33A13fL032753 Message accepted for delivery)
|
|
Apr 3 03:01:04 splunk3 sendmail[306]: n33A14qk000306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:01:04 splunk3 sendmail[32754]: n33A13fL032753: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:02:04 splunk3 sendmail[543]: n33A24j3000543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:03:04 splunk3 sendmail[779]: n33A34rv000779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:04:04 splunk3 sendmail[1014]: n33A44xu001014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:05:04 splunk3 sendmail[1256]: n33A548M001256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:05:25 splunk3 sendmail[1348]: n33A5PeK001348: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031005.n33A5PSc018301@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:05:25 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41032
|
|
Apr 3 03:05:25 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:05:25 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 03:05:25 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 03:05:25 splunk3 sendmail[1349]: n33A5PeK001348: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:05:41 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:05:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:06:04 splunk3 sendmail[1513]: n33A64GQ001513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:07:04 splunk3 sendmail[1753]: n33A74vj001753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:08:04 splunk3 sendmail[1994]: n33A84Ib001994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:09:04 splunk3 sendmail[2234]: n33A94Sm002234: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:10:02 splunk3 sendmail[2551]: n33AA2pa002551: from=root, size=292, class=0, nrcpts=1, msgid=<200904031010.n33AA2pa002551@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 03:10:02 splunk3 sendmail[2556]: n33AA2qX002556: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031010.n33AA2pa002551@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 03:10:02 splunk3 sendmail[2551]: n33AA2pa002551: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33AA2qX002556 Message accepted for delivery)
|
|
Apr 3 03:10:03 splunk3 sendmail[2557]: n33AA2qX002556: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:10:04 splunk3 sendmail[2580]: n33AA4Fo002580: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:10:26 splunk3 sendmail[2678]: n33AAPXY002678: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031010.n33AAPhS018919@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:10:26 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41089
|
|
Apr 3 03:10:26 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:10:26 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:10:26 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:10:26 splunk3 spamd[12010]: spamd: processing message <200904031010.n33AAPhS018919@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:10:30 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Apr 3 03:10:30 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41089,mid=<200904031010.n33AAPhS018919@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:10:30 splunk3 sendmail[2679]: n33AAPXY002678: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:10:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:10:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:10:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:11:04 splunk3 sendmail[2854]: n33AB4Cj002854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 03:12:04 splunk3 sendmail[3101]: n33AC4Tl003101: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:13:04 splunk3 sendmail[3341]: n33AD4Jl003341: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:14:04 splunk3 sendmail[3602]: n33AE4Z7003602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:15:04 splunk3 sendmail[3850]: n33AF4dN003850: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:15:26 splunk3 sendmail[3945]: n33AFQ0T003945: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031015.n33AFQYB019715@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:15:26 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41146
|
|
Apr 3 03:15:26 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:15:26 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:15:26 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:15:26 splunk3 spamd[12010]: spamd: processing message <200904031015.n33AFQYB019715@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:15:28 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 03:15:28 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41146,mid=<200904031015.n33AFQYB019715@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:15:28 splunk3 sendmail[3946]: n33AFQ0T003945: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:15:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:15:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:16:04 splunk3 sendmail[4123]: n33AG4H2004123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:17:04 splunk3 sendmail[4376]: n33AH4ZL004376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:18:04 splunk3 sendmail[4611]: n33AI4Hg004611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:19:04 splunk3 sendmail[4853]: n33AJ452004853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:20:04 splunk3 sendmail[5105]: n33AK43a005105: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:20:27 splunk3 sendmail[5233]: n33AKRh3005233: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031020.n33AKQNj020359@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:20:27 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41201
|
|
Apr 3 03:20:27 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:20:27 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:20:27 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:20:27 splunk3 spamd[12010]: spamd: processing message <200904031020.n33AKQNj020359@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:20:29 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 03:20:29 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41201,mid=<200904031020.n33AKQNj020359@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:20:29 splunk3 sendmail[5234]: n33AKRh3005233: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:20:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:20:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:20:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:21:04 splunk3 sendmail[5408]: n33AL4Vv005408: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:22:04 splunk3 sendmail[5641]: n33AM4ED005641: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:23:04 splunk3 sendmail[5886]: n33AN4ZM005886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:24:04 splunk3 sendmail[6119]: n33AO4rg006119: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:25:04 splunk3 sendmail[6359]: n33AP4CB006359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:25:27 splunk3 sendmail[6452]: n33APRGh006452: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031025.n33APRCw020996@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:25:27 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41257
|
|
Apr 3 03:25:27 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:25:27 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:25:27 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:25:27 splunk3 spamd[12010]: spamd: processing message <200904031025.n33APRCw020996@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:25:30 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 03:25:30 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41257,mid=<200904031025.n33APRCw020996@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:25:30 splunk3 sendmail[6453]: n33APRGh006452: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:25:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:25:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:25:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:26:04 splunk3 sendmail[6617]: n33AQ4WL006617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 03:27:04 splunk3 sendmail[6857]: n33AR4h6006857: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:28:04 splunk3 sendmail[7092]: n33AS4uW007092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:29:04 splunk3 sendmail[7331]: n33AT4I9007331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:30:04 splunk3 sendmail[7581]: n33AU4pT007581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:30:29 splunk3 sendmail[7691]: n33AUTMj007691: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031030.n33AUSMw021591@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:30:29 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41313
|
|
Apr 3 03:30:29 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:30:29 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:30:29 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:30:29 splunk3 spamd[12010]: spamd: processing message <200904031030.n33AUSMw021591@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:30:31 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 03:30:31 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41313,mid=<200904031030.n33AUSMw021591@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:30:31 splunk3 sendmail[7692]: n33AUTMj007691: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:30:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:30:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:30:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:31:04 splunk3 sendmail[7841]: n33AV4KS007841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:32:04 splunk3 sendmail[8076]: n33AW4Z6008076: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:33:04 splunk3 sendmail[8316]: n33AX4fM008316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:34:04 splunk3 sendmail[8552]: n33AY4nG008552: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:35:04 splunk3 sendmail[8792]: n33AZ4DV008792: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:35:29 splunk3 sendmail[8901]: n33AZTvC008901: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031035.n33AZThh022359@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:35:30 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41369
|
|
Apr 3 03:35:30 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:35:30 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:35:30 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:35:30 splunk3 spamd[12010]: spamd: processing message <200904031035.n33AZThh022359@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:35:32 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 03:35:32 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41369,mid=<200904031035.n33AZThh022359@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:35:32 splunk3 sendmail[8902]: n33AZTvC008901: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:35:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:35:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:35:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:36:04 splunk3 sendmail[9049]: n33Aa4Mo009049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:37:04 splunk3 sendmail[9289]: n33Ab4C8009289: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:38:04 splunk3 sendmail[9529]: n33Ac4Cp009529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:39:04 splunk3 sendmail[9776]: n33Ad4ST009776: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:40:04 splunk3 sendmail[10018]: n33Ae4lF010018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:40:30 splunk3 sendmail[10128]: n33AeUqE010128: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031040.n33AeUKM022971@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:40:30 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41424
|
|
Apr 3 03:40:30 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:40:30 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:40:30 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:40:30 splunk3 spamd[12010]: spamd: processing message <200904031040.n33AeUKM022971@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:40:32 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 03:40:32 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41424,mid=<200904031040.n33AeUKM022971@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:40:32 splunk3 sendmail[10129]: n33AeUqE010128: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:40:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:40:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:40:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:41:04 splunk3 sendmail[10281]: n33Af4Ep010281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 03:42:04 splunk3 sendmail[10518]: n33Ag4oA010518: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:43:04 splunk3 sendmail[10754]: n33Ah4RZ010754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:44:04 splunk3 sendmail[10991]: n33Ai4IP010991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:45:00 splunk3 sendmail[11209]: n33Aj0f4011209: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031045.n33Aj0hK023538@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:45:00 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41469
|
|
Apr 3 03:45:00 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:45:00 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:45:00 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:45:00 splunk3 spamd[12010]: spamd: processing message <200904031045.n33Aj0hK023538@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:45:03 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 3 03:45:03 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41469,mid=<200904031045.n33Aj0hK023538@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:45:03 splunk3 sendmail[11210]: n33Aj0f4011209: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:45:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:45:04 splunk3 sendmail[11234]: n33Aj4VB011234: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:45:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:45:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:46:04 splunk3 sendmail[11482]: n33Ak4lL011482: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:47:04 splunk3 sendmail[11721]: n33Al4ws011721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:48:04 splunk3 sendmail[11954]: n33Am4jP011954: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:49:04 splunk3 sendmail[12196]: n33An4Mh012196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:50:02 splunk3 sendmail[12421]: n33Ao2cS012421: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031050.n33Ao1TB024194@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:50:02 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41525
|
|
Apr 3 03:50:02 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:50:02 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:50:02 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:50:02 splunk3 spamd[12010]: spamd: processing message <200904031050.n33Ao1TB024194@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:50:04 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 03:50:04 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41525,mid=<200904031050.n33Ao1TB024194@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:50:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:50:04 splunk3 sendmail[12422]: n33Ao2cS012421: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:50:04 splunk3 sendmail[12443]: n33Ao4va012443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:50:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:50:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:51:04 splunk3 sendmail[12700]: n33Ap4PI012700: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:52:04 splunk3 sendmail[12933]: n33Aq4An012933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:53:04 splunk3 sendmail[13176]: n33Ar4eg013176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:54:04 splunk3 sendmail[13451]: n33As4Lp013451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:55:02 splunk3 sendmail[13673]: n33At2Ep013673: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031055.n33At2pw024806@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 03:55:02 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41580
|
|
Apr 3 03:55:02 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 03:55:02 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 03:55:02 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 03:55:02 splunk3 spamd[12010]: spamd: processing message <200904031055.n33At2pw024806@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 03:55:04 splunk3 sendmail[13695]: n33At4I3013695: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:55:05 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 3 03:55:05 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41580,mid=<200904031055.n33At2pw024806@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 03:55:05 splunk3 sendmail[13674]: n33At2Ep013673: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 03:55:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 03:55:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 03:55:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 03:56:04 splunk3 sendmail[13949]: n33Au4ia013949: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 03:57:04 splunk3 sendmail[14188]: n33Av4ZJ014188: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:57:19 splunk3 sendmail[14247]: n33AvId1014247: ruleset=check_rcpt, arg1=<sseenndd1201@yahoo.com.hk>, relay=118-165-89-215.dynamic.hinet.net [118.165.89.215], reject=550 5.7.1 <sseenndd1201@yahoo.com.hk>... Relaying denied
|
|
Apr 3 03:58:04 splunk3 sendmail[14422]: n33Aw4Bo014422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 03:59:04 splunk3 sendmail[14660]: n33Ax4AR014660: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:00:03 splunk3 sendmail[14951]: n33B03qX014951: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031100.n33B03Za025442@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:00:03 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41636
|
|
Apr 3 04:00:03 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:00:03 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 04:00:03 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 04:00:03 splunk3 sendmail[14954]: n33B03qX014951: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:00:04 splunk3 sendmail[14966]: n33B04nq014966: from=root, size=291, class=0, nrcpts=1, msgid=<200904031100.n33B04nq014966@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 04:00:04 splunk3 sendmail[14970]: n33B0492014970: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031100.n33B04nq014966@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 04:00:04 splunk3 sendmail[14966]: n33B04nq014966: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33B0492014970 Message accepted for delivery)
|
|
Apr 3 04:00:04 splunk3 sendmail[14975]: n33B04JA014975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:00:05 splunk3 sendmail[14971]: n33B0492014970: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:00:11 splunk3 sendmail[15014]: n33B0B4f015014: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904031100.n33B0B4f015014@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 04:00:11 splunk3 sendmail[15016]: n33B0B4f015014: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 04:00:11 splunk3 sendmail[15016]: n33B0B4f015014: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 04:00:11 splunk3 sendmail[15016]: n33B0B4f015014: n33B0B4f015016: postmaster notify: User unknown
|
|
Apr 3 04:00:12 splunk3 sendmail[15016]: n33B0B4f015016: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:00:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:00:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:01:04 splunk3 sendmail[15255]: n33B147j015255: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:01:05 splunk3 sendmail[15234]: n33B11kH015234: from=root, size=443, class=0, nrcpts=1, msgid=<200904031101.n33B11kH015234@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 04:01:05 splunk3 sendmail[15256]: n33B15ld015256: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031101.n33B11kH015234@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 04:01:05 splunk3 sendmail[15234]: n33B11kH015234: to=root, ctladdr=root (0/0), delay=00:00:04, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33B15ld015256 Message accepted for delivery)
|
|
Apr 3 04:01:07 splunk3 sendmail[15257]: n33B15ld015256: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:02:04 splunk3 sendmail[15762]: n33B24bn015762: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:02:04 splunk3 sendmail[15809]: n33B24U3015809: from=root, size=2164, class=0, nrcpts=1, msgid=<200904031102.n33B24U3015809@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 04:02:05 splunk3 sendmail[15811]: n33B2400015811: from=<root@splunk3.splunkit.com>, size=2464, class=0, nrcpts=1, msgid=<200904031102.n33B24U3015809@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 04:02:05 splunk3 sendmail[15809]: n33B24U3015809: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=32164, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33B2400015811 Message accepted for delivery)
|
|
Apr 3 04:02:09 splunk3 sendmail[15812]: n33B2400015811: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:05, xdelay=00:00:04, mailer=local, pri=32697, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:03:04 splunk3 sendmail[16197]: n33B342U016197: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:04:04 splunk3 sendmail[16433]: n33B44Dp016433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:05:03 splunk3 sendmail[16671]: n33B53DR016671: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031105.n33B53Yw026626@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:05:03 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41702
|
|
Apr 3 04:05:03 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:05:03 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 04:05:03 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 04:05:03 splunk3 sendmail[16672]: n33B53DR016671: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:05:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:05:04 splunk3 sendmail[16676]: n33B54Ku016676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:05:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:05:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:06:04 splunk3 sendmail[16926]: n33B64st016926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:07:04 splunk3 sendmail[17163]: n33B74id017163: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:08:04 splunk3 sendmail[17403]: n33B848H017403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:09:04 splunk3 sendmail[17643]: n33B94df017643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:10:02 splunk3 sendmail[17964]: n33BA2iC017964: from=root, size=292, class=0, nrcpts=1, msgid=<200904031110.n33BA2iC017964@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 04:10:02 splunk3 sendmail[17969]: n33BA2Fu017969: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031110.n33BA2iC017964@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 04:10:02 splunk3 sendmail[17964]: n33BA2iC017964: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33BA2Fu017969 Message accepted for delivery)
|
|
Apr 3 04:10:04 splunk3 sendmail[17986]: n33BA2Fu017969: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:10:04 splunk3 sendmail[17991]: n33BA4Gq017991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:10:04 splunk3 sendmail[17992]: n33BA4IA017992: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031110.n33BA4Ar027237@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:10:04 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41758
|
|
Apr 3 04:10:04 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:10:04 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:10:04 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:10:04 splunk3 spamd[12010]: spamd: processing message <200904031110.n33BA4Ar027237@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:10:06 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Apr 3 04:10:06 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41758,mid=<200904031110.n33BA4Ar027237@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 04:10:06 splunk3 sendmail[17993]: n33BA4IA017992: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:10:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:10:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:10:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:11:04 splunk3 sendmail[18268]: n33BB4xO018268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 04:12:04 splunk3 sendmail[18504]: n33BC4gA018504: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:13:04 splunk3 sendmail[18739]: n33BD4Ep018739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:14:04 splunk3 sendmail[18976]: n33BE4Pw018976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:15:04 splunk3 sendmail[19215]: n33BF441019215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:15:05 splunk3 sendmail[19217]: n33BF5Tg019217: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031115.n33BF5W9028029@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:15:05 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41815
|
|
Apr 3 04:15:05 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:15:05 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:15:05 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:15:05 splunk3 spamd[12010]: spamd: processing message <200904031115.n33BF5W9028029@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:15:07 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 04:15:07 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41815,mid=<200904031115.n33BF5W9028029@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 04:15:07 splunk3 sendmail[19218]: n33BF5Tg019217: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:15:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:15:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:15:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:16:04 splunk3 sendmail[19473]: n33BG4i2019473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:17:04 splunk3 sendmail[19716]: n33BH4YT019716: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:18:04 splunk3 sendmail[19952]: n33BI4or019952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:19:04 splunk3 sendmail[20190]: n33BJ4N3020190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:20:04 splunk3 sendmail[20426]: n33BK4WB020426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:20:06 splunk3 sendmail[20430]: n33BK51L020430: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031120.n33BK5dF028665@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:20:06 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41871
|
|
Apr 3 04:20:06 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:20:06 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:20:06 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:20:06 splunk3 spamd[12010]: spamd: processing message <200904031120.n33BK5dF028665@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:20:08 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 04:20:08 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41871,mid=<200904031120.n33BK5dF028665@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 04:20:08 splunk3 sendmail[20431]: n33BK51L020430: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:20:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:20:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:20:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:21:04 splunk3 sendmail[20687]: n33BL41S020687: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:22:04 splunk3 sendmail[20923]: n33BM4fD020923: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:23:04 splunk3 sendmail[21166]: n33BN4KV021166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:24:04 splunk3 sendmail[21403]: n33BO4q2021403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:25:04 splunk3 sendmail[21642]: n33BP4Yp021642: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:25:06 splunk3 sendmail[21643]: n33BP68A021643: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031125.n33BP6L6029274@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:25:06 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41927
|
|
Apr 3 04:25:06 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:25:06 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:25:06 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:25:06 splunk3 spamd[12010]: spamd: processing message <200904031125.n33BP6L6029274@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:25:08 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 04:25:08 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41927,mid=<200904031125.n33BP6L6029274@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 04:25:08 splunk3 sendmail[21645]: n33BP68A021643: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:25:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:25:40 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:25:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:26:04 splunk3 sendmail[21901]: n33BQ4Fh021901: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 04:27:04 splunk3 sendmail[22140]: n33BR4Yp022140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:28:04 splunk3 sendmail[22373]: n33BS4uX022373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:29:04 splunk3 sendmail[22615]: n33BT4TY022615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:30:04 splunk3 sendmail[22855]: n33BU4mI022855: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:30:07 splunk3 sendmail[22857]: n33BU73L022857: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031130.n33BU7Mx029891@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:30:07 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41983
|
|
Apr 3 04:30:07 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:30:07 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:30:07 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:30:07 splunk3 spamd[12010]: spamd: processing message <200904031130.n33BU7Mx029891@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:30:09 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 3 04:30:09 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41983,mid=<200904031130.n33BU7Mx029891@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 04:30:09 splunk3 sendmail[22858]: n33BU73L022857: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:30:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:30:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:30:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:31:04 splunk3 sendmail[23118]: n33BV4AL023118: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:32:04 splunk3 sendmail[23354]: n33BW4In023354: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:33:04 splunk3 sendmail[23591]: n33BX4vU023591: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:34:04 splunk3 sendmail[23824]: n33BY4o3023824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:35:04 splunk3 sendmail[24062]: n33BZ4Kb024062: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:35:08 splunk3 sendmail[24085]: n33BZ7EM024085: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031135.n33BZ7rO030637@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:35:08 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42039
|
|
Apr 3 04:35:08 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:35:08 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:35:08 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:35:08 splunk3 spamd[12010]: spamd: processing message <200904031135.n33BZ7rO030637@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:35:10 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 3 04:35:10 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42039,mid=<200904031135.n33BZ7rO030637@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 04:35:10 splunk3 sendmail[24086]: n33BZ7EM024085: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:35:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:35:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:35:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:36:04 splunk3 sendmail[24321]: n33Ba48D024321: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:37:04 splunk3 sendmail[24557]: n33Bb4K1024557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:38:04 splunk3 sendmail[24798]: n33Bc4uW024798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:39:04 splunk3 sendmail[25037]: n33Bd48u025037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:40:04 splunk3 sendmail[25279]: n33Be4Vq025279: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:40:08 splunk3 sendmail[25301]: n33Be8kQ025301: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031140.n33Be8sv031272@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:40:08 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42095
|
|
Apr 3 04:40:08 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:40:08 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:40:08 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:40:08 splunk3 spamd[12010]: spamd: processing message <200904031140.n33Be8sv031272@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:40:10 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 3 04:40:10 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42095,mid=<200904031140.n33Be8sv031272@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 04:40:10 splunk3 sendmail[25302]: n33Be8kQ025301: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:40:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:40:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:40:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:41:04 splunk3 sendmail[25539]: n33Bf4cd025539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 04:42:04 splunk3 sendmail[25774]: n33Bg41k025774: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:43:04 splunk3 sendmail[26014]: n33Bh4Kt026014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:44:04 splunk3 sendmail[26250]: n33Bi4TW026250: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:45:04 splunk3 sendmail[26490]: n33Bj4Af026490: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:45:10 splunk3 sendmail[26513]: n33BjAr7026513: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031145.n33Bj9Us031888@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:45:10 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42150
|
|
Apr 3 04:45:10 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:45:10 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:45:10 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:45:10 splunk3 spamd[12010]: spamd: processing message <200904031145.n33Bj9Us031888@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:45:12 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 04:45:12 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42150,mid=<200904031145.n33Bj9Us031888@virt2.int.splunk.com>,bayes=0.111718179655085,autolearn=no
|
|
Apr 3 04:45:12 splunk3 sendmail[26514]: n33BjAr7026513: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:45:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:45:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:45:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:46:04 splunk3 sendmail[26748]: n33Bk4Ur026748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:47:04 splunk3 sendmail[26989]: n33Bl4KC026989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:47:05 splunk3 sendmail[26988]: n33Bl4CA026988: from=<Les-harbus@24hourcomputersolutions.com>, size=1959, class=0, nrcpts=1, msgid=<200904031147.n33Bl4CA026988@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=host-81-190-69-50.gdynia.mm.pl [81.190.69.50]
|
|
Apr 3 04:47:05 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42177
|
|
Apr 3 04:47:05 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:47:05 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:47:05 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:47:05 splunk3 spamd[12010]: spamd: processing message <200904031147.n33Bl4CA026988@splunk3.splunkit.com> for spamme:501
|
|
Apr 3 04:47:11 splunk3 spamd[12010]: spamd: identified spam (20.6/5.0) for spamme:501 in 6.3 seconds, 2407 bytes.
|
|
Apr 3 04:47:11 splunk3 spamd[12010]: spamd: result: Y 20 - BAYES_99,HELO_DYNAMIC_IPADDR,HTML_IMAGE_ONLY_20,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL scantime=6.3,size=2407,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42177,mid=<200904031147.n33Bl4CA026988@splunk3.splunkit.com>,bayes=0.999669557153862,autolearn=spam
|
|
Apr 3 04:47:11 splunk3 sendmail[26990]: n33Bl4CA026988: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:06, mailer=local, pri=32292, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:47:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:48:05 splunk3 sendmail[27224]: n33Bm4bG027224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:49:05 splunk3 sendmail[27463]: n33Bn5o4027463: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:50:05 splunk3 sendmail[27705]: n33Bo5et027705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:50:10 splunk3 sendmail[27727]: n33BoAVJ027727: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031150.n33BoAQk032503@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:50:10 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42207
|
|
Apr 3 04:50:10 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:50:10 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:50:10 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:50:10 splunk3 spamd[12010]: spamd: processing message <200904031150.n33BoAQk032503@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:50:12 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 04:50:12 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42207,mid=<200904031150.n33BoAQk032503@virt2.int.splunk.com>,bayes=0.111710752352322,autolearn=no
|
|
Apr 3 04:50:12 splunk3 sendmail[27728]: n33BoAVJ027727: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:50:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:50:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:50:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:51:05 splunk3 sendmail[27965]: n33Bp55l027965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:52:05 splunk3 sendmail[28200]: n33Bq5Fk028200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:53:05 splunk3 sendmail[28442]: n33Br5Rq028442: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:54:05 splunk3 sendmail[28678]: n33Bs5LD028678: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:55:05 splunk3 sendmail[28914]: n33Bt5nv028914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:55:11 splunk3 sendmail[28940]: n33BtAVD028940: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904031155.n33BtAiH000649@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 04:55:11 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42262
|
|
Apr 3 04:55:11 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 04:55:11 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 04:55:11 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 04:55:11 splunk3 spamd[12010]: spamd: processing message <200904031155.n33BtAiH000649@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 04:55:13 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1302 bytes.
|
|
Apr 3 04:55:13 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42262,mid=<200904031155.n33BtAiH000649@virt2.int.splunk.com>,bayes=0.0658314968342897,autolearn=no
|
|
Apr 3 04:55:13 splunk3 sendmail[28941]: n33BtAVD028940: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 3 04:55:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 04:55:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 04:55:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 04:56:05 splunk3 sendmail[29172]: n33Bu5VY029172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 04:57:05 splunk3 sendmail[29413]: n33Bv5sc029413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:57:19 splunk3 sendmail[14247]: n33AvId1014247: timeout waiting for input from 118-165-89-215.dynamic.hinet.net during server cmd read
|
|
Apr 3 04:57:19 splunk3 sendmail[14247]: n33AvId1014247: lost input channel from 118-165-89-215.dynamic.hinet.net [118.165.89.215] to MTA after rcpt
|
|
Apr 3 04:57:19 splunk3 sendmail[14247]: n33AvId1014247: from=<ln6u5f3s2k5@yahoo.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-165-89-215.dynamic.hinet.net [118.165.89.215]
|
|
Apr 3 04:58:05 splunk3 sendmail[29647]: n33Bw5EZ029647: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 04:59:05 splunk3 sendmail[29889]: n33Bx57T029889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:00:04 splunk3 sendmail[30191]: n33C04UC030191: from=root, size=291, class=0, nrcpts=1, msgid=<200904031200.n33C04UC030191@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 05:00:05 splunk3 sendmail[30196]: n33C05Sv030196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:00:06 splunk3 sendmail[30195]: n33C04FG030195: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031200.n33C04UC030191@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 05:00:06 splunk3 sendmail[30191]: n33C04UC030191: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:02, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33C04FG030195 Message accepted for delivery)
|
|
Apr 3 05:00:08 splunk3 sendmail[30197]: n33C04FG030195: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:00:11 splunk3 sendmail[30222]: n33C0B1Y030222: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031200.n33C0BaL001296@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:00:11 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42320
|
|
Apr 3 05:00:11 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:00:11 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 05:00:11 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 05:00:11 splunk3 sendmail[30223]: n33C0B1Y030222: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:00:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:00:17 splunk3 sendmail[30273]: n33C0HL9030273: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904031200.n33C0HL9030273@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 05:00:17 splunk3 sendmail[30275]: n33C0HL9030273: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 05:00:17 splunk3 sendmail[30275]: n33C0HL9030273: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 05:00:17 splunk3 sendmail[30275]: n33C0HL9030273: n33C0HL9030275: postmaster notify: User unknown
|
|
Apr 3 05:00:18 splunk3 sendmail[30275]: n33C0HL9030275: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:00:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:00:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:01:05 splunk3 sendmail[30484]: n33C15PT030484: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:01:08 splunk3 sendmail[30462]: n33C11oF030462: from=root, size=443, class=0, nrcpts=1, msgid=<200904031201.n33C11oF030462@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 05:01:09 splunk3 sendmail[30506]: n33C19AV030506: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031201.n33C11oF030462@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 05:01:09 splunk3 sendmail[30462]: n33C11oF030462: to=root, ctladdr=root (0/0), delay=00:00:08, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33C19AV030506 Message accepted for delivery)
|
|
Apr 3 05:01:10 splunk3 sendmail[30507]: n33C19AV030506: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:02:05 splunk3 sendmail[30722]: n33C25cr030722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:03:05 splunk3 sendmail[30959]: n33C35Bt030959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:04:05 splunk3 sendmail[31195]: n33C45nA031195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:05:05 splunk3 sendmail[31435]: n33C55ed031435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:05:14 splunk3 sendmail[31477]: n33C5EIh031477: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031205.n33C5BAs002007@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:05:14 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42384
|
|
Apr 3 05:05:14 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:05:14 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 05:05:14 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 05:05:14 splunk3 sendmail[31478]: n33C5EIh031477: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:05:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:05:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:05:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:06:05 splunk3 sendmail[31693]: n33C654Y031693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:07:05 splunk3 sendmail[31932]: n33C75pL031932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:08:05 splunk3 sendmail[32171]: n33C85vg032171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:09:05 splunk3 sendmail[32407]: n33C95LK032407: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:10:02 splunk3 sendmail[32743]: n33CA2N0032743: from=root, size=292, class=0, nrcpts=1, msgid=<200904031210.n33CA2N0032743@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 05:10:02 splunk3 sendmail[32748]: n33CA2nN032748: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031210.n33CA2N0032743@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 05:10:02 splunk3 sendmail[32743]: n33CA2N0032743: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33CA2nN032748 Message accepted for delivery)
|
|
Apr 3 05:10:03 splunk3 sendmail[32749]: n33CA2nN032748: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:10:05 splunk3 sendmail[32754]: n33CA53k032754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:10:12 splunk3 sendmail[330]: n33CACwa000330: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031210.n33CAC1o002630@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:10:12 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42440
|
|
Apr 3 05:10:12 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:10:12 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:10:12 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:10:12 splunk3 spamd[12010]: spamd: processing message <200904031210.n33CAC1o002630@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:10:14 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 3 05:10:14 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42440,mid=<200904031210.n33CAC1o002630@virt2.int.splunk.com>,bayes=0.168550750985169,autolearn=no
|
|
Apr 3 05:10:14 splunk3 sendmail[331]: n33CACwa000330: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:10:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:10:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:10:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:11:05 splunk3 sendmail[549]: n33CB5dR000549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 05:12:05 splunk3 sendmail[784]: n33CC5ig000784: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:13:05 splunk3 sendmail[1024]: n33CD5Tt001024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:14:05 splunk3 sendmail[1262]: n33CE5jE001262: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:14:22 splunk3 sendmail[1327]: n33CELkK001327: from=<3nf3VSRQKBrolttlqjfqjwyx-stwjuq3lttlqj.htrxufrrjxuqzspny.htr@alerts.bounces.google.com>, size=2832, class=0, nrcpts=1, msgid=<0016368e1c0d1c526c0466a57d60@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.188]
|
|
Apr 3 05:14:22 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42490
|
|
Apr 3 05:14:22 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:14:22 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:14:22 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:14:22 splunk3 spamd[12010]: spamd: processing message <0016368e1c0d1c526c0466a57d60@google.com> for spamme:501
|
|
Apr 3 05:14:25 splunk3 spamd[12010]: spamd: clean message (-2.4/5.0) for spamme:501 in 3.5 seconds, 3262 bytes.
|
|
Apr 3 05:14:25 splunk3 spamd[12010]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=3.5,size=3262,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42490,mid=<0016368e1c0d1c526c0466a57d60@google.com>,bayes=0,autolearn=ham
|
|
Apr 3 05:14:25 splunk3 sendmail[1344]: n33CELkK001327: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=33043, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:14:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:15:05 splunk3 sendmail[1507]: n33CF5vl001507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:15:13 splunk3 sendmail[1546]: n33CFDqJ001546: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031215.n33CFDrw003421@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:15:13 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42498
|
|
Apr 3 05:15:13 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:15:13 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:15:13 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:15:13 splunk3 spamd[12010]: spamd: processing message <200904031215.n33CFDrw003421@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:15:15 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1305 bytes.
|
|
Apr 3 05:15:15 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42498,mid=<200904031215.n33CFDrw003421@virt2.int.splunk.com>,bayes=0.168588604160851,autolearn=no
|
|
Apr 3 05:15:15 splunk3 sendmail[1547]: n33CFDqJ001546: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:15:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:15:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:15:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:16:05 splunk3 sendmail[1763]: n33CG5aH001763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:17:05 splunk3 sendmail[2004]: n33CH5Eq002004: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:18:05 splunk3 sendmail[2240]: n33CI5Nr002240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:19:05 splunk3 sendmail[2480]: n33CJ5Gm002480: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:20:05 splunk3 sendmail[2731]: n33CK5TR002731: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:20:15 splunk3 sendmail[2776]: n33CKFVN002776: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031220.n33CKDlQ004058@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:20:15 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42553
|
|
Apr 3 05:20:15 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:20:15 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:20:15 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:20:15 splunk3 spamd[12010]: spamd: processing message <200904031220.n33CKDlQ004058@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:20:17 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 05:20:17 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42553,mid=<200904031220.n33CKDlQ004058@virt2.int.splunk.com>,bayes=0.168588604160851,autolearn=no
|
|
Apr 3 05:20:17 splunk3 sendmail[2777]: n33CKFVN002776: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:20:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:20:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:20:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:21:05 splunk3 sendmail[3006]: n33CL5Hu003006: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:22:05 splunk3 sendmail[3247]: n33CM5iG003247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:23:05 splunk3 sendmail[3488]: n33CN5Wv003488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:24:05 splunk3 sendmail[3750]: n33CO5Ov003750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:25:05 splunk3 sendmail[4010]: n33CP59k004010: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:25:15 splunk3 sendmail[4058]: n33CPFTK004058: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031225.n33CPFuk004664@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:25:15 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42609
|
|
Apr 3 05:25:15 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:25:15 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:25:15 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:25:15 splunk3 spamd[12010]: spamd: processing message <200904031225.n33CPFuk004664@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:25:17 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1305 bytes.
|
|
Apr 3 05:25:17 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42609,mid=<200904031225.n33CPFuk004664@virt2.int.splunk.com>,bayes=0.168588604160851,autolearn=no
|
|
Apr 3 05:25:17 splunk3 sendmail[4059]: n33CPFTK004058: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:25:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:25:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:25:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:26:05 splunk3 sendmail[4282]: n33CQ53p004282: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 05:27:05 splunk3 sendmail[4533]: n33CR57X004533: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:28:05 splunk3 sendmail[4771]: n33CS5IU004771: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:29:05 splunk3 sendmail[5023]: n33CT5iU005023: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:30:05 splunk3 sendmail[5296]: n33CU5QG005296: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:30:16 splunk3 sendmail[5340]: n33CUG8v005340: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031230.n33CUFMa005289@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:30:16 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42665
|
|
Apr 3 05:30:16 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:30:16 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:30:16 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:30:16 splunk3 spamd[12010]: spamd: processing message <200904031230.n33CUFMa005289@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:30:18 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 3 05:30:18 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42665,mid=<200904031230.n33CUFMa005289@virt2.int.splunk.com>,bayes=0.168588604160851,autolearn=no
|
|
Apr 3 05:30:18 splunk3 sendmail[5341]: n33CUG8v005340: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:30:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:30:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:30:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:31:05 splunk3 sendmail[5562]: n33CV5Zp005562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:32:05 splunk3 sendmail[5799]: n33CW5Nw005799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:33:05 splunk3 sendmail[6037]: n33CX5UH006037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:34:05 splunk3 sendmail[6274]: n33CY5B6006274: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:35:05 splunk3 sendmail[6514]: n33CZ5Rj006514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:35:17 splunk3 sendmail[6570]: n33CZHSr006570: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031235.n33CZGGk006036@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:35:17 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42721
|
|
Apr 3 05:35:17 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:35:17 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:35:17 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:35:17 splunk3 spamd[12010]: spamd: processing message <200904031235.n33CZGGk006036@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:35:19 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 3 05:35:19 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42721,mid=<200904031235.n33CZGGk006036@virt2.int.splunk.com>,bayes=0.168588604160851,autolearn=no
|
|
Apr 3 05:35:19 splunk3 sendmail[6571]: n33CZHSr006570: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:35:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:35:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:35:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:36:05 splunk3 sendmail[6772]: n33Ca5oX006772: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:37:05 splunk3 sendmail[7007]: n33Cb5wJ007007: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:38:05 splunk3 sendmail[7247]: n33Cc5wn007247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:39:05 splunk3 sendmail[7487]: n33Cd5Ld007487: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:40:05 splunk3 sendmail[7734]: n33Ce5id007734: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:40:17 splunk3 sendmail[7796]: n33CeHgS007796: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031240.n33CeHGo006666@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:40:17 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42776
|
|
Apr 3 05:40:17 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:40:17 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:40:17 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:40:17 splunk3 spamd[12010]: spamd: processing message <200904031240.n33CeHGo006666@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:40:19 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 05:40:19 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42776,mid=<200904031240.n33CeHGo006666@virt2.int.splunk.com>,bayes=0.168588604160851,autolearn=no
|
|
Apr 3 05:40:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:40:19 splunk3 sendmail[7797]: n33CeHgS007796: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:40:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:40:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:41:05 splunk3 sendmail[7998]: n33Cf5Dw007998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 05:42:05 splunk3 sendmail[8233]: n33Cg56n008233: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:43:05 splunk3 sendmail[8470]: n33Ch5hD008470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:44:05 splunk3 sendmail[8703]: n33Ci5Ni008703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:45:05 splunk3 sendmail[8943]: n33Cj5Nb008943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:45:18 splunk3 sendmail[9004]: n33CjIwW009004: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031245.n33CjHkL007278@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:45:18 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42833
|
|
Apr 3 05:45:18 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:45:18 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:45:18 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:45:18 splunk3 spamd[12010]: spamd: processing message <200904031245.n33CjHkL007278@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:45:20 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 05:45:20 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42833,mid=<200904031245.n33CjHkL007278@virt2.int.splunk.com>,bayes=0.168588604160851,autolearn=no
|
|
Apr 3 05:45:20 splunk3 sendmail[9005]: n33CjIwW009004: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:45:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:45:39 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:45:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:46:05 splunk3 sendmail[9201]: n33Ck5ex009201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:47:05 splunk3 sendmail[9441]: n33Cl5RP009441: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:48:05 splunk3 sendmail[9688]: n33Cm5gn009688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:49:05 splunk3 sendmail[9928]: n33Cn5Du009928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:50:05 splunk3 sendmail[10170]: n33Co5qM010170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:50:19 splunk3 sendmail[10226]: n33CoJcR010226: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031250.n33CoITj007890@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:50:19 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42889
|
|
Apr 3 05:50:19 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:50:19 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:50:19 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:50:19 splunk3 spamd[12010]: spamd: processing message <200904031250.n33CoITj007890@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:50:21 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 05:50:21 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42889,mid=<200904031250.n33CoITj007890@virt2.int.splunk.com>,bayes=0.168588604160851,autolearn=no
|
|
Apr 3 05:50:21 splunk3 sendmail[10227]: n33CoJcR010226: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:50:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:50:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:50:53 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:51:05 splunk3 sendmail[10430]: n33Cp5T9010430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:52:05 splunk3 sendmail[10663]: n33Cq5uD010663: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:53:05 splunk3 sendmail[10906]: n33Cr5k0010906: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:54:05 splunk3 sendmail[11142]: n33Cs5ld011142: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:55:05 splunk3 sendmail[11382]: n33Ct5ei011382: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:55:19 splunk3 sendmail[11442]: n33CtJw9011442: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031255.n33CtJdm008499@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 05:55:19 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42944
|
|
Apr 3 05:55:19 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:55:19 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:55:19 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:55:19 splunk3 spamd[12010]: spamd: processing message <200904031255.n33CtJdm008499@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 05:55:21 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 3 05:55:21 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42944,mid=<200904031255.n33CtJdm008499@virt2.int.splunk.com>,bayes=0.168588604160851,autolearn=no
|
|
Apr 3 05:55:21 splunk3 sendmail[11443]: n33CtJw9011442: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:55:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:55:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 05:55:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 05:56:05 splunk3 sendmail[11641]: n33Cu5ua011641: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:56:27 splunk3 sendmail[11739]: n33CuR2R011739: from=<3ewfWSRQKBqIIQQINGCNGTVU-PQTGRNaIQQING.EQOURCOOGURNWPMKV.EQO@alerts.bounces.google.com>, size=2717, class=0, nrcpts=1, msgid=<0016361e88c6a670f20466a61352@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.162]
|
|
Apr 3 05:56:27 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42965
|
|
Apr 3 05:56:27 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 05:56:27 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 05:56:27 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 05:56:27 splunk3 spamd[12010]: spamd: processing message <0016361e88c6a670f20466a61352@google.com> for spamme:501
|
|
Apr 3 05:56:29 splunk3 spamd[12010]: spamd: clean message (-2.2/5.0) for spamme:501 in 1.4 seconds, 3146 bytes.
|
|
Apr 3 05:56:29 splunk3 spamd[12010]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.4,size=3146,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42965,mid=<0016361e88c6a670f20466a61352@google.com>,bayes=0,autolearn=ham
|
|
Apr 3 05:56:29 splunk3 sendmail[11740]: n33CuR2R011739: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32927, dsn=2.0.0, stat=Sent
|
|
Apr 3 05:56:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 05:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 05:57:05 splunk3 sendmail[11885]: n33Cv5M7011885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:58:05 splunk3 sendmail[12119]: n33Cw5Cj012119: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 05:59:05 splunk3 sendmail[12357]: n33Cx5xQ012357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:00:04 splunk3 sendmail[12659]: n33D041P012659: from=root, size=291, class=0, nrcpts=1, msgid=<200904031300.n33D041P012659@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 06:00:04 splunk3 sendmail[12663]: n33D04Zi012663: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031300.n33D041P012659@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 06:00:04 splunk3 sendmail[12659]: n33D041P012659: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33D04Zi012663 Message accepted for delivery)
|
|
Apr 3 06:00:05 splunk3 sendmail[12664]: n33D04Zi012663: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:00:05 splunk3 sendmail[12668]: n33D05fd012668: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:00:20 splunk3 sendmail[12730]: n33D0Jnx012730: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031300.n33D0JFu009134@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:00:20 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43003
|
|
Apr 3 06:00:20 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:00:20 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 06:00:20 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 06:00:20 splunk3 sendmail[12731]: n33D0Jnx012730: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:00:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:00:22 splunk3 sendmail[12763]: n33D0MY3012763: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904031300.n33D0MY3012763@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 06:00:22 splunk3 sendmail[12765]: n33D0MY3012763: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 06:00:22 splunk3 sendmail[12765]: n33D0MY3012763: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 06:00:22 splunk3 sendmail[12765]: n33D0MY3012763: n33D0MY3012765: postmaster notify: User unknown
|
|
Apr 3 06:00:24 splunk3 sendmail[12765]: n33D0MY3012765: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:00:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:00:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:01:05 splunk3 sendmail[12953]: n33D15QK012953: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:01:11 splunk3 sendmail[12934]: n33D116A012934: from=root, size=443, class=0, nrcpts=1, msgid=<200904031301.n33D116A012934@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 06:01:11 splunk3 sendmail[12992]: n33D1BvV012992: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031301.n33D116A012934@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 06:01:11 splunk3 sendmail[12934]: n33D116A012934: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33D1BvV012992 Message accepted for delivery)
|
|
Apr 3 06:01:13 splunk3 sendmail[12993]: n33D1BvV012992: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:02:05 splunk3 sendmail[13195]: n33D254Z013195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:03:05 splunk3 sendmail[13474]: n33D35se013474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:04:05 splunk3 sendmail[13710]: n33D45BT013710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:05:05 splunk3 sendmail[13948]: n33D55BO013948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:05:20 splunk3 sendmail[14007]: n33D5Kbr014007: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031305.n33D5KZx009816@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:05:20 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43066
|
|
Apr 3 06:05:20 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:05:20 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 06:05:20 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 06:05:20 splunk3 sendmail[14008]: n33D5Kbr014007: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:05:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:05:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:05:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:06:05 splunk3 sendmail[14203]: n33D65L5014203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:07:05 splunk3 sendmail[14442]: n33D75Kr014442: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:08:05 splunk3 sendmail[14683]: n33D85MI014683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:09:05 splunk3 sendmail[14923]: n33D9524014923: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:10:02 splunk3 sendmail[15259]: n33DA2SF015259: from=root, size=292, class=0, nrcpts=1, msgid=<200904031310.n33DA2SF015259@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 06:10:03 splunk3 sendmail[15264]: n33DA3mI015264: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031310.n33DA2SF015259@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 06:10:03 splunk3 sendmail[15259]: n33DA2SF015259: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33DA3mI015264 Message accepted for delivery)
|
|
Apr 3 06:10:04 splunk3 sendmail[15265]: n33DA3mI015264: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:10:05 splunk3 sendmail[15270]: n33DA5ox015270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:10:21 splunk3 sendmail[15330]: n33DAL1r015330: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031310.n33DAK90010435@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:10:21 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43123
|
|
Apr 3 06:10:21 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:10:21 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:10:21 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:10:21 splunk3 spamd[12010]: spamd: processing message <200904031310.n33DAK90010435@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:10:23 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 06:10:23 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43123,mid=<200904031310.n33DAK90010435@virt2.int.splunk.com>,bayes=0.111774861695749,autolearn=no
|
|
Apr 3 06:10:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:10:23 splunk3 sendmail[15331]: n33DAL1r015330: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:10:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:10:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:11:05 splunk3 sendmail[15533]: n33DB5ee015533: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 06:12:05 splunk3 sendmail[15765]: n33DC5TQ015765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:13:05 splunk3 sendmail[16002]: n33DD5V2016002: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:14:05 splunk3 sendmail[16238]: n33DE5Mk016238: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:14:24 splunk3 sendmail[16316]: n33DEMFQ016316: from=<spammee@hotmail.com>, size=6399, class=0, nrcpts=1, msgid=<20090403151355.3064.qmail@duyitechlc>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=[123.18.123.253]
|
|
Apr 3 06:14:24 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43172
|
|
Apr 3 06:14:24 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:14:24 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:14:24 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:14:24 splunk3 spamd[12010]: spamd: processing message <20090403151355.3064.qmail@duyitechlc> for spamme:501
|
|
Apr 3 06:14:28 splunk3 spamd[12010]: spamd: identified spam (27.1/5.0) for spamme:501 in 4.2 seconds, 6638 bytes.
|
|
Apr 3 06:14:28 splunk3 spamd[12010]: spamd: result: Y 27 - AWL,BAYES_99,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST,DRUGS_ERECTILE,DRUG_ED_CAPS,HTML_90_100,HTML_FONT_FACE_BAD,HTML_MESSAGE,MIME_HTML_ONLY,NO_REAL_NAME,RCVD_IN_SORBS_WEB,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=4.2,size=6638,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43172,mid=<20090403151355.3064.qmail@duyitechlc>,bayes=1,autolearn=spam
|
|
Apr 3 06:14:28 splunk3 sendmail[16320]: n33DEMFQ016316: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:04, mailer=local, pri=36614, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:14:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:15:05 splunk3 sendmail[16483]: n33DF54X016483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:15:21 splunk3 sendmail[16561]: n33DFLnM016561: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031315.n33DFLV0011230@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:15:21 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43180
|
|
Apr 3 06:15:21 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:15:21 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:15:21 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:15:21 splunk3 spamd[12010]: spamd: processing message <200904031315.n33DFLV0011230@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:15:23 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 06:15:23 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43180,mid=<200904031315.n33DFLV0011230@virt2.int.splunk.com>,bayes=0.111767432471118,autolearn=no
|
|
Apr 3 06:15:23 splunk3 sendmail[16562]: n33DFLnM016561: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:15:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:15:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:15:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:16:05 splunk3 sendmail[16742]: n33DG5xR016742: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:17:05 splunk3 sendmail[16981]: n33DH5l2016981: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:18:05 splunk3 sendmail[17079]: n33DHRbf017079: from=<soniar@tdnam.com>, size=5731, class=0, nrcpts=1, msgid=<ba54019dc230$53b4f9ae$ab76020d@tdnam.com>, proto=ESMTP, daemon=MTA, relay=[123.18.25.154]
|
|
Apr 3 06:18:05 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43215
|
|
Apr 3 06:18:05 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:18:05 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:18:05 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:18:05 splunk3 spamd[12010]: spamd: processing message <ba54019dc230$53b4f9ae$ab76020d@tdnam.com> for spamme:501
|
|
Apr 3 06:18:05 splunk3 sendmail[17221]: n33DI5LZ017221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:18:08 splunk3 spamd[12010]: spamd: identified spam (29.6/5.0) for spamme:501 in 2.8 seconds, 5993 bytes.
|
|
Apr 3 06:18:08 splunk3 spamd[12010]: spamd: result: Y 29 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_BOGUSMX,DNS_FROM_RFC_POST,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL scantime=2.8,size=5993,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43215,mid=<ba54019dc230$53b4f9ae$ab76020d@tdnam.com>,bayes=1,autolearn=spam
|
|
Apr 3 06:18:08 splunk3 sendmail[17216]: n33DHRbf017079: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:03, mailer=local, pri=35908, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:18:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:19:05 splunk3 sendmail[17457]: n33DJ5xl017457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:20:05 splunk3 sendmail[17699]: n33DK5b7017699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:20:22 splunk3 sendmail[17777]: n33DKMhB017777: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031320.n33DKLRv011869@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:20:22 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43237
|
|
Apr 3 06:20:22 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:20:22 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:20:22 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:20:22 splunk3 spamd[12010]: spamd: processing message <200904031320.n33DKLRv011869@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:20:24 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 06:20:24 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43237,mid=<200904031320.n33DKLRv011869@virt2.int.splunk.com>,bayes=0.111762978936666,autolearn=no
|
|
Apr 3 06:20:24 splunk3 sendmail[17779]: n33DKMhB017777: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:20:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:20:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:20:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:21:03 splunk3 sendmail[17961]: n33DL3fQ017961: from=<3Pg3WSRQKBmsPXXPUNJUNacb-WXaNYUhPXXPUN.LXVbYJVVNbYUdWTRc.LXV@alerts.bounces.google.com>, size=2723, class=0, nrcpts=1, msgid=<001485f54734997c710466a66bab@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.190]
|
|
Apr 3 06:21:03 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43252
|
|
Apr 3 06:21:03 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:21:03 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:21:03 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:21:03 splunk3 spamd[12010]: spamd: processing message <001485f54734997c710466a66bab@google.com> for spamme:501
|
|
Apr 3 06:21:05 splunk3 spamd[12010]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.2 seconds, 3153 bytes.
|
|
Apr 3 06:21:05 splunk3 spamd[12010]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.2,size=3153,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43252,mid=<001485f54734997c710466a66bab@google.com>,bayes=0,autolearn=ham
|
|
Apr 3 06:21:05 splunk3 sendmail[17962]: n33DL3fQ017961: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32934, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:21:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:21:05 splunk3 sendmail[17968]: n33DL5Cx017968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:22:05 splunk3 sendmail[18203]: n33DM537018203: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:23:05 splunk3 sendmail[18448]: n33DN5rc018448: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:24:05 splunk3 sendmail[18684]: n33DO5AU018684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:25:05 splunk3 sendmail[18922]: n33DP5rY018922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:25:22 splunk3 sendmail[18997]: n33DPMmJ018997: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031325.n33DPMUS012468@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:25:22 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43293
|
|
Apr 3 06:25:22 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:25:22 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:25:22 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:25:22 splunk3 spamd[12010]: spamd: processing message <200904031325.n33DPMUS012468@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:25:24 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1308 bytes.
|
|
Apr 3 06:25:24 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43293,mid=<200904031325.n33DPMUS012468@virt2.int.splunk.com>,bayes=0.111795031016751,autolearn=no
|
|
Apr 3 06:25:24 splunk3 sendmail[18999]: n33DPMmJ018997: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:25:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:25:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:25:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:26:05 splunk3 sendmail[19180]: n33DQ57p019180: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 06:27:05 splunk3 sendmail[19418]: n33DR54w019418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:28:05 splunk3 sendmail[19651]: n33DS5C4019651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:29:05 splunk3 sendmail[19892]: n33DT5Sv019892: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:30:05 splunk3 sendmail[20133]: n33DU5Pp020133: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:30:23 splunk3 sendmail[20211]: n33DUNYM020211: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031330.n33DUM3s013090@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:30:23 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43349
|
|
Apr 3 06:30:23 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:30:23 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:30:23 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:30:23 splunk3 spamd[12010]: spamd: processing message <200904031330.n33DUM3s013090@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:30:25 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 06:30:25 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43349,mid=<200904031330.n33DUM3s013090@virt2.int.splunk.com>,bayes=0.111795031016751,autolearn=no
|
|
Apr 3 06:30:25 splunk3 sendmail[20212]: n33DUNYM020211: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:30:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:30:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:30:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:31:05 splunk3 sendmail[20394]: n33DV5V1020394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:32:05 splunk3 sendmail[20630]: n33DW501020630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:33:05 splunk3 sendmail[20867]: n33DX5PL020867: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:34:05 splunk3 sendmail[21101]: n33DY5Ws021101: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:35:05 splunk3 sendmail[21341]: n33DZ5QX021341: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:35:23 splunk3 sendmail[21419]: n33DZNed021419: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031335.n33DZNif013830@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:35:23 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43405
|
|
Apr 3 06:35:23 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:35:23 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:35:23 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:35:23 splunk3 spamd[12010]: spamd: processing message <200904031335.n33DZNif013830@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:35:25 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Apr 3 06:35:25 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43405,mid=<200904031335.n33DZNif013830@virt2.int.splunk.com>,bayes=0.111795031016751,autolearn=no
|
|
Apr 3 06:35:25 splunk3 sendmail[21420]: n33DZNed021419: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:35:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:35:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:35:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:36:05 splunk3 sendmail[21599]: n33Da53u021599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:37:05 splunk3 sendmail[21839]: n33Db5nJ021839: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:38:05 splunk3 sendmail[22080]: n33Dc5fw022080: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:39:05 splunk3 sendmail[22321]: n33Dd58U022321: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:40:05 splunk3 sendmail[22560]: n33De5OX022560: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:40:24 splunk3 sendmail[22637]: n33DeOfP022637: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031340.n33DeO5Q014470@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:40:24 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43460
|
|
Apr 3 06:40:24 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:40:24 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:40:24 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:40:24 splunk3 spamd[12010]: spamd: processing message <200904031340.n33DeO5Q014470@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:40:26 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 3 06:40:26 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43460,mid=<200904031340.n33DeO5Q014470@virt2.int.splunk.com>,bayes=0.111795031016751,autolearn=no
|
|
Apr 3 06:40:26 splunk3 sendmail[22638]: n33DeOfP022637: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:40:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:40:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:40:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:41:05 splunk3 sendmail[22821]: n33Df5fO022821: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 06:42:05 splunk3 sendmail[23057]: n33Dg52F023057: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:43:05 splunk3 sendmail[23296]: n33Dh5mq023296: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:44:05 splunk3 sendmail[23536]: n33Di5fB023536: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:45:05 splunk3 sendmail[23805]: n33Dj5PE023805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:45:25 splunk3 sendmail[23864]: n33DjPW4023864: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031345.n33DjO0e015076@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:45:25 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43525
|
|
Apr 3 06:45:25 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:45:25 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:45:25 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:45:25 splunk3 spamd[12010]: spamd: processing message <200904031345.n33DjO0e015076@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:45:27 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 06:45:27 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43525,mid=<200904031345.n33DjO0e015076@virt2.int.splunk.com>,bayes=0.111795031016751,autolearn=no
|
|
Apr 3 06:45:27 splunk3 sendmail[23866]: n33DjPW4023864: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:45:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:45:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:45:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:46:05 splunk3 sendmail[24054]: n33Dk58U024054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:47:05 splunk3 sendmail[24292]: n33Dl5cD024292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:48:05 splunk3 sendmail[24524]: n33Dm5L3024524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:49:05 splunk3 sendmail[24765]: n33Dn528024765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:50:05 splunk3 sendmail[25016]: n33Do5mh025016: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:50:25 splunk3 sendmail[25091]: n33DoPEb025091: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031350.n33DoPGo015693@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:50:26 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43580
|
|
Apr 3 06:50:26 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:50:26 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:50:26 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:50:26 splunk3 spamd[12010]: spamd: processing message <200904031350.n33DoPGo015693@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:50:28 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 3 06:50:28 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43580,mid=<200904031350.n33DoPGo015693@virt2.int.splunk.com>,bayes=0.111795031016751,autolearn=no
|
|
Apr 3 06:50:28 splunk3 sendmail[25092]: n33DoPEb025091: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:50:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:50:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:50:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:51:05 splunk3 sendmail[25269]: n33Dp5oR025269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:52:05 splunk3 sendmail[25505]: n33Dq5uZ025505: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:53:05 splunk3 sendmail[25747]: n33Dr55R025747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:54:05 splunk3 sendmail[25983]: n33Ds5mO025983: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:55:05 splunk3 sendmail[26229]: n33Dt5BO026229: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:55:26 splunk3 sendmail[26306]: n33DtQHA026306: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031355.n33DtQUY016294@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 06:55:26 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43636
|
|
Apr 3 06:55:26 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 06:55:26 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 06:55:26 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 06:55:26 splunk3 spamd[12010]: spamd: processing message <200904031355.n33DtQUY016294@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 06:55:28 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 06:55:28 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43636,mid=<200904031355.n33DtQUY016294@virt2.int.splunk.com>,bayes=0.111795031016751,autolearn=no
|
|
Apr 3 06:55:28 splunk3 sendmail[26307]: n33DtQHA026306: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 06:55:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 06:55:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 06:55:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 06:56:06 splunk3 sendmail[26480]: n33Du58c026480: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 06:57:06 splunk3 sendmail[26721]: n33Dv6gP026721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:58:06 splunk3 sendmail[26956]: n33Dw6HB026956: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 06:59:06 splunk3 sendmail[27196]: n33Dx6Y0027196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:00:01 splunk3 sendmail[27416]: n33E011C027416: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904031400.n33E011C027416@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 07:00:01 splunk3 sendmail[27428]: n33E011C027416: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 07:00:01 splunk3 sendmail[27428]: n33E011C027416: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 07:00:01 splunk3 sendmail[27428]: n33E011C027416: n33E011C027428: postmaster notify: User unknown
|
|
Apr 3 07:00:03 splunk3 sendmail[27428]: n33E011C027428: to=root, delay=00:00:02, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:00:05 splunk3 sendmail[27502]: n33E05om027502: from=root, size=291, class=0, nrcpts=1, msgid=<200904031400.n33E05om027502@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 07:00:05 splunk3 sendmail[27506]: n33E05Ta027506: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031400.n33E05om027502@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 07:00:05 splunk3 sendmail[27502]: n33E05om027502: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33E05Ta027506 Message accepted for delivery)
|
|
Apr 3 07:00:06 splunk3 sendmail[27531]: n33E060V027531: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:00:06 splunk3 sendmail[27507]: n33E05Ta027506: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:00:27 splunk3 sendmail[27610]: n33E0R58027610: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031400.n33E0Q7c016942@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:00:27 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43700
|
|
Apr 3 07:00:27 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:00:27 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 07:00:27 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 07:00:27 splunk3 sendmail[27611]: n33E0R58027610: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:00:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:00:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:00:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:01:06 splunk3 sendmail[27791]: n33E164m027791: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:01:10 splunk3 sendmail[27762]: n33E118S027762: from=root, size=443, class=0, nrcpts=1, msgid=<200904031401.n33E118S027762@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 07:01:10 splunk3 sendmail[27795]: n33E1AgT027795: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031401.n33E118S027762@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 07:01:10 splunk3 sendmail[27762]: n33E118S027762: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33E1AgT027795 Message accepted for delivery)
|
|
Apr 3 07:01:11 splunk3 sendmail[27797]: n33E1AgT027795: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:02:06 splunk3 sendmail[28029]: n33E26xU028029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:03:06 splunk3 sendmail[28267]: n33E36TL028267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:04:06 splunk3 sendmail[28503]: n33E46Nt028503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:05:06 splunk3 sendmail[28751]: n33E56es028751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:05:28 splunk3 sendmail[28828]: n33E5RHS028828: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031405.n33E5RPf017652@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:05:28 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43757
|
|
Apr 3 07:05:28 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:05:28 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 07:05:28 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 07:05:28 splunk3 sendmail[28829]: n33E5RHS028828: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:05:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:05:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:05:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:06:06 splunk3 sendmail[29000]: n33E66Cl029000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:07:06 splunk3 sendmail[29235]: n33E767w029235: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:08:06 splunk3 sendmail[29473]: n33E86gh029473: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:09:06 splunk3 sendmail[29711]: n33E96Uh029711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:10:02 splunk3 sendmail[30023]: n33EA2kb030023: from=root, size=292, class=0, nrcpts=1, msgid=<200904031410.n33EA2kb030023@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 07:10:02 splunk3 sendmail[30028]: n33EA2GS030028: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031410.n33EA2kb030023@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 07:10:02 splunk3 sendmail[30023]: n33EA2kb030023: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33EA2GS030028 Message accepted for delivery)
|
|
Apr 3 07:10:03 splunk3 sendmail[30029]: n33EA2GS030028: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:10:06 splunk3 sendmail[30066]: n33EA6Ku030066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:10:28 splunk3 sendmail[30143]: n33EASbc030143: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031410.n33EAS9o018240@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:10:28 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43813
|
|
Apr 3 07:10:28 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:10:28 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:10:28 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:10:28 splunk3 spamd[12010]: spamd: processing message <200904031410.n33EAS9o018240@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:10:32 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.2 seconds, 1308 bytes.
|
|
Apr 3 07:10:32 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43813,mid=<200904031410.n33EAS9o018240@virt2.int.splunk.com>,bayes=0.111795031016751,autolearn=no
|
|
Apr 3 07:10:32 splunk3 sendmail[30144]: n33EASbc030143: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:10:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:10:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:10:52 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:11:06 splunk3 sendmail[30321]: n33EB6Ia030321: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 07:12:06 splunk3 sendmail[30556]: n33EC6tW030556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:13:06 splunk3 sendmail[30796]: n33ED6c7030796: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:14:06 splunk3 sendmail[31031]: n33EE6su031031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:15:06 splunk3 sendmail[31280]: n33EF6bx031280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:15:28 splunk3 sendmail[31357]: n33EFShY031357: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031415.n33EFS2Z019061@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:15:28 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43870
|
|
Apr 3 07:15:28 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:15:28 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:15:28 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:15:28 splunk3 spamd[12010]: spamd: processing message <200904031415.n33EFS2Z019061@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:15:30 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 3 07:15:30 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43870,mid=<200904031415.n33EFS2Z019061@virt2.int.splunk.com>,bayes=0.111795031016751,autolearn=no
|
|
Apr 3 07:15:30 splunk3 sendmail[31358]: n33EFShY031357: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:15:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:15:38 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:15:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:16:06 splunk3 sendmail[31526]: n33EG6hK031526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:17:06 splunk3 sendmail[31766]: n33EH6nN031766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:18:06 splunk3 sendmail[32001]: n33EI60i032001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:19:03 splunk3 sendmail[32198]: n33EJ0pw032198: from=<spamme@splunkit.com>, size=2726, class=0, nrcpts=1, msgid=<200904031419.n33EJ0pw032198@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=143.243.80-79.rev.gaoland.net [79.80.243.143]
|
|
Apr 3 07:19:03 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43905
|
|
Apr 3 07:19:03 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:19:03 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:19:03 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:19:03 splunk3 spamd[12010]: spamd: processing message <200904031419.n33EJ0pw032198@splunk3.splunkit.com> for spamme:501
|
|
Apr 3 07:19:05 splunk3 spamd[12010]: spamd: identified spam (33.5/5.0) for spamme:501 in 2.7 seconds, 3136 bytes.
|
|
Apr 3 07:19:05 splunk3 spamd[12010]: spamd: result: Y 33 - BAYES_99,HELO_DYNAMIC_IPADDR2,HELO_DYNAMIC_SPLIT_IP,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=2.7,size=3136,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43905,mid=<200904031419.n33EJ0pw032198@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 3 07:19:05 splunk3 sendmail[32218]: n33EJ0pw032198: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33058, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:19:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:19:06 splunk3 sendmail[32246]: n33EJ6Vm032246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:20:06 splunk3 sendmail[32497]: n33EK63l032497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:20:29 splunk3 sendmail[32573]: n33EKTBo032573: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031420.n33EKSgR019669@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:20:29 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43927
|
|
Apr 3 07:20:29 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:20:29 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:20:29 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:20:29 splunk3 spamd[12010]: spamd: processing message <200904031420.n33EKSgR019669@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:20:31 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 07:20:31 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43927,mid=<200904031420.n33EKSgR019669@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 07:20:31 splunk3 sendmail[32574]: n33EKTBo032573: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:20:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:20:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:20:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:21:06 splunk3 sendmail[32748]: n33EL6X0032748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:22:06 splunk3 sendmail[513]: n33EM6XO000513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:23:06 splunk3 sendmail[755]: n33EN6CM000755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:24:06 splunk3 sendmail[991]: n33EO6O1000991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:25:06 splunk3 sendmail[1239]: n33EP6cC001239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:25:29 splunk3 sendmail[1318]: n33EPTeh001318: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031425.n33EPTab020298@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:25:29 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43982
|
|
Apr 3 07:25:29 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:25:29 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:25:29 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:25:29 splunk3 spamd[12010]: spamd: processing message <200904031425.n33EPTab020298@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:25:31 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 3 07:25:31 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43982,mid=<200904031425.n33EPTab020298@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 07:25:31 splunk3 sendmail[1319]: n33EPTeh001318: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:25:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:25:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:25:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:26:06 splunk3 sendmail[1490]: n33EQ69N001490: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 07:27:06 splunk3 sendmail[1733]: n33ER6rP001733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:28:06 splunk3 sendmail[1967]: n33ES64c001967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:29:06 splunk3 sendmail[2208]: n33ET6aA002208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:30:06 splunk3 sendmail[2457]: n33EU6As002457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:30:30 splunk3 sendmail[2538]: n33EUUHQ002538: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031430.n33EUUkr020899@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:30:30 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44039
|
|
Apr 3 07:30:30 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:30:30 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:30:30 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:30:30 splunk3 spamd[12010]: spamd: processing message <200904031430.n33EUUkr020899@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:30:32 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 07:30:32 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44039,mid=<200904031430.n33EUUkr020899@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 07:30:32 splunk3 sendmail[2539]: n33EUUHQ002538: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:30:33 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:30:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:30:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:31:06 splunk3 sendmail[2718]: n33EV6i8002718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:32:06 splunk3 sendmail[2965]: n33EW6dT002965: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:33:06 splunk3 sendmail[3213]: n33EX6Y1003213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:34:06 splunk3 sendmail[3447]: n33EY60a003447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:35:02 splunk3 sendmail[3681]: n33EZ2kH003681: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031435.n33EZ14e021576@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:35:02 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44083
|
|
Apr 3 07:35:02 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:35:02 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:35:02 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:35:02 splunk3 spamd[12010]: spamd: processing message <200904031435.n33EZ14e021576@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:35:04 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 07:35:04 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44083,mid=<200904031435.n33EZ14e021576@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 07:35:04 splunk3 sendmail[3682]: n33EZ2kH003681: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:35:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:35:06 splunk3 sendmail[3728]: n33EZ6Be003728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:35:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:35:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:36:06 splunk3 sendmail[3970]: n33Ea654003970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:37:06 splunk3 sendmail[4221]: n33Eb6fn004221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:38:06 splunk3 sendmail[4472]: n33Ec6nl004472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:39:06 splunk3 sendmail[4710]: n33Ed6jq004710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:40:03 splunk3 sendmail[4943]: n33Ee3Jm004943: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031440.n33Ee3XN022254@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:40:03 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44138
|
|
Apr 3 07:40:03 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:40:03 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:40:03 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:40:03 splunk3 spamd[12010]: spamd: processing message <200904031440.n33Ee3XN022254@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:40:05 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 3 07:40:05 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44138,mid=<200904031440.n33Ee3XN022254@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 07:40:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:40:05 splunk3 sendmail[4944]: n33Ee3Jm004943: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:40:06 splunk3 sendmail[4969]: n33Ee6JE004969: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:40:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:40:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:41:06 splunk3 sendmail[5263]: n33Ef6TC005263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 07:42:06 splunk3 sendmail[5501]: n33Eg69B005501: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:43:06 splunk3 sendmail[5740]: n33Eh6Jw005740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:44:06 splunk3 sendmail[5974]: n33Ei673005974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:45:04 splunk3 sendmail[6193]: n33Ej4Qq006193: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031445.n33Ej4mh022868@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:45:04 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44195
|
|
Apr 3 07:45:04 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:45:04 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:45:04 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:45:04 splunk3 spamd[12010]: spamd: processing message <200904031445.n33Ej4mh022868@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:45:06 splunk3 sendmail[6220]: n33Ej69c006220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:45:06 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 07:45:06 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44195,mid=<200904031445.n33Ej4mh022868@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 07:45:06 splunk3 sendmail[6194]: n33Ej4Qq006193: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:45:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:45:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:45:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:46:06 splunk3 sendmail[6472]: n33Ek64j006472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:47:06 splunk3 sendmail[6712]: n33El6xq006712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:48:06 splunk3 sendmail[6948]: n33Em6h2006948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:49:06 splunk3 sendmail[7185]: n33En62x007185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:50:05 splunk3 sendmail[7419]: n33Eo59j007419: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031450.n33Eo4wc023506@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:50:05 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44250
|
|
Apr 3 07:50:05 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:50:05 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:50:05 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:50:05 splunk3 spamd[12010]: spamd: processing message <200904031450.n33Eo4wc023506@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:50:06 splunk3 sendmail[7434]: n33Eo676007434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:50:07 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 07:50:07 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44250,mid=<200904031450.n33Eo4wc023506@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 07:50:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:50:07 splunk3 sendmail[7426]: n33Eo59j007419: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:50:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:50:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:51:06 splunk3 sendmail[7696]: n33Ep6hh007696: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:52:06 splunk3 sendmail[7931]: n33Eq651007931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:53:06 splunk3 sendmail[8173]: n33Er60V008173: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:54:06 splunk3 sendmail[8406]: n33Es6mL008406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:55:06 splunk3 sendmail[8647]: n33Et5fB008647: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031455.n33Et5Ko024114@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 07:55:06 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44306
|
|
Apr 3 07:55:06 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 07:55:06 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 07:55:06 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 07:55:06 splunk3 spamd[12010]: spamd: processing message <200904031455.n33Et5Ko024114@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 07:55:06 splunk3 sendmail[8653]: n33Et6vH008653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:55:08 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 07:55:08 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44306,mid=<200904031455.n33Et5Ko024114@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 07:55:08 splunk3 sendmail[8648]: n33Et5fB008647: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 07:55:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 07:55:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 07:55:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 07:56:06 splunk3 sendmail[8904]: n33Eu6pd008904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 07:57:06 splunk3 sendmail[9144]: n33Ev6BB009144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:58:06 splunk3 sendmail[9377]: n33Ew6Mc009377: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 07:59:06 splunk3 sendmail[9628]: n33Ex6BX009628: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:00:04 splunk3 sendmail[9910]: n33F04db009910: from=root, size=291, class=0, nrcpts=1, msgid=<200904031500.n33F04db009910@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 08:00:04 splunk3 sendmail[9914]: n33F04vd009914: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031500.n33F04db009910@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 08:00:04 splunk3 sendmail[9910]: n33F04db009910: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33F04vd009914 Message accepted for delivery)
|
|
Apr 3 08:00:05 splunk3 sendmail[9915]: n33F04vd009914: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:00:06 splunk3 sendmail[9940]: n33F068u009940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:00:06 splunk3 sendmail[9941]: n33F0695009941: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031500.n33F06VM024748@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:00:06 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44364
|
|
Apr 3 08:00:06 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:00:06 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 08:00:06 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 08:00:06 splunk3 sendmail[9942]: n33F0695009941: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:00:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:00:08 splunk3 sendmail[9959]: n33F082h009959: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904031500.n33F082h009959@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 08:00:08 splunk3 sendmail[9961]: n33F082h009959: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 08:00:08 splunk3 sendmail[9961]: n33F082h009959: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 3 08:00:08 splunk3 sendmail[9961]: n33F082h009959: n33F082h009961: postmaster notify: User unknown
|
|
Apr 3 08:00:10 splunk3 sendmail[9961]: n33F082h009961: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:00:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:00:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:01:02 splunk3 sendmail[10198]: n33F11wd010198: from=root, size=443, class=0, nrcpts=1, msgid=<200904031501.n33F11wd010198@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 08:01:02 splunk3 sendmail[10202]: n33F12oj010202: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031501.n33F11wd010198@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 08:01:02 splunk3 sendmail[10198]: n33F11wd010198: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33F12oj010202 Message accepted for delivery)
|
|
Apr 3 08:01:03 splunk3 sendmail[10203]: n33F12oj010202: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:01:06 splunk3 sendmail[10229]: n33F16wq010229: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:02:06 splunk3 sendmail[10466]: n33F26ma010466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:03:06 splunk3 sendmail[10703]: n33F36uQ010703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:04:06 splunk3 sendmail[10938]: n33F463w010938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:05:06 splunk3 sendmail[11177]: n33F563e011177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:05:07 splunk3 sendmail[11178]: n33F57pT011178: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031505.n33F56LE025434@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:05:07 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44427
|
|
Apr 3 08:05:07 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:05:07 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 08:05:07 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 08:05:07 splunk3 sendmail[11179]: n33F57pT011178: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:05:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:05:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:05:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:06:06 splunk3 sendmail[11433]: n33F66Nv011433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:07:06 splunk3 sendmail[11673]: n33F76uZ011673: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:08:06 splunk3 sendmail[11912]: n33F86IL011912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:09:06 splunk3 sendmail[12153]: n33F96XZ012153: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:10:02 splunk3 sendmail[12465]: n33FA240012465: from=root, size=292, class=0, nrcpts=1, msgid=<200904031510.n33FA240012465@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 08:10:02 splunk3 sendmail[12470]: n33FA2lD012470: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031510.n33FA240012465@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 08:10:03 splunk3 sendmail[12465]: n33FA240012465: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33FA2lD012470 Message accepted for delivery)
|
|
Apr 3 08:10:04 splunk3 sendmail[12471]: n33FA2lD012470: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:10:06 splunk3 sendmail[12496]: n33FA646012496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:10:07 splunk3 sendmail[12497]: n33FA72T012497: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031510.n33FA7ba026052@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:10:07 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44484
|
|
Apr 3 08:10:07 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:10:07 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:10:07 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:10:07 splunk3 spamd[12010]: spamd: processing message <200904031510.n33FA7ba026052@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:10:09 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 3 08:10:09 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44484,mid=<200904031510.n33FA7ba026052@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:10:09 splunk3 sendmail[12498]: n33FA72T012497: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:10:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:10:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:10:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:11:06 splunk3 sendmail[12758]: n33FB6oC012758: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 08:12:06 splunk3 sendmail[12991]: n33FC6Dp012991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:13:06 splunk3 sendmail[13230]: n33FD69Z013230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:14:06 splunk3 sendmail[13505]: n33FE6Jl013505: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:14:51 splunk3 sendmail[13681]: n33FEoIq013681: from=<36ifWSRQKBjIUccUZSOZSfhg-bcfSdZmUccUZS.QcagdOaaSgdZibYWh.Qca@alerts.bounces.google.com>, size=5856, class=0, nrcpts=1, msgid=<0016e643461292b3e10466a8022d@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.189]
|
|
Apr 3 08:14:51 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44538
|
|
Apr 3 08:14:51 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:14:51 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:14:51 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:14:51 splunk3 spamd[12010]: spamd: processing message <0016e643461292b3e10466a8022d@google.com> for spamme:501
|
|
Apr 3 08:14:53 splunk3 spamd[12010]: spamd: clean message (-1.5/5.0) for spamme:501 in 1.8 seconds, 6286 bytes.
|
|
Apr 3 08:14:53 splunk3 spamd[12010]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY,URIBL_SBL scantime=1.8,size=6286,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44538,mid=<0016e643461292b3e10466a8022d@google.com>,bayes=0,autolearn=no
|
|
Apr 3 08:14:53 splunk3 sendmail[13682]: n33FEoIq013681: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=36067, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:14:53 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:15:06 splunk3 sendmail[13751]: n33FF6tw013751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:15:08 splunk3 sendmail[13753]: n33FF889013753: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031515.n33FF8Y4026842@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:15:08 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44541
|
|
Apr 3 08:15:08 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:15:08 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:15:08 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:15:08 splunk3 spamd[12010]: spamd: processing message <200904031515.n33FF8Y4026842@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:15:10 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 3 08:15:10 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44541,mid=<200904031515.n33FF8Y4026842@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:15:10 splunk3 sendmail[13754]: n33FF889013753: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:15:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:15:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:15:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:16:06 splunk3 sendmail[14010]: n33FG6jt014010: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:17:06 splunk3 sendmail[14248]: n33FH6d8014248: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:18:06 splunk3 sendmail[14483]: n33FI6je014483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:19:06 splunk3 sendmail[14721]: n33FJ6v6014721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:20:06 splunk3 sendmail[14964]: n33FK61k014964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:20:08 splunk3 sendmail[14966]: n33FK8h5014966: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031520.n33FK8rR027478@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:20:08 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44597
|
|
Apr 3 08:20:08 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:20:08 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:20:08 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:20:08 splunk3 spamd[12010]: spamd: processing message <200904031520.n33FK8rR027478@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:20:10 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 3 08:20:10 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44597,mid=<200904031520.n33FK8rR027478@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:20:10 splunk3 sendmail[14967]: n33FK8h5014966: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:20:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:20:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:20:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:21:06 splunk3 sendmail[15226]: n33FL6sj015226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:22:06 splunk3 sendmail[15461]: n33FM6Ag015461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:23:06 splunk3 sendmail[15706]: n33FN6qA015706: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:24:06 splunk3 sendmail[15939]: n33FO6hL015939: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:25:06 splunk3 sendmail[16178]: n33FP6lK016178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:25:09 splunk3 sendmail[16180]: n33FP9at016180: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031525.n33FP8rD028088@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:25:09 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44652
|
|
Apr 3 08:25:09 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:25:09 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:25:09 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:25:09 splunk3 spamd[12010]: spamd: processing message <200904031525.n33FP8rD028088@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:25:11 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 08:25:11 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44652,mid=<200904031525.n33FP8rD028088@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:25:11 splunk3 sendmail[16181]: n33FP9at016180: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:25:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:25:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:25:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:26:06 splunk3 sendmail[16434]: n33FQ6Hn016434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 08:27:06 splunk3 sendmail[16674]: n33FR6Tc016674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:28:06 splunk3 sendmail[16909]: n33FS6er016909: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:29:06 splunk3 sendmail[17149]: n33FT67L017149: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:30:06 splunk3 sendmail[17392]: n33FU6L7017392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:30:10 splunk3 sendmail[17409]: n33FUAog017409: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031530.n33FU9Dq028705@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:30:10 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44709
|
|
Apr 3 08:30:10 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:30:10 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:30:10 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:30:10 splunk3 spamd[12010]: spamd: processing message <200904031530.n33FU9Dq028705@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:30:12 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 3 08:30:12 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44709,mid=<200904031530.n33FU9Dq028705@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:30:12 splunk3 sendmail[17410]: n33FUAog017409: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:30:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:30:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:30:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:31:06 splunk3 sendmail[17652]: n33FV6nn017652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:32:06 splunk3 sendmail[17888]: n33FW6dT017888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:33:06 splunk3 sendmail[18125]: n33FX6OH018125: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:34:06 splunk3 sendmail[18360]: n33FY6b2018360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:35:06 splunk3 sendmail[18601]: n33FZ6TR018601: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:35:10 splunk3 sendmail[18654]: n33FZACc018654: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031535.n33FZAtG029451@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:35:10 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44764
|
|
Apr 3 08:35:10 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:35:10 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:35:10 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:35:10 splunk3 spamd[12010]: spamd: processing message <200904031535.n33FZAtG029451@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:35:12 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 08:35:12 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44764,mid=<200904031535.n33FZAtG029451@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:35:12 splunk3 sendmail[18655]: n33FZACc018654: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:35:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:35:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:35:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:36:06 splunk3 sendmail[18894]: n33Fa6RE018894: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:37:06 splunk3 sendmail[19134]: n33Fb6hI019134: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:38:06 splunk3 sendmail[19372]: n33Fc685019372: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:39:06 splunk3 sendmail[19609]: n33Fd6Ws019609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:40:06 splunk3 sendmail[19848]: n33Fe6m3019848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:40:12 splunk3 sendmail[19882]: n33FeCnu019882: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031540.n33FeCF4030085@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:40:12 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44828
|
|
Apr 3 08:40:12 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:40:12 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:40:12 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:40:12 splunk3 spamd[12010]: spamd: processing message <200904031540.n33FeCF4030085@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:40:14 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 3 08:40:14 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44828,mid=<200904031540.n33FeCF4030085@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:40:14 splunk3 sendmail[19883]: n33FeCnu019882: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:40:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:40:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:40:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:41:06 splunk3 sendmail[20110]: n33Ff6f3020110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 08:42:06 splunk3 sendmail[20347]: n33Fg6Xw020347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:43:06 splunk3 sendmail[20585]: n33Fh6T4020585: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:44:06 splunk3 sendmail[20820]: n33Fi6CZ020820: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:45:06 splunk3 sendmail[21058]: n33Fj6Gv021058: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:45:13 splunk3 sendmail[21091]: n33FjDUo021091: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031545.n33FjD8i030700@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:45:13 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44885
|
|
Apr 3 08:45:13 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:45:13 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:45:13 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:45:13 splunk3 spamd[12010]: spamd: processing message <200904031545.n33FjD8i030700@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:45:15 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 3 08:45:15 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44885,mid=<200904031545.n33FjD8i030700@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:45:15 splunk3 sendmail[21092]: n33FjDUo021091: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:45:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:45:37 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:45:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:46:06 splunk3 sendmail[21317]: n33Fk6tf021317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:47:06 splunk3 sendmail[21555]: n33Fl6vY021555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:48:06 splunk3 sendmail[21790]: n33Fm6RP021790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:49:06 splunk3 sendmail[22030]: n33Fn6lp022030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:50:06 splunk3 sendmail[22273]: n33Fo6et022273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:50:13 splunk3 sendmail[22304]: n33FoD0b022304: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031550.n33FoDQG031316@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:50:14 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44940
|
|
Apr 3 08:50:14 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:50:14 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:50:14 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:50:14 splunk3 spamd[12010]: spamd: processing message <200904031550.n33FoDQG031316@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:50:16 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 08:50:16 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44940,mid=<200904031550.n33FoDQG031316@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:50:16 splunk3 sendmail[22305]: n33FoD0b022304: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:50:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:50:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:50:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:51:06 splunk3 sendmail[22536]: n33Fp6Ok022536: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:52:06 splunk3 sendmail[22769]: n33Fq6ia022769: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:53:06 splunk3 sendmail[23012]: n33Fr6UF023012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:54:06 splunk3 sendmail[23245]: n33Fs6pW023245: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:55:06 splunk3 sendmail[23486]: n33Ft6pw023486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:55:14 splunk3 sendmail[23536]: n33FtEbE023536: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031555.n33FtEh1031930@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 08:55:14 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44996
|
|
Apr 3 08:55:14 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 08:55:14 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 08:55:14 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 08:55:14 splunk3 spamd[12010]: spamd: processing message <200904031555.n33FtEh1031930@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 08:55:16 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 3 08:55:16 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44996,mid=<200904031555.n33FtEh1031930@virt2.int.splunk.com>,bayes=0.111787601951791,autolearn=no
|
|
Apr 3 08:55:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 08:55:16 splunk3 sendmail[23538]: n33FtEbE023536: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 08:55:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 08:55:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 08:56:06 splunk3 sendmail[23745]: n33Fu6gE023745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 08:57:06 splunk3 sendmail[23985]: n33Fv6fl023985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:58:06 splunk3 sendmail[24220]: n33Fw62Z024220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 08:59:06 splunk3 sendmail[24457]: n33Fx6qO024457: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:00:04 splunk3 sendmail[24755]: n33G047e024755: from=root, size=291, class=0, nrcpts=1, msgid=<200904031600.n33G047e024755@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 09:00:04 splunk3 sendmail[24759]: n33G04In024759: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031600.n33G047e024755@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 09:00:04 splunk3 sendmail[24755]: n33G047e024755: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33G04In024759 Message accepted for delivery)
|
|
Apr 3 09:00:06 splunk3 sendmail[24760]: n33G04In024759: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:00:06 splunk3 sendmail[24767]: n33G06W2024767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:00:14 splunk3 sendmail[24800]: n33G0E52024800: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904031600.n33G0E52024800@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 09:00:14 splunk3 sendmail[24802]: n33G0E52024800: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 09:00:14 splunk3 sendmail[24802]: n33G0E52024800: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 09:00:14 splunk3 sendmail[24802]: n33G0E52024800: n33G0E52024802: postmaster notify: User unknown
|
|
Apr 3 09:00:15 splunk3 sendmail[24831]: n33G0FVt024831: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031600.n33G0EP4032562@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:00:15 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45060
|
|
Apr 3 09:00:15 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:00:15 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 09:00:15 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 09:00:15 splunk3 sendmail[24832]: n33G0FVt024831: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:00:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:00:15 splunk3 sendmail[24802]: n33G0E52024802: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:00:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:00:51 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:01:03 splunk3 sendmail[25026]: n33G11xU025026: from=root, size=443, class=0, nrcpts=1, msgid=<200904031601.n33G11xU025026@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 09:01:03 splunk3 sendmail[25029]: n33G131D025029: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031601.n33G11xU025026@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 09:01:03 splunk3 sendmail[25026]: n33G11xU025026: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33G131D025029 Message accepted for delivery)
|
|
Apr 3 09:01:05 splunk3 sendmail[25030]: n33G131D025029: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:01:06 splunk3 sendmail[25054]: n33G16x0025054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:02:06 splunk3 sendmail[25290]: n33G264n025290: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:03:06 splunk3 sendmail[25528]: n33G36Z8025528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:04:06 splunk3 sendmail[25763]: n33G46mu025763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:05:06 splunk3 sendmail[26003]: n33G56Vi026003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:05:15 splunk3 sendmail[26052]: n33G5Fsw026052: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904031605.n33G5FG2000783@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:05:15 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45117
|
|
Apr 3 09:05:15 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:05:15 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 09:05:15 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 09:05:15 splunk3 sendmail[26053]: n33G5Fsw026052: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:05:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:05:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:06:06 splunk3 sendmail[26260]: n33G66I0026260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:07:07 splunk3 sendmail[26499]: n33G77UC026499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:08:07 splunk3 sendmail[26736]: n33G87Bt026736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:09:07 splunk3 sendmail[26976]: n33G97Yg026976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:10:03 splunk3 sendmail[27292]: n33GA3mX027292: from=root, size=292, class=0, nrcpts=1, msgid=<200904031610.n33GA3mX027292@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 09:10:03 splunk3 sendmail[27297]: n33GA3Bj027297: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031610.n33GA3mX027292@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 09:10:03 splunk3 sendmail[27292]: n33GA3mX027292: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33GA3Bj027297 Message accepted for delivery)
|
|
Apr 3 09:10:04 splunk3 sendmail[27298]: n33GA3Bj027297: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:10:07 splunk3 sendmail[27324]: n33GA7lx027324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:10:09 splunk3 sendmail[27323]: n33GA69U027323: from=<tek@qfci.com>, size=1026, class=0, nrcpts=1, msgid=<01c9b48f$cda16800$b1086d57@tek>, proto=ESMTP, daemon=MTA, relay=[87.109.8.177]
|
|
Apr 3 09:10:09 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45165
|
|
Apr 3 09:10:09 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:10:09 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:10:09 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:10:09 splunk3 spamd[12010]: spamd: processing message <01c9b48f$cda16800$b1086d57@tek> for spamme:501
|
|
Apr 3 09:10:12 splunk3 spamd[12010]: spamd: identified spam (5.1/5.0) for spamme:501 in 2.4 seconds, 1274 bytes.
|
|
Apr 3 09:10:12 splunk3 spamd[12010]: spamd: result: Y 5 - BAYES_99,URIBL_SBL scantime=2.4,size=1274,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45165,mid=<01c9b48f$cda16800$b1086d57@tek>,bayes=0.999999999897911,autolearn=no
|
|
Apr 3 09:10:12 splunk3 sendmail[27341]: n33GA69U027323: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:03, mailer=local, pri=31205, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:10:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:10:16 splunk3 sendmail[27380]: n33GAGxa027380: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031610.n33GAFDZ001405@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:10:16 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45175
|
|
Apr 3 09:10:16 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:10:16 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:10:16 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:10:16 splunk3 spamd[12010]: spamd: processing message <200904031610.n33GAFDZ001405@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:10:18 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 09:10:18 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45175,mid=<200904031610.n33GAFDZ001405@virt2.int.splunk.com>,bayes=0.168641308628785,autolearn=no
|
|
Apr 3 09:10:18 splunk3 sendmail[27381]: n33GAGxa027380: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:10:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:10:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:10:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:11:07 splunk3 sendmail[27592]: n33GB7aH027592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 09:12:07 splunk3 sendmail[27827]: n33GC7ma027827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:13:07 splunk3 sendmail[28066]: n33GD7AF028066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:14:07 splunk3 sendmail[28306]: n33GE7Ks028306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:15:07 splunk3 sendmail[28541]: n33GF74h028541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:15:16 splunk3 sendmail[28592]: n33GFGld028592: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031615.n33GFGUV002227@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:15:16 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45231
|
|
Apr 3 09:15:16 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:15:16 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:15:16 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:15:16 splunk3 spamd[12010]: spamd: processing message <200904031615.n33GFGUV002227@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:15:18 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 3 09:15:18 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45231,mid=<200904031615.n33GFGUV002227@virt2.int.splunk.com>,bayes=0.168641308628785,autolearn=no
|
|
Apr 3 09:15:18 splunk3 sendmail[28593]: n33GFGld028592: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:15:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:15:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:15:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:16:07 splunk3 sendmail[28800]: n33GG7wi028800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:17:07 splunk3 sendmail[29040]: n33GH7fw029040: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:18:07 splunk3 sendmail[29275]: n33GI7Tr029275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:19:07 splunk3 sendmail[29514]: n33GJ7eV029514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:20:07 splunk3 sendmail[29757]: n33GK7UP029757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:20:17 splunk3 sendmail[29806]: n33GKHMH029806: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031620.n33GKGGg002858@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:20:17 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45287
|
|
Apr 3 09:20:17 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:20:17 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:20:17 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:20:17 splunk3 spamd[12010]: spamd: processing message <200904031620.n33GKGGg002858@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:20:19 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 09:20:19 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45287,mid=<200904031620.n33GKGGg002858@virt2.int.splunk.com>,bayes=0.168641308628785,autolearn=no
|
|
Apr 3 09:20:19 splunk3 sendmail[29807]: n33GKHMH029806: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:20:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:20:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:20:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:21:07 splunk3 sendmail[30018]: n33GL7jC030018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:22:07 splunk3 sendmail[30251]: n33GM72S030251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:23:07 splunk3 sendmail[30496]: n33GN7DC030496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:24:07 splunk3 sendmail[30731]: n33GO72x030731: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:25:07 splunk3 sendmail[30971]: n33GP7nX030971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:25:18 splunk3 sendmail[31020]: n33GPICC031020: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031625.n33GPHUP003466@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:25:18 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45342
|
|
Apr 3 09:25:18 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:25:18 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:25:18 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:25:18 splunk3 spamd[12010]: spamd: processing message <200904031625.n33GPHUP003466@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:25:20 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 09:25:20 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45342,mid=<200904031625.n33GPHUP003466@virt2.int.splunk.com>,bayes=0.168641308628785,autolearn=no
|
|
Apr 3 09:25:20 splunk3 sendmail[31021]: n33GPICC031020: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:25:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:25:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:25:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:26:07 splunk3 sendmail[31230]: n33GQ7rf031230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 09:27:07 splunk3 sendmail[31470]: n33GR7Of031470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:28:07 splunk3 sendmail[31704]: n33GS718031704: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:29:07 splunk3 sendmail[31942]: n33GT7BH031942: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:30:07 splunk3 sendmail[32184]: n33GU7Jd032184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:30:19 splunk3 sendmail[32252]: n33GUJ50032252: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031630.n33GUIkv004085@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:30:19 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45399
|
|
Apr 3 09:30:19 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:30:19 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:30:19 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:30:19 splunk3 spamd[12010]: spamd: processing message <200904031630.n33GUIkv004085@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:30:21 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 3 09:30:21 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45399,mid=<200904031630.n33GUIkv004085@virt2.int.splunk.com>,bayes=0.168641308628785,autolearn=no
|
|
Apr 3 09:30:21 splunk3 sendmail[32253]: n33GUJ50032252: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:30:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:30:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:30:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:31:07 splunk3 sendmail[32445]: n33GV7fT032445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:32:07 splunk3 sendmail[32680]: n33GW7HR032680: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:33:07 splunk3 sendmail[451]: n33GX7dg000451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:34:07 splunk3 sendmail[686]: n33GY7rE000686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:35:07 splunk3 sendmail[926]: n33GZ7Cn000926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:35:20 splunk3 sendmail[994]: n33GZKRg000994: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031635.n33GZJAD004830@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:35:20 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45455
|
|
Apr 3 09:35:20 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:35:20 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:35:20 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:35:20 splunk3 spamd[12010]: spamd: processing message <200904031635.n33GZJAD004830@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:35:22 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 3 09:35:22 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45455,mid=<200904031635.n33GZJAD004830@virt2.int.splunk.com>,bayes=0.168641308628785,autolearn=no
|
|
Apr 3 09:35:22 splunk3 sendmail[995]: n33GZKRg000994: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:35:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:35:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:35:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:36:07 splunk3 sendmail[1183]: n33Ga7ch001183: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:37:07 splunk3 sendmail[1424]: n33Gb7n6001424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:38:07 splunk3 sendmail[1665]: n33Gc72A001665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:39:07 splunk3 sendmail[1904]: n33Gd7Yo001904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:40:07 splunk3 sendmail[2147]: n33Ge7tq002147: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:40:20 splunk3 sendmail[2214]: n33GeK6s002214: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031640.n33GeKfx005475@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:40:20 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45510
|
|
Apr 3 09:40:20 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:40:20 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:40:20 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:40:20 splunk3 spamd[12010]: spamd: processing message <200904031640.n33GeKfx005475@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:40:23 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 3 09:40:23 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45510,mid=<200904031640.n33GeKfx005475@virt2.int.splunk.com>,bayes=0.168641308628785,autolearn=no
|
|
Apr 3 09:40:23 splunk3 sendmail[2215]: n33GeK6s002214: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:40:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:40:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:40:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:41:07 splunk3 sendmail[2410]: n33Gf7MT002410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 09:42:07 splunk3 sendmail[2652]: n33Gg7sa002652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:43:07 splunk3 sendmail[2899]: n33Gh7Yi002899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:44:07 splunk3 sendmail[3144]: n33Gi7qM003144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:44:29 splunk3 sendmail[3184]: n33GiFKx003184: from=<spamme@splunkit.com>, size=2747, class=0, nrcpts=1, msgid=<200904031644.n33GiFKx003184@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=dsl88-248-35274.ttnet.net.tr [88.248.137.202] (may be forged)
|
|
Apr 3 09:44:29 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45552
|
|
Apr 3 09:44:29 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:44:29 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:44:29 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:44:29 splunk3 spamd[12010]: spamd: processing message <200904031644.n33GiFKx003184@splunk3.splunkit.com> for spamme:501
|
|
Apr 3 09:44:31 splunk3 spamd[12010]: spamd: identified spam (31.9/5.0) for spamme:501 in 1.8 seconds, 3150 bytes.
|
|
Apr 3 09:44:31 splunk3 spamd[12010]: spamd: result: Y 31 - AWL,BAYES_99,FORGED_RCVD_HELO,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.8,size=3150,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45552,mid=<200904031644.n33GiFKx003184@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 3 09:44:31 splunk3 sendmail[3242]: n33GiFKx003184: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:15, xdelay=00:00:02, mailer=local, pri=33072, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:44:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:45:07 splunk3 sendmail[3392]: n33Gj759003392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:45:21 splunk3 sendmail[3459]: n33GjL0W003459: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031645.n33GjKul006079@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:45:21 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45568
|
|
Apr 3 09:45:21 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:45:21 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:45:21 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:45:21 splunk3 spamd[12010]: spamd: processing message <200904031645.n33GjKul006079@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:45:23 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 09:45:23 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45568,mid=<200904031645.n33GjKul006079@virt2.int.splunk.com>,bayes=0.16863248837396,autolearn=no
|
|
Apr 3 09:45:23 splunk3 sendmail[3460]: n33GjL0W003459: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:45:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:45:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:45:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:46:07 splunk3 sendmail[3672]: n33Gk7q3003672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:47:07 splunk3 sendmail[3919]: n33Gl7rT003919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:48:07 splunk3 sendmail[4167]: n33Gm7Di004167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:49:07 splunk3 sendmail[4420]: n33Gn7t3004420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:50:07 splunk3 sendmail[4662]: n33Go7Ss004662: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:50:22 splunk3 sendmail[4732]: n33GoLBm004732: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031650.n33GoLCm006700@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:50:22 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45623
|
|
Apr 3 09:50:22 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:50:22 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:50:22 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:50:22 splunk3 spamd[12010]: spamd: processing message <200904031650.n33GoLCm006700@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:50:24 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 09:50:24 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45623,mid=<200904031650.n33GoLCm006700@virt2.int.splunk.com>,bayes=0.16863248837396,autolearn=no
|
|
Apr 3 09:50:24 splunk3 sendmail[4733]: n33GoLBm004732: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:50:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:50:36 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:50:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:51:07 splunk3 sendmail[4931]: n33Gp7mi004931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:52:07 splunk3 sendmail[5205]: n33Gq7rZ005205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:53:07 splunk3 sendmail[5453]: n33Gr7wm005453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:54:07 splunk3 sendmail[5688]: n33Gs701005688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:55:07 splunk3 sendmail[5928]: n33Gt7x7005928: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:55:22 splunk3 sendmail[5995]: n33GtM3m005995: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031655.n33GtMAI007305@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 09:55:22 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45679
|
|
Apr 3 09:55:22 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 09:55:22 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 09:55:22 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 09:55:22 splunk3 spamd[12010]: spamd: processing message <200904031655.n33GtMAI007305@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 09:55:24 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 3 09:55:24 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45679,mid=<200904031655.n33GtMAI007305@virt2.int.splunk.com>,bayes=0.16863248837396,autolearn=no
|
|
Apr 3 09:55:24 splunk3 sendmail[5996]: n33GtM3m005995: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 09:55:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 09:55:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 09:55:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 09:56:07 splunk3 sendmail[6187]: n33Gu7RN006187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 09:57:07 splunk3 sendmail[6424]: n33Gv7GY006424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:58:07 splunk3 sendmail[6660]: n33Gw7hU006660: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 09:59:07 splunk3 sendmail[6899]: n33Gx76T006899: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:00:05 splunk3 sendmail[7201]: n33H05XN007201: from=root, size=291, class=0, nrcpts=1, msgid=<200904031700.n33H05XN007201@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 10:00:05 splunk3 sendmail[7205]: n33H05FF007205: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031700.n33H05XN007201@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 10:00:05 splunk3 sendmail[7201]: n33H05XN007201: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33H05FF007205 Message accepted for delivery)
|
|
Apr 3 10:00:06 splunk3 sendmail[7206]: n33H05FF007205: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:00:07 splunk3 sendmail[7211]: n33H07BC007211: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:00:19 splunk3 sendmail[7278]: n33H0JjC007278: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904031700.n33H0JjC007278@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 10:00:19 splunk3 sendmail[7280]: n33H0JjC007278: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 10:00:19 splunk3 sendmail[7280]: n33H0JjC007278: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 3 10:00:19 splunk3 sendmail[7280]: n33H0JjC007278: n33H0JjC007280: postmaster notify: User unknown
|
|
Apr 3 10:00:21 splunk3 sendmail[7280]: n33H0JjC007280: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:00:23 splunk3 sendmail[7294]: n33H0NoD007294: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031700.n33H0NJG007953@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:00:23 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45743
|
|
Apr 3 10:00:23 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:00:23 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 10:00:23 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 10:00:23 splunk3 sendmail[7295]: n33H0NoD007294: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:00:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:00:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:00:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:01:07 splunk3 sendmail[7494]: n33H17xF007494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:01:08 splunk3 sendmail[7468]: n33H11Oq007468: from=root, size=443, class=0, nrcpts=1, msgid=<200904031701.n33H11Oq007468@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 10:01:08 splunk3 sendmail[7496]: n33H18K2007496: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031701.n33H11Oq007468@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 10:01:08 splunk3 sendmail[7468]: n33H11Oq007468: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33H18K2007496 Message accepted for delivery)
|
|
Apr 3 10:01:09 splunk3 sendmail[7497]: n33H18K2007496: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:02:07 splunk3 sendmail[7744]: n33H27k6007744: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:03:07 splunk3 sendmail[7983]: n33H3769007983: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:04:07 splunk3 sendmail[8213]: n33H47gV008213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:05:07 splunk3 sendmail[8452]: n33H57QY008452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:05:24 splunk3 sendmail[8539]: n33H5OQj008539: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031705.n33H5OjX008635@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:05:24 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45800
|
|
Apr 3 10:05:24 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:05:24 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 10:05:24 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 10:05:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:05:24 splunk3 sendmail[8540]: n33H5OQj008539: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:05:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:05:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:06:07 splunk3 sendmail[8710]: n33H67Kk008710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:07:07 splunk3 sendmail[8950]: n33H77XQ008950: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:08:07 splunk3 sendmail[9188]: n33H87Hk009188: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:09:07 splunk3 sendmail[9426]: n33H977A009426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:10:02 splunk3 sendmail[9750]: n33HA2SL009750: from=root, size=292, class=0, nrcpts=1, msgid=<200904031710.n33HA2SL009750@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 10:10:02 splunk3 sendmail[9755]: n33HA2PT009755: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031710.n33HA2SL009750@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 10:10:02 splunk3 sendmail[9750]: n33HA2SL009750: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33HA2PT009755 Message accepted for delivery)
|
|
Apr 3 10:10:03 splunk3 sendmail[9756]: n33HA2PT009755: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:10:07 splunk3 sendmail[9784]: n33HA7BG009784: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:10:24 splunk3 sendmail[9868]: n33HAO6k009868: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904031710.n33HAOEx009249@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:10:24 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45856
|
|
Apr 3 10:10:24 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:10:24 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:10:24 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:10:24 splunk3 spamd[12010]: spamd: processing message <200904031710.n33HAOEx009249@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:10:26 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 3 10:10:26 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45856,mid=<200904031710.n33HAOEx009249@virt2.int.splunk.com>,bayes=0.16863248837396,autolearn=no
|
|
Apr 3 10:10:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:10:26 splunk3 sendmail[9869]: n33HAO6k009868: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:10:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:10:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:11:07 splunk3 sendmail[10044]: n33HB76O010044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 10:12:07 splunk3 sendmail[10281]: n33HC7eA010281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:13:07 splunk3 sendmail[10520]: n33HD7IY010520: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:14:07 splunk3 sendmail[10757]: n33HE7t8010757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:15:07 splunk3 sendmail[10996]: n33HF7Jc010996: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:15:25 splunk3 sendmail[11082]: n33HFPHM011082: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031715.n33HFOqe010039@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:15:25 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45913
|
|
Apr 3 10:15:25 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:15:25 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:15:25 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:15:25 splunk3 spamd[12010]: spamd: processing message <200904031715.n33HFOqe010039@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:15:27 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 10:15:27 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45913,mid=<200904031715.n33HFOqe010039@virt2.int.splunk.com>,bayes=0.111780173705322,autolearn=no
|
|
Apr 3 10:15:27 splunk3 sendmail[11083]: n33HFPHM011082: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:15:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:15:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:15:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:16:07 splunk3 sendmail[11254]: n33HG7f2011254: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:17:07 splunk3 sendmail[11494]: n33HH7Ij011494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:18:07 splunk3 sendmail[11725]: n33HI7LA011725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:19:07 splunk3 sendmail[11964]: n33HJ7sH011964: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:20:07 splunk3 sendmail[12208]: n33HK7LB012208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:20:26 splunk3 sendmail[12295]: n33HKQ4e012295: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031720.n33HKQK9010674@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:20:26 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45969
|
|
Apr 3 10:20:26 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:20:26 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:20:26 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:20:26 splunk3 spamd[12010]: spamd: processing message <200904031720.n33HKQK9010674@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:20:28 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 3 10:20:28 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45969,mid=<200904031720.n33HKQK9010674@virt2.int.splunk.com>,bayes=0.111780173705322,autolearn=no
|
|
Apr 3 10:20:28 splunk3 sendmail[12296]: n33HKQ4e012295: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:20:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:20:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:21:07 splunk3 sendmail[12471]: n33HL70k012471: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:22:07 splunk3 sendmail[12706]: n33HM7MI012706: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:23:07 splunk3 sendmail[12949]: n33HN71j012949: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:24:07 splunk3 sendmail[13184]: n33HO7jx013184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:25:07 splunk3 sendmail[13460]: n33HP7CV013460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:25:27 splunk3 sendmail[13549]: n33HPR10013549: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031725.n33HPQxT011281@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:25:27 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46024
|
|
Apr 3 10:25:27 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:25:27 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:25:27 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:25:27 splunk3 spamd[12010]: spamd: processing message <200904031725.n33HPQxT011281@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:25:30 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 10:25:30 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46024,mid=<200904031725.n33HPQxT011281@virt2.int.splunk.com>,bayes=0.111780173705322,autolearn=no
|
|
Apr 3 10:25:30 splunk3 sendmail[13550]: n33HPR10013549: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:25:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:25:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:25:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:26:07 splunk3 sendmail[13719]: n33HQ7pr013719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 10:27:07 splunk3 sendmail[13959]: n33HR7iT013959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:28:07 splunk3 sendmail[14195]: n33HS7r1014195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:29:07 splunk3 sendmail[14435]: n33HT7KH014435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:29:26 splunk3 sendmail[14495]: n33HTNB4014495: from=<spamme@ncport.ru>, size=4013, class=0, nrcpts=1, msgid=<20090403082927.3642.qmail@pedrosobremesa>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=118.Red-88-23-228.staticIP.rima-tde.net [88.23.228.118]
|
|
Apr 3 10:29:26 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46065
|
|
Apr 3 10:29:26 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:29:26 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:29:26 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:29:26 splunk3 spamd[12010]: spamd: processing message <20090403082927.3642.qmail@pedrosobremesa> for spamme:501
|
|
Apr 3 10:29:29 splunk3 spamd[12010]: spamd: identified spam (34.4/5.0) for spamme:501 in 2.9 seconds, 4309 bytes.
|
|
Apr 3 10:29:29 splunk3 spamd[12010]: spamd: result: Y 34 - ADDRESS_IN_SUBJECT,BAYES_99,DATE_IN_PAST_06_12,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_TAGS,HTML_IMAGE_ONLY_32,HTML_MESSAGE,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL scantime=2.9,size=4309,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46065,mid=<20090403082927.3642.qmail@pedrosobremesa>,bayes=1,autolearn=spam
|
|
Apr 3 10:29:29 splunk3 sendmail[14513]: n33HTNB4014495: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:03, mailer=local, pri=34233, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:29:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:30:07 splunk3 sendmail[14683]: n33HU75c014683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:30:28 splunk3 sendmail[14771]: n33HURQt014771: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031730.n33HURxM011905@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:30:28 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46082
|
|
Apr 3 10:30:28 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:30:28 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:30:28 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:30:28 splunk3 spamd[12010]: spamd: processing message <200904031730.n33HURxM011905@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:30:30 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 10:30:30 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46082,mid=<200904031730.n33HURxM011905@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 10:30:30 splunk3 sendmail[14772]: n33HURQt014771: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:30:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:30:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:31:07 splunk3 sendmail[14945]: n33HV7UM014945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:32:07 splunk3 sendmail[15178]: n33HW7NO015178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:33:07 splunk3 sendmail[15415]: n33HX7Y5015415: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:34:07 splunk3 sendmail[15648]: n33HY7tp015648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:35:07 splunk3 sendmail[15890]: n33HZ7Ye015890: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:35:28 splunk3 sendmail[15993]: n33HZSep015993: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031735.n33HZSbN012674@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:35:28 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46137
|
|
Apr 3 10:35:28 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:35:28 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:35:28 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:35:28 splunk3 spamd[12010]: spamd: processing message <200904031735.n33HZSbN012674@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:35:30 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 10:35:30 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46137,mid=<200904031735.n33HZSbN012674@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 10:35:30 splunk3 sendmail[15994]: n33HZSep015993: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:35:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:35:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:36:07 splunk3 sendmail[16148]: n33Ha72G016148: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:37:07 splunk3 sendmail[16384]: n33Hb70h016384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:38:07 splunk3 sendmail[16619]: n33Hc6jH016619: from=<lcapua@cogeco.ca>, size=2083, class=0, nrcpts=1, msgid=<DC8195C3CD544B7AA5EC9CF4E7C4F2D5@CapuaFamily>, proto=ESMTP, daemon=MTA, relay=smtp.cogeco.net [216.221.81.25]
|
|
Apr 3 10:38:07 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46163
|
|
Apr 3 10:38:07 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:38:07 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:38:07 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:38:07 splunk3 spamd[12010]: spamd: processing message <DC8195C3CD544B7AA5EC9CF4E7C4F2D5@CapuaFamily> for spamme:501
|
|
Apr 3 10:38:07 splunk3 sendmail[16629]: n33Hc7hG016629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:38:08 splunk3 spamd[12010]: spamd: clean message (4.7/5.0) for spamme:501 in 1.2 seconds, 2357 bytes.
|
|
Apr 3 10:38:08 splunk3 spamd[12010]: spamd: result: . 4 - BAYES_99,HTML_90_100,HTML_MESSAGE,MIME_HTML_MOSTLY scantime=1.2,size=2357,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46163,mid=<DC8195C3CD544B7AA5EC9CF4E7C4F2D5@CapuaFamily>,bayes=0.997219430492944,autolearn=no
|
|
Apr 3 10:38:08 splunk3 sendmail[16623]: n33Hc6jH016619: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32282, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:38:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:39:07 splunk3 sendmail[16864]: n33Hd76D016864: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:40:07 splunk3 sendmail[17105]: n33He72d017105: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:40:29 splunk3 sendmail[17211]: n33HeSAA017211: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031740.n33HeS6a013285@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:40:29 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46194
|
|
Apr 3 10:40:29 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:40:29 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:40:29 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:40:29 splunk3 spamd[12010]: spamd: processing message <200904031740.n33HeS6a013285@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:40:31 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.0 seconds, 1308 bytes.
|
|
Apr 3 10:40:31 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.0,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46194,mid=<200904031740.n33HeS6a013285@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 10:40:31 splunk3 sendmail[17212]: n33HeSAA017211: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:40:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:40:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:40:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:41:07 splunk3 sendmail[17368]: n33Hf7Ao017368: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 10:42:07 splunk3 sendmail[17605]: n33Hg79f017605: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:43:07 splunk3 sendmail[17844]: n33Hh74R017844: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:44:07 splunk3 sendmail[18079]: n33Hi7Hr018079: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:45:07 splunk3 sendmail[18319]: n33Hj70D018319: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:45:29 splunk3 sendmail[18424]: n33HjTp6018424: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031745.n33HjTMo013916@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:45:29 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46250
|
|
Apr 3 10:45:29 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:45:29 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:45:29 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:45:29 splunk3 spamd[12010]: spamd: processing message <200904031745.n33HjTMo013916@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:45:31 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 10:45:31 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46250,mid=<200904031745.n33HjTMo013916@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 10:45:31 splunk3 sendmail[18425]: n33HjTp6018424: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:45:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:45:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:45:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:46:07 splunk3 sendmail[18574]: n33Hk7eB018574: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:47:07 splunk3 sendmail[18816]: n33Hl7lo018816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:48:07 splunk3 sendmail[19049]: n33Hm7Mv019049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:49:07 splunk3 sendmail[19289]: n33Hn7qg019289: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:50:07 splunk3 sendmail[19532]: n33Ho7mo019532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:50:30 splunk3 sendmail[19636]: n33HoUEo019636: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031750.n33HoUBR014505@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:50:30 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46306
|
|
Apr 3 10:50:30 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:50:30 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:50:30 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:50:30 splunk3 spamd[12010]: spamd: processing message <200904031750.n33HoUBR014505@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:50:32 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 10:50:32 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46306,mid=<200904031750.n33HoUBR014505@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 10:50:32 splunk3 sendmail[19637]: n33HoUEo019636: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:50:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:50:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:50:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:51:07 splunk3 sendmail[19794]: n33Hp7N4019794: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:52:07 splunk3 sendmail[20028]: n33Hq7Rh020028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:53:07 splunk3 sendmail[20268]: n33Hr7Kx020268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:54:07 splunk3 sendmail[20503]: n33Hs7K0020503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:55:00 splunk3 sendmail[20720]: n33Ht0XL020720: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031755.n33Ht003015041@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 10:55:00 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46350
|
|
Apr 3 10:55:00 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 10:55:00 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 10:55:00 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 10:55:00 splunk3 spamd[12010]: spamd: processing message <200904031755.n33Ht003015041@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 10:55:02 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Apr 3 10:55:02 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46350,mid=<200904031755.n33Ht003015041@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 10:55:02 splunk3 sendmail[20721]: n33Ht0XL020720: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 10:55:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 10:55:07 splunk3 sendmail[20749]: n33Ht7ls020749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:55:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 10:55:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 10:56:07 splunk3 sendmail[21003]: n33Hu7oM021003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 10:57:07 splunk3 sendmail[21259]: n33Hv7uk021259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:58:07 splunk3 sendmail[21493]: n33Hw77p021493: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 10:59:07 splunk3 sendmail[21733]: n33Hx7W5021733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:00:01 splunk3 sendmail[21983]: n33I01HI021983: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031800.n33I01G4015660@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:00:01 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46406
|
|
Apr 3 11:00:01 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:00:01 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 11:00:01 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 11:00:01 splunk3 sendmail[21984]: n33I01HI021983: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:00:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:00:04 splunk3 sendmail[22022]: n33I04gv022022: from=root, size=291, class=0, nrcpts=1, msgid=<200904031800.n33I04gv022022@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 11:00:04 splunk3 sendmail[22026]: n33I04mg022026: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031800.n33I04gv022022@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 11:00:04 splunk3 sendmail[22022]: n33I04gv022022: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33I04mg022026 Message accepted for delivery)
|
|
Apr 3 11:00:05 splunk3 sendmail[22027]: n33I04mg022026: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:00:07 splunk3 sendmail[22048]: n33I07YL022048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:00:25 splunk3 sendmail[22118]: n33I0P3r022118: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904031800.n33I0P3r022118@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 11:00:25 splunk3 sendmail[22120]: n33I0P3r022118: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 11:00:25 splunk3 sendmail[22120]: n33I0P3r022118: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 11:00:25 splunk3 sendmail[22120]: n33I0P3r022118: n33I0P3r022120: postmaster notify: User unknown
|
|
Apr 3 11:00:26 splunk3 sendmail[22120]: n33I0P3r022120: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:00:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:00:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:01:06 splunk3 sendmail[22287]: n33I11of022287: from=root, size=443, class=0, nrcpts=1, msgid=<200904031801.n33I11of022287@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 11:01:06 splunk3 sendmail[22311]: n33I16Xx022311: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031801.n33I11of022287@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 11:01:06 splunk3 sendmail[22287]: n33I11of022287: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33I16Xx022311 Message accepted for delivery)
|
|
Apr 3 11:01:07 splunk3 sendmail[22312]: n33I16Xx022311: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:01:07 splunk3 sendmail[22332]: n33I173U022332: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:02:07 splunk3 sendmail[22568]: n33I27A6022568: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:03:07 splunk3 sendmail[22808]: n33I37MU022808: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:04:07 splunk3 sendmail[23043]: n33I47De023043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:05:02 splunk3 sendmail[23241]: n33I526m023241: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031805.n33I51PJ016405@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:05:02 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46471
|
|
Apr 3 11:05:02 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:05:02 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 11:05:02 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 11:05:02 splunk3 sendmail[23242]: n33I526m023241: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:05:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:05:07 splunk3 sendmail[23287]: n33I57WB023287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:05:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:05:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:06:07 splunk3 sendmail[23539]: n33I6740023539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:07:07 splunk3 sendmail[23774]: n33I77Of023774: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:08:07 splunk3 sendmail[24013]: n33I87WP024013: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:09:07 splunk3 sendmail[24252]: n33I97ew024252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:10:02 splunk3 sendmail[24570]: n33IA2i6024570: from=root, size=292, class=0, nrcpts=1, msgid=<200904031810.n33IA2i6024570@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 11:10:02 splunk3 sendmail[24575]: n33IA24q024575: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031810.n33IA2i6024570@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 11:10:02 splunk3 sendmail[24570]: n33IA2i6024570: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33IA24q024575 Message accepted for delivery)
|
|
Apr 3 11:10:03 splunk3 sendmail[24580]: n33IA3KF024580: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031810.n33IA2tJ017017@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:10:03 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46528
|
|
Apr 3 11:10:03 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:10:03 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:10:03 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:10:03 splunk3 spamd[12010]: spamd: processing message <200904031810.n33IA2tJ017017@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:10:04 splunk3 sendmail[24576]: n33IA24q024575: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:10:05 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 3 11:10:05 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46528,mid=<200904031810.n33IA2tJ017017@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 11:10:05 splunk3 sendmail[24581]: n33IA3KF024580: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:10:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:10:07 splunk3 sendmail[24605]: n33IA73t024605: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:10:35 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:10:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:11:07 splunk3 sendmail[24860]: n33IB7hR024860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 11:12:07 splunk3 sendmail[25096]: n33IC7sw025096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:13:07 splunk3 sendmail[25334]: n33ID74b025334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:14:07 splunk3 sendmail[25568]: n33IE76V025568: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:15:04 splunk3 sendmail[25791]: n33IF48X025791: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031815.n33IF3V8017815@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:15:04 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46584
|
|
Apr 3 11:15:04 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:15:04 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:15:04 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:15:04 splunk3 spamd[12010]: spamd: processing message <200904031815.n33IF3V8017815@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:15:06 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 11:15:06 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46584,mid=<200904031815.n33IF3V8017815@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 11:15:06 splunk3 sendmail[25792]: n33IF48X025791: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:15:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:15:07 splunk3 sendmail[25814]: n33IF7Pb025814: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:15:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:15:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:16:07 splunk3 sendmail[26067]: n33IG7QV026067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:17:07 splunk3 sendmail[26308]: n33IH7ft026308: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:18:08 splunk3 sendmail[26542]: n33II8xN026542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:19:08 splunk3 sendmail[26781]: n33IJ82j026781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:20:05 splunk3 sendmail[27004]: n33IK5OX027004: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031820.n33IK5Jt018455@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:20:05 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46640
|
|
Apr 3 11:20:05 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:20:06 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:20:06 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:20:06 splunk3 spamd[12010]: spamd: processing message <200904031820.n33IK5Jt018455@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:20:08 splunk3 sendmail[27030]: n33IK87F027030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:20:08 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 11:20:08 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46640,mid=<200904031820.n33IK5Jt018455@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 11:20:08 splunk3 sendmail[27005]: n33IK5OX027004: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:20:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:20:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:20:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:21:08 splunk3 sendmail[27284]: n33IL8Yo027284: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:22:08 splunk3 sendmail[27519]: n33IM8Rh027519: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:23:08 splunk3 sendmail[27763]: n33IN8fn027763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:24:08 splunk3 sendmail[27997]: n33IO8t4027997: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:25:06 splunk3 sendmail[28221]: n33IP61f028221: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031825.n33IP67R019067@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:25:06 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46695
|
|
Apr 3 11:25:06 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:25:06 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:25:06 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:25:06 splunk3 spamd[12010]: spamd: processing message <200904031825.n33IP67R019067@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:25:06 splunk3 sendmail[28179]: n33IOvHT028179: from=<rvatulen_1973@JACCUSTOMPOUCHES.COM>, size=1946, class=0, nrcpts=1, msgid=<200904031824.n33IOvHT028179@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=189-94-165-61.3g.claro.net.br [189.94.165.61]
|
|
Apr 3 11:25:08 splunk3 sendmail[28246]: n33IP8wY028246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:25:10 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Apr 3 11:25:10 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46695,mid=<200904031825.n33IP67R019067@virt2.int.splunk.com>,bayes=0.111775721028823,autolearn=no
|
|
Apr 3 11:25:10 splunk3 sendmail[28222]: n33IP61f028221: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:25:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:25:14 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46697
|
|
Apr 3 11:25:14 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:25:14 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:25:14 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:25:14 splunk3 spamd[12010]: spamd: processing message <200904031824.n33IOvHT028179@splunk3.splunkit.com> for spamme:501
|
|
Apr 3 11:25:20 splunk3 spamd[12010]: spamd: identified spam (35.0/5.0) for spamme:501 in 5.4 seconds, 2385 bytes.
|
|
Apr 3 11:25:20 splunk3 spamd[12010]: spamd: result: Y 34 - BAYES_99,HELO_DYNAMIC_IPADDR2,HTML_IMAGE_ONLY_20,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL,URI_NOVOWEL scantime=5.4,size=2385,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46697,mid=<200904031824.n33IOvHT028179@splunk3.splunkit.com>,bayes=0.999918359363996,autolearn=spam
|
|
Apr 3 11:25:20 splunk3 sendmail[28227]: n33IOvHT028179: to=<spamme@splunkit.com>, delay=00:00:22, xdelay=00:00:14, mailer=local, pri=32278, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:25:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:25:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:25:50 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:26:08 splunk3 sendmail[28502]: n33IQ8DR028502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 11:27:08 splunk3 sendmail[28740]: n33IR8OB028740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:27:47 splunk3 sendmail[28878]: n33IRkw6028878: from=<3IlXWSRQKBpc7FF7C51C5IKJ-EFI5GCP7FF7C5.3FDJG1DD5JGCLEB9K.3FD@alerts.bounces.google.com>, size=9577, class=0, nrcpts=1, msgid=<0016e644cb289050df0466aab49d@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.191]
|
|
Apr 3 11:27:47 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46732
|
|
Apr 3 11:27:47 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:27:47 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:27:47 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:27:47 splunk3 spamd[12010]: spamd: processing message <0016e644cb289050df0466aab49d@google.com> for spamme:501
|
|
Apr 3 11:27:49 splunk3 spamd[12010]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.0 seconds, 10007 bytes.
|
|
Apr 3 11:27:49 splunk3 spamd[12010]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.0,size=10007,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46732,mid=<0016e644cb289050df0466aab49d@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Apr 3 11:27:49 splunk3 sendmail[28895]: n33IRkw6028878: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=39788, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:27:49 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:28:08 splunk3 sendmail[28978]: n33IS8KG028978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:29:08 splunk3 sendmail[29217]: n33IT8gF029217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:30:07 splunk3 sendmail[29442]: n33IU6lw029442: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031830.n33IU602019686@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:30:07 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46754
|
|
Apr 3 11:30:07 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:30:07 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:30:07 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:30:07 splunk3 spamd[12010]: spamd: processing message <200904031830.n33IU602019686@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:30:08 splunk3 sendmail[29464]: n33IU8iv029464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:30:09 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 3 11:30:09 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46754,mid=<200904031830.n33IU602019686@virt2.int.splunk.com>,bayes=0.111800341159231,autolearn=no
|
|
Apr 3 11:30:09 splunk3 sendmail[29443]: n33IU6lw029442: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:30:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:30:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:30:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:31:08 splunk3 sendmail[29721]: n33IV8Ee029721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:32:08 splunk3 sendmail[29957]: n33IW8Su029957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:33:08 splunk3 sendmail[30195]: n33IX8Zg030195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:34:08 splunk3 sendmail[30429]: n33IY8Kl030429: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:35:07 splunk3 sendmail[30668]: n33IZ7Wp030668: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031835.n33IZ7ix020432@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:35:07 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46810
|
|
Apr 3 11:35:07 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:35:07 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:35:07 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:35:07 splunk3 spamd[12010]: spamd: processing message <200904031835.n33IZ7ix020432@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:35:08 splunk3 sendmail[30674]: n33IZ851030674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:35:09 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 3 11:35:09 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46810,mid=<200904031835.n33IZ7ix020432@virt2.int.splunk.com>,bayes=0.111800341159231,autolearn=no
|
|
Apr 3 11:35:09 splunk3 sendmail[30669]: n33IZ7Wp030668: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:35:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:35:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:35:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:36:08 splunk3 sendmail[30926]: n33Ia81b030926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:37:08 splunk3 sendmail[31165]: n33Ib8bT031165: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:38:08 splunk3 sendmail[31406]: n33Ic8vO031406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:39:08 splunk3 sendmail[31644]: n33Id8AB031644: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:40:08 splunk3 sendmail[31886]: n33Ie8mw031886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:40:08 splunk3 sendmail[31887]: n33Ie89l031887: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031840.n33Ie7NU021061@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:40:08 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46865
|
|
Apr 3 11:40:08 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:40:08 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:40:08 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:40:08 splunk3 spamd[12010]: spamd: processing message <200904031840.n33Ie7NU021061@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:40:10 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 3 11:40:10 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46865,mid=<200904031840.n33Ie7NU021061@virt2.int.splunk.com>,bayes=0.111800341159231,autolearn=no
|
|
Apr 3 11:40:10 splunk3 sendmail[31888]: n33Ie89l031887: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:40:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:40:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:40:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:41:08 splunk3 sendmail[32148]: n33If8bw032148: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 11:42:08 splunk3 sendmail[32381]: n33Ig8mL032381: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:43:08 splunk3 sendmail[32618]: n33Ih8CW032618: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:44:08 splunk3 sendmail[386]: n33Ii8mN000386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:45:08 splunk3 sendmail[627]: n33Ij8fS000627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:45:09 splunk3 sendmail[628]: n33Ij9lM000628: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031845.n33Ij8xT021678@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:45:09 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46922
|
|
Apr 3 11:45:09 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:45:09 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:45:09 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:45:09 splunk3 spamd[12010]: spamd: processing message <200904031845.n33Ij8xT021678@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:45:11 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 11:45:11 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46922,mid=<200904031845.n33Ij8xT021678@virt2.int.splunk.com>,bayes=0.111800341159231,autolearn=no
|
|
Apr 3 11:45:11 splunk3 sendmail[629]: n33Ij9lM000628: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:45:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:45:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:45:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:46:08 splunk3 sendmail[884]: n33Ik8G6000884: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:47:08 splunk3 sendmail[1124]: n33Il8NI001124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:48:08 splunk3 sendmail[1359]: n33Im8gQ001359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:48:58 splunk3 sendmail[1535]: n33ImtJR001535: from=<spamme@splunkit.com>, size=2723, class=0, nrcpts=1, msgid=<200904031848.n33ImtJR001535@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=adsl-dyn208.78-99-30.t-com.sk [78.99.30.208]
|
|
Apr 3 11:48:58 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46966
|
|
Apr 3 11:48:58 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:48:58 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:48:58 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:48:58 splunk3 spamd[12010]: spamd: processing message <200904031848.n33ImtJR001535@splunk3.splunkit.com> for spamme:501
|
|
Apr 3 11:49:00 splunk3 spamd[12010]: spamd: identified spam (32.0/5.0) for spamme:501 in 2.6 seconds, 3132 bytes.
|
|
Apr 3 11:49:00 splunk3 spamd[12010]: spamd: result: Y 32 - BAYES_99,HELO_DYNAMIC_DHCP,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=2.6,size=3132,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46966,mid=<200904031848.n33ImtJR001535@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 3 11:49:00 splunk3 sendmail[1559]: n33ImtJR001535: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33054, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:49:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:49:08 splunk3 sendmail[1602]: n33In8Ap001602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:50:08 splunk3 sendmail[1846]: n33Io8Qq001846: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:50:09 splunk3 sendmail[1848]: n33Io9Wt001848: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031850.n33Io91M022290@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:50:10 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46978
|
|
Apr 3 11:50:10 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:50:10 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:50:10 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:50:10 splunk3 spamd[12010]: spamd: processing message <200904031850.n33Io91M022290@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:50:12 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 11:50:12 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46978,mid=<200904031850.n33Io91M022290@virt2.int.splunk.com>,bayes=0.111792913890651,autolearn=no
|
|
Apr 3 11:50:12 splunk3 sendmail[1849]: n33Io9Wt001848: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:50:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:50:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:50:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:51:08 splunk3 sendmail[2110]: n33Ip8Z2002110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:52:08 splunk3 sendmail[2345]: n33Iq8Ox002345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:53:08 splunk3 sendmail[2591]: n33Ir8rB002591: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:54:08 splunk3 sendmail[2841]: n33Is8HH002841: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:55:08 splunk3 sendmail[3099]: n33It8Cv003099: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:55:10 splunk3 sendmail[3102]: n33ItAO0003102: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031855.n33ItAQ4022905@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 11:55:10 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47042
|
|
Apr 3 11:55:10 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 11:55:10 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 11:55:10 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 11:55:10 splunk3 spamd[12010]: spamd: processing message <200904031855.n33ItAQ4022905@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 11:55:12 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 3 11:55:12 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47042,mid=<200904031855.n33ItAQ4022905@virt2.int.splunk.com>,bayes=0.111792913890651,autolearn=no
|
|
Apr 3 11:55:12 splunk3 sendmail[3103]: n33ItAO0003102: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 11:55:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 11:55:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 11:55:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 11:56:08 splunk3 sendmail[3350]: n33Iu8Hn003350: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 11:57:08 splunk3 sendmail[3608]: n33Iv8fs003608: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:58:08 splunk3 sendmail[3853]: n33Iw8xg003853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 11:59:08 splunk3 sendmail[4106]: n33Ix8cb004106: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:00:01 splunk3 sendmail[4327]: n33J010b004327: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904031900.n33J010b004327@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 12:00:01 splunk3 sendmail[4329]: n33J010b004327: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 12:00:01 splunk3 sendmail[4329]: n33J010b004327: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 3 12:00:01 splunk3 sendmail[4329]: n33J010b004327: n33J010b004329: postmaster notify: User unknown
|
|
Apr 3 12:00:02 splunk3 sendmail[4329]: n33J010b004329: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:00:04 splunk3 sendmail[4432]: n33J04ef004432: from=root, size=291, class=0, nrcpts=1, msgid=<200904031900.n33J04ef004432@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 12:00:04 splunk3 sendmail[4436]: n33J04oZ004436: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904031900.n33J04ef004432@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 12:00:04 splunk3 sendmail[4432]: n33J04ef004432: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33J04oZ004436 Message accepted for delivery)
|
|
Apr 3 12:00:05 splunk3 sendmail[4437]: n33J04oZ004436: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:00:08 splunk3 sendmail[4458]: n33J08eE004458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:00:11 splunk3 sendmail[4461]: n33J0BNw004461: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031900.n33J0BFk023574@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:00:11 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47106
|
|
Apr 3 12:00:11 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:00:11 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 12:00:11 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 12:00:11 splunk3 sendmail[4462]: n33J0BNw004461: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:00:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:00:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:00:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:01:07 splunk3 sendmail[4675]: n33J1135004675: from=root, size=443, class=0, nrcpts=1, msgid=<200904031901.n33J1135004675@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 12:01:07 splunk3 sendmail[4719]: n33J17lx004719: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904031901.n33J1135004675@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 12:01:07 splunk3 sendmail[4675]: n33J1135004675: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33J17lx004719 Message accepted for delivery)
|
|
Apr 3 12:01:08 splunk3 sendmail[4724]: n33J18aH004724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:01:08 splunk3 sendmail[4720]: n33J17lx004719: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:02:08 splunk3 sendmail[4971]: n33J28vk004971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:03:08 splunk3 sendmail[5245]: n33J38EF005245: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:04:08 splunk3 sendmail[5485]: n33J48lA005485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:04:25 splunk3 sendmail[4744]: n33J1DCu004744: ruleset=check_rcpt, arg1=<rigobertomann@ashi.com>, relay=iwo203.internetdsl.tpnet.pl [95.48.66.203], reject=550 5.7.1 <rigobertomann@ashi.com>... Relaying denied
|
|
Apr 3 12:04:25 splunk3 sendmail[4744]: n33J1DCu004744: from=<sureshy@storm.ca>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=iwo203.internetdsl.tpnet.pl [95.48.66.203]
|
|
Apr 3 12:05:08 splunk3 sendmail[5734]: n33J58AI005734: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:05:12 splunk3 sendmail[5754]: n33J5C2c005754: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031905.n33J5BmJ024265@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:05:12 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47163
|
|
Apr 3 12:05:12 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:05:12 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 12:05:12 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 12:05:12 splunk3 sendmail[5755]: n33J5C2c005754: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:05:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:05:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:05:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:06:08 splunk3 sendmail[5983]: n33J68Sc005983: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:07:08 splunk3 sendmail[6221]: n33J78hX006221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:08:08 splunk3 sendmail[6461]: n33J884b006461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:09:08 splunk3 sendmail[6700]: n33J98bm006700: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:10:02 splunk3 sendmail[7026]: n33JA2Qq007026: from=root, size=292, class=0, nrcpts=1, msgid=<200904031910.n33JA2Qq007026@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 12:10:02 splunk3 sendmail[7031]: n33JA2Bp007031: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904031910.n33JA2Qq007026@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 12:10:02 splunk3 sendmail[7026]: n33JA2Qq007026: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33JA2Bp007031 Message accepted for delivery)
|
|
Apr 3 12:10:03 splunk3 sendmail[7032]: n33JA2Bp007031: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:10:08 splunk3 sendmail[7054]: n33JA8O4007054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:10:13 splunk3 sendmail[7077]: n33JADmd007077: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031910.n33JADaH024877@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:10:13 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47220
|
|
Apr 3 12:10:13 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:10:13 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:10:13 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:10:13 splunk3 spamd[12010]: spamd: processing message <200904031910.n33JADaH024877@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:10:15 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 12:10:15 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47220,mid=<200904031910.n33JADaH024877@virt2.int.splunk.com>,bayes=0.111792913890651,autolearn=no
|
|
Apr 3 12:10:15 splunk3 sendmail[7078]: n33JADmd007077: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:10:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:10:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:10:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:11:08 splunk3 sendmail[7309]: n33JB8ci007309: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 12:11:38 splunk3 sendmail[7426]: n33JBcgp007426: ruleset=check_rcpt, arg1=<sanjinn001@yahoo.com.tw>, relay=220-133-119-46.HINET-IP.hinet.net [220.133.119.46], reject=550 5.7.1 <sanjinn001@yahoo.com.tw>... Relaying denied
|
|
Apr 3 12:12:08 splunk3 sendmail[7551]: n33JC89Y007551: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:13:08 splunk3 sendmail[7793]: n33JD83h007793: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:14:08 splunk3 sendmail[8028]: n33JE8a2008028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:15:08 splunk3 sendmail[8276]: n33JF8Ch008276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:15:14 splunk3 sendmail[8295]: n33JFD2W008295: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031915.n33JFDvj025675@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:15:14 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47276
|
|
Apr 3 12:15:14 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:15:14 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:15:14 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:15:14 splunk3 spamd[12010]: spamd: processing message <200904031915.n33JFDvj025675@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:15:16 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 12:15:16 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47276,mid=<200904031915.n33JFDvj025675@virt2.int.splunk.com>,bayes=0.111792913890651,autolearn=no
|
|
Apr 3 12:15:16 splunk3 sendmail[8296]: n33JFD2W008295: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:15:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:15:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:15:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:16:08 splunk3 sendmail[8526]: n33JG8jt008526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:17:08 splunk3 sendmail[8763]: n33JH8UX008763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:18:08 splunk3 sendmail[8998]: n33JI8UI008998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:19:08 splunk3 sendmail[9235]: n33JJ8VT009235: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:20:08 splunk3 sendmail[9488]: n33JK8t2009488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:20:14 splunk3 sendmail[9509]: n33JKEGm009509: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031920.n33JKEj7026312@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:20:14 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47332
|
|
Apr 3 12:20:14 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:20:14 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:20:14 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:20:14 splunk3 spamd[12010]: spamd: processing message <200904031920.n33JKEj7026312@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:20:16 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 12:20:16 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47332,mid=<200904031920.n33JKEj7026312@virt2.int.splunk.com>,bayes=0.111792913890651,autolearn=no
|
|
Apr 3 12:20:16 splunk3 sendmail[9512]: n33JKEGm009509: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:20:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:20:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:20:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:21:08 splunk3 sendmail[9751]: n33JL8M5009751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:22:08 splunk3 sendmail[9986]: n33JM8L8009986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:23:08 splunk3 sendmail[10230]: n33JN8ek010230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:24:08 splunk3 sendmail[10462]: n33JO8tu010462: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:25:08 splunk3 sendmail[10713]: n33JP8vQ010713: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:25:15 splunk3 sendmail[10736]: n33JPFrh010736: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031925.n33JPEYw026920@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:25:15 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47387
|
|
Apr 3 12:25:15 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:25:15 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:25:15 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:25:15 splunk3 spamd[12010]: spamd: processing message <200904031925.n33JPEYw026920@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:25:17 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 12:25:17 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47387,mid=<200904031925.n33JPEYw026920@virt2.int.splunk.com>,bayes=0.111792913890651,autolearn=no
|
|
Apr 3 12:25:17 splunk3 sendmail[10737]: n33JPFrh010736: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:25:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:25:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:25:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:26:08 splunk3 sendmail[10962]: n33JQ8rh010962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 12:27:08 splunk3 sendmail[11202]: n33JR8vX011202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:28:08 splunk3 sendmail[11434]: n33JS8Qj011434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:29:08 splunk3 sendmail[11672]: n33JT8nr011672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:30:08 splunk3 sendmail[11923]: n33JU8k4011923: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:30:16 splunk3 sendmail[11942]: n33JUGfF011942: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031930.n33JUF84027538@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:30:16 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47444
|
|
Apr 3 12:30:16 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:30:16 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:30:16 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:30:16 splunk3 spamd[12010]: spamd: processing message <200904031930.n33JUF84027538@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:30:18 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 12:30:18 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47444,mid=<200904031930.n33JUF84027538@virt2.int.splunk.com>,bayes=0.111792913890651,autolearn=no
|
|
Apr 3 12:30:18 splunk3 sendmail[11943]: n33JUGfF011942: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:30:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:30:34 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:30:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:31:08 splunk3 sendmail[12174]: n33JV8JI012174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:32:08 splunk3 sendmail[12412]: n33JW8J4012412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:32:17 splunk3 sendmail[12235]: n33JVQaX012235: from=<torco@justdropped.com>, size=5718, class=0, nrcpts=1, msgid=<5619019dc43a$f8f1c67c$09f74219@justdropped.com>, proto=ESMTP, daemon=MTA, relay=dsl85-98-54318.ttnet.net.tr [85.98.212.46] (may be forged)
|
|
Apr 3 12:32:17 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47465
|
|
Apr 3 12:32:17 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:32:17 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:32:17 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:32:17 splunk3 spamd[12010]: spamd: processing message <5619019dc43a$f8f1c67c$09f74219@justdropped.com> for spamme:501
|
|
Apr 3 12:32:19 splunk3 spamd[12010]: spamd: identified spam (38.2/5.0) for spamme:501 in 1.7 seconds, 6051 bytes.
|
|
Apr 3 12:32:19 splunk3 spamd[12010]: spamd: result: Y 38 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_DHCP,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_NJABL_PROXY,RCVD_IN_SORBS_DUL,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.7,size=6051,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47465,mid=<5619019dc43a$f8f1c67c$09f74219@justdropped.com>,bayes=1,autolearn=spam
|
|
Apr 3 12:32:19 splunk3 sendmail[12449]: n33JVQaX012235: to=<spamme@splunkit.com>, delay=00:00:08, xdelay=00:00:02, mailer=local, pri=35956, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:32:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:33:08 splunk3 sendmail[12653]: n33JX8VA012653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:34:08 splunk3 sendmail[12887]: n33JY8kT012887: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:35:08 splunk3 sendmail[13133]: n33JZ8rZ013133: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:35:17 splunk3 sendmail[13170]: n33JZH9s013170: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031935.n33JZG4N028291@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:35:17 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47501
|
|
Apr 3 12:35:17 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:35:17 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:35:17 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:35:17 splunk3 spamd[12010]: spamd: processing message <200904031935.n33JZG4N028291@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:35:19 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 12:35:19 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47501,mid=<200904031935.n33JZG4N028291@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 12:35:19 splunk3 sendmail[13171]: n33JZH9s013170: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:35:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:35:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:35:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:36:08 splunk3 sendmail[13422]: n33Ja8TL013422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:37:08 splunk3 sendmail[13660]: n33Jb839013660: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:38:08 splunk3 sendmail[13898]: n33Jc8xT013898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:39:08 splunk3 sendmail[14138]: n33Jd8pF014138: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:40:08 splunk3 sendmail[14387]: n33Je8Fr014387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:40:17 splunk3 sendmail[14428]: n33JeHlr014428: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031940.n33JeHKV028923@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:40:17 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47556
|
|
Apr 3 12:40:17 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:40:17 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:40:17 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:40:17 splunk3 spamd[12010]: spamd: processing message <200904031940.n33JeHKV028923@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:40:20 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 3 12:40:20 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47556,mid=<200904031940.n33JeHKV028923@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 12:40:20 splunk3 sendmail[14430]: n33JeHlr014428: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:40:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:40:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:40:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:41:08 splunk3 sendmail[14643]: n33Jf8bA014643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 12:42:08 splunk3 sendmail[14878]: n33Jg8WI014878: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:43:08 splunk3 sendmail[15117]: n33Jh8IC015117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:44:08 splunk3 sendmail[15352]: n33Ji88e015352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:45:08 splunk3 sendmail[15600]: n33Jj8RK015600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:45:18 splunk3 sendmail[15639]: n33JjIZ0015639: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031945.n33JjI8t029532@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:45:18 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47613
|
|
Apr 3 12:45:18 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:45:18 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:45:18 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:45:18 splunk3 spamd[12010]: spamd: processing message <200904031945.n33JjI8t029532@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:45:21 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 12:45:21 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47613,mid=<200904031945.n33JjI8t029532@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 12:45:21 splunk3 sendmail[15640]: n33JjIZ0015639: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:45:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:45:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:45:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:46:08 splunk3 sendmail[15849]: n33Jk8Gb015849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:47:08 splunk3 sendmail[16086]: n33Jl8YK016086: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:48:08 splunk3 sendmail[16320]: n33Jm81c016320: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:49:08 splunk3 sendmail[16558]: n33Jn8CX016558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:50:08 splunk3 sendmail[16809]: n33Jo8Vk016809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:50:18 splunk3 sendmail[16847]: n33JoIfD016847: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031950.n33JoIgt030144@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:50:18 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47668
|
|
Apr 3 12:50:18 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:50:18 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:50:18 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:50:18 splunk3 spamd[12010]: spamd: processing message <200904031950.n33JoIgt030144@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:50:20 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 12:50:20 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47668,mid=<200904031950.n33JoIgt030144@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 12:50:21 splunk3 sendmail[16848]: n33JoIfD016847: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:50:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:50:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:50:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:51:08 splunk3 sendmail[17062]: n33Jp8q8017062: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:52:08 splunk3 sendmail[17296]: n33Jq8FC017296: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:53:08 splunk3 sendmail[17540]: n33Jr87w017540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:54:08 splunk3 sendmail[17776]: n33Js81G017776: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:54:11 splunk3 sendmail[17775]: n33Js8g2017775: from=<spamme@splunkit.com>, size=2719, class=0, nrcpts=1, msgid=<200904031954.n33Js8g2017775@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=ccd50.neoplus.adsl.tpnet.pl [83.30.127.50]
|
|
Apr 3 12:54:11 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47707
|
|
Apr 3 12:54:11 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:54:11 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:54:11 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:54:11 splunk3 spamd[12010]: spamd: processing message <200904031954.n33Js8g2017775@splunk3.splunkit.com> for spamme:501
|
|
Apr 3 12:54:13 splunk3 spamd[12010]: spamd: identified spam (21.1/5.0) for spamme:501 in 1.6 seconds, 3126 bytes.
|
|
Apr 3 12:54:13 splunk3 spamd[12010]: spamd: result: Y 21 - AWL,BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_SORBS_DUL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=1.6,size=3126,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47707,mid=<200904031954.n33Js8g2017775@splunk3.splunkit.com>,bayes=1,autolearn=no
|
|
Apr 3 12:54:13 splunk3 sendmail[17794]: n33Js8g2017775: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33048, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:54:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:55:08 splunk3 sendmail[18030]: n33Jt8nE018030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:55:19 splunk3 sendmail[18068]: n33JtJ1K018068: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904031955.n33JtIee030757@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 12:55:19 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47725
|
|
Apr 3 12:55:19 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 12:55:19 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 12:55:19 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 12:55:19 splunk3 spamd[12010]: spamd: processing message <200904031955.n33JtIee030757@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 12:55:21 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 12:55:21 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47725,mid=<200904031955.n33JtIee030757@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 12:55:21 splunk3 sendmail[18069]: n33JtJ1K018068: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 12:55:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 12:55:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 12:55:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 12:56:08 splunk3 sendmail[18280]: n33Ju8bn018280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 12:57:08 splunk3 sendmail[18520]: n33Jv8sA018520: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:58:08 splunk3 sendmail[18753]: n33Jw8IM018753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 12:59:08 splunk3 sendmail[18992]: n33Jx8OI018992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:00:04 splunk3 sendmail[19274]: n33K04V8019274: from=root, size=291, class=0, nrcpts=1, msgid=<200904032000.n33K04V8019274@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 13:00:04 splunk3 sendmail[19278]: n33K04lj019278: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904032000.n33K04V8019274@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 13:00:04 splunk3 sendmail[19274]: n33K04V8019274: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33K04lj019278 Message accepted for delivery)
|
|
Apr 3 13:00:05 splunk3 sendmail[19279]: n33K04lj019278: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:00:06 splunk3 sendmail[19312]: n33K06SG019312: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904032000.n33K06SG019312@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 13:00:06 splunk3 sendmail[19314]: n33K06SG019312: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 13:00:06 splunk3 sendmail[19314]: n33K06SG019312: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 13:00:06 splunk3 sendmail[19314]: n33K06SG019312: n33K06SG019314: postmaster notify: User unknown
|
|
Apr 3 13:00:08 splunk3 sendmail[19314]: n33K06SG019314: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:00:08 splunk3 sendmail[19328]: n33K08rd019328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:00:19 splunk3 sendmail[19369]: n33K0Jal019369: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032000.n33K0JsG031392@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:00:19 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47789
|
|
Apr 3 13:00:19 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:00:19 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 13:00:19 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 13:00:19 splunk3 sendmail[19370]: n33K0Jal019369: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:00:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:00:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:00:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:01:08 splunk3 sendmail[19589]: n33K18Db019589: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:01:10 splunk3 sendmail[19566]: n33K11Lj019566: from=root, size=443, class=0, nrcpts=1, msgid=<200904032001.n33K11Lj019566@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 13:01:10 splunk3 sendmail[19591]: n33K1AUl019591: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904032001.n33K11Lj019566@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 13:01:10 splunk3 sendmail[19566]: n33K11Lj019566: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33K1AUl019591 Message accepted for delivery)
|
|
Apr 3 13:01:11 splunk3 sendmail[19592]: n33K1AUl019591: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:02:08 splunk3 sendmail[19832]: n33K28cW019832: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:03:08 splunk3 sendmail[20069]: n33K381V020069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:04:08 splunk3 sendmail[20302]: n33K487v020302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:05:08 splunk3 sendmail[20549]: n33K58ug020549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:05:19 splunk3 sendmail[20588]: n33K5J5Z020588: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032005.n33K5JgH032077@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:05:19 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47846
|
|
Apr 3 13:05:19 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:05:19 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 13:05:19 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 13:05:19 splunk3 sendmail[20589]: n33K5J5Z020588: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:05:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:05:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:05:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:06:08 splunk3 sendmail[20797]: n33K682T020797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:07:08 splunk3 sendmail[21035]: n33K78O2021035: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:08:08 splunk3 sendmail[21276]: n33K88QR021276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:09:08 splunk3 sendmail[21517]: n33K98J6021517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:10:02 splunk3 sendmail[21829]: n33KA2nh021829: from=root, size=292, class=0, nrcpts=1, msgid=<200904032010.n33KA2nh021829@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 13:10:02 splunk3 sendmail[21834]: n33KA2wM021834: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904032010.n33KA2nh021829@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 13:10:02 splunk3 sendmail[21829]: n33KA2nh021829: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33KA2wM021834 Message accepted for delivery)
|
|
Apr 3 13:10:03 splunk3 sendmail[21835]: n33KA2wM021834: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:10:08 splunk3 sendmail[21871]: n33KA8S5021871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:10:20 splunk3 sendmail[21911]: n33KAKHW021911: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032010.n33KAKI3032685@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:10:20 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47902
|
|
Apr 3 13:10:20 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:10:20 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:10:20 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:10:20 splunk3 spamd[12010]: spamd: processing message <200904032010.n33KAKI3032685@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:10:23 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 13:10:23 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47902,mid=<200904032010.n33KAKI3032685@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 13:10:23 splunk3 sendmail[21912]: n33KAKHW021911: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:10:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:10:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:10:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:11:08 splunk3 sendmail[22127]: n33KB8G1022127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 13:11:38 splunk3 sendmail[7426]: n33JBcgp007426: timeout waiting for input from 220-133-119-46.HINET-IP.hinet.net during server cmd read
|
|
Apr 3 13:11:38 splunk3 sendmail[7426]: n33JBcgp007426: lost input channel from 220-133-119-46.HINET-IP.hinet.net [220.133.119.46] to MTA after rcpt
|
|
Apr 3 13:11:38 splunk3 sendmail[7426]: n33JBcgp007426: from=<0403in@163.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=220-133-119-46.HINET-IP.hinet.net [220.133.119.46]
|
|
Apr 3 13:12:08 splunk3 sendmail[22361]: n33KC89J022361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:13:09 splunk3 sendmail[22599]: n33KD99e022599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:14:09 splunk3 sendmail[22834]: n33KE9VD022834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:15:09 splunk3 sendmail[23084]: n33KF9HH023084: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:15:21 splunk3 sendmail[23141]: n33KFLpg023141: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032015.n33KFK0q001013@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:15:21 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47959
|
|
Apr 3 13:15:21 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:15:21 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:15:21 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:15:21 splunk3 spamd[12010]: spamd: processing message <200904032015.n33KFK0q001013@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:15:23 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 3 13:15:23 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47959,mid=<200904032015.n33KFK0q001013@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 13:15:23 splunk3 sendmail[23142]: n33KFLpg023141: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:15:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:15:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:15:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:16:09 splunk3 sendmail[23334]: n33KG9IL023334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:17:09 splunk3 sendmail[23573]: n33KH96V023573: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:18:09 splunk3 sendmail[23808]: n33KI9ct023808: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:19:09 splunk3 sendmail[24045]: n33KJ9uA024045: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:20:09 splunk3 sendmail[24294]: n33KK9kX024294: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:20:21 splunk3 sendmail[24351]: n33KKLvH024351: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032020.n33KKL58001681@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:20:21 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48014
|
|
Apr 3 13:20:21 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:20:21 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:20:21 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:20:21 splunk3 spamd[12010]: spamd: processing message <200904032020.n33KKL58001681@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:20:23 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1305 bytes.
|
|
Apr 3 13:20:23 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48014,mid=<200904032020.n33KKL58001681@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 13:20:23 splunk3 sendmail[24352]: n33KKLvH024351: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:20:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:20:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:20:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:21:09 splunk3 sendmail[24547]: n33KL96K024547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:22:09 splunk3 sendmail[24782]: n33KM9YJ024782: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:23:09 splunk3 sendmail[25026]: n33KN9BQ025026: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:24:09 splunk3 sendmail[25258]: n33KO900025258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:25:09 splunk3 sendmail[25505]: n33KP9uw025505: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:25:22 splunk3 sendmail[25561]: n33KPMP3025561: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032025.n33KPMFM002296@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:25:22 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48070
|
|
Apr 3 13:25:22 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:25:22 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:25:22 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:25:22 splunk3 spamd[12010]: spamd: processing message <200904032025.n33KPMFM002296@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:25:24 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 13:25:24 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48070,mid=<200904032025.n33KPMFM002296@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 13:25:24 splunk3 sendmail[25562]: n33KPMP3025561: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:25:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:25:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:25:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:26:09 splunk3 sendmail[25754]: n33KQ9Ul025754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 13:27:09 splunk3 sendmail[25992]: n33KR9ZU025992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:28:09 splunk3 sendmail[26226]: n33KS9CQ026226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:29:09 splunk3 sendmail[26467]: n33KT9Oa026467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:29:39 splunk3 sendmail[26586]: n33KTdWC026586: ruleset=check_rcpt, arg1=<sanjinn001@yahoo.com.tw>, relay=61-231-68-105.dynamic.hinet.net [61.231.68.105], reject=550 5.7.1 <sanjinn001@yahoo.com.tw>... Relaying denied
|
|
Apr 3 13:30:09 splunk3 sendmail[26710]: n33KU9I1026710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:30:23 splunk3 sendmail[26780]: n33KUMR6026780: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032030.n33KUM0u002923@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:30:23 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48127
|
|
Apr 3 13:30:23 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:30:23 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:30:23 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:30:23 splunk3 spamd[12010]: spamd: processing message <200904032030.n33KUM0u002923@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:30:25 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 13:30:25 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48127,mid=<200904032030.n33KUM0u002923@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 13:30:25 splunk3 sendmail[26781]: n33KUMR6026780: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:30:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:30:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:30:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:31:09 splunk3 sendmail[26972]: n33KV9g6026972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:32:09 splunk3 sendmail[27208]: n33KW9UK027208: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:33:09 splunk3 sendmail[27445]: n33KX9W4027445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:34:09 splunk3 sendmail[27679]: n33KY9QK027679: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:35:09 splunk3 sendmail[27918]: n33KZ9wQ027918: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:35:23 splunk3 sendmail[27989]: n33KZNna027989: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032035.n33KZN74003662@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:35:23 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48182
|
|
Apr 3 13:35:23 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:35:23 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:35:23 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:35:23 splunk3 spamd[12010]: spamd: processing message <200904032035.n33KZN74003662@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:35:25 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 3 13:35:25 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48182,mid=<200904032035.n33KZN74003662@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 13:35:25 splunk3 sendmail[27990]: n33KZNna027989: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:35:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:35:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:35:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:36:09 splunk3 sendmail[28178]: n33Ka9SD028178: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:37:09 splunk3 sendmail[28416]: n33Kb9rb028416: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:38:09 splunk3 sendmail[28653]: n33Kc9xH028653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:39:09 splunk3 sendmail[28890]: n33Kd9jI028890: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:40:09 splunk3 sendmail[29129]: n33Ke9As029129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:40:24 splunk3 sendmail[29199]: n33KeOap029199: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032040.n33KeNQX004302@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:40:24 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48238
|
|
Apr 3 13:40:24 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:40:24 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:40:24 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:40:24 splunk3 spamd[12010]: spamd: processing message <200904032040.n33KeNQX004302@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:40:26 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 13:40:26 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48238,mid=<200904032040.n33KeNQX004302@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 13:40:26 splunk3 sendmail[29200]: n33KeOap029199: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:40:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:40:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:40:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:41:09 splunk3 sendmail[29392]: n33Kf93d029392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 13:41:51 splunk3 sendmail[29567]: n33Kfp3I029567: from=<btrickett@welcometorsi.com>, size=2722, class=0, nrcpts=1, msgid=<dfa663ca0904031341i5ec6b357of7709bcc625ec081@mail.gmail.com>, proto=ESMTP, daemon=MTA, relay=mail-ew0-f177.google.com [209.85.219.177]
|
|
Apr 3 13:41:51 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48254
|
|
Apr 3 13:41:51 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:41:52 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:41:52 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:41:52 splunk3 spamd[12010]: spamd: processing message <dfa663ca0904031341i5ec6b357of7709bcc625ec081@mail.gmail.com> for spamme:501
|
|
Apr 3 13:41:54 splunk3 spamd[12010]: spamd: clean message (1.4/5.0) for spamme:501 in 2.5 seconds, 3036 bytes.
|
|
Apr 3 13:41:54 splunk3 spamd[12010]: spamd: result: . 1 - BAYES_50,HTML_10_20,HTML_MESSAGE scantime=2.5,size=3036,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48254,mid=<dfa663ca0904031341i5ec6b357of7709bcc625ec081@mail.gmail.com>,bayes=0.499738967874068,autolearn=no
|
|
Apr 3 13:41:54 splunk3 sendmail[29568]: n33Kfp3I029567: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=32942, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:41:54 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:42:09 splunk3 sendmail[29633]: n33Kg9Fk029633: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:43:09 splunk3 sendmail[29873]: n33Kh9xn029873: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:44:09 splunk3 sendmail[30111]: n33Ki9np030111: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:45:09 splunk3 sendmail[30349]: n33Kj9wu030349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:45:24 splunk3 sendmail[30419]: n33KjO6A030419: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032045.n33KjOg7004913@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:45:24 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48295
|
|
Apr 3 13:45:24 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:45:24 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:45:24 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:45:24 splunk3 spamd[12010]: spamd: processing message <200904032045.n33KjOg7004913@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:45:26 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 3 13:45:26 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48295,mid=<200904032045.n33KjOg7004913@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 13:45:26 splunk3 sendmail[30420]: n33KjO6A030419: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:45:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:45:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:45:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:46:09 splunk3 sendmail[30608]: n33Kk9A2030608: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:47:09 splunk3 sendmail[30848]: n33Kl9uE030848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:48:09 splunk3 sendmail[31080]: n33Km9q2031080: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:49:09 splunk3 sendmail[31318]: n33Kn970031318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:50:09 splunk3 sendmail[31561]: n33Ko9LH031561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:50:25 splunk3 sendmail[31630]: n33KoO8f031630: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032050.n33KoOO4005528@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:50:25 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48351
|
|
Apr 3 13:50:25 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:50:25 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:50:25 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:50:25 splunk3 spamd[12010]: spamd: processing message <200904032050.n33KoOO4005528@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:50:27 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1305 bytes.
|
|
Apr 3 13:50:27 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48351,mid=<200904032050.n33KoOO4005528@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 13:50:27 splunk3 sendmail[31631]: n33KoO8f031630: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:50:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:50:33 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:50:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:51:09 splunk3 sendmail[31825]: n33Kp9SM031825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:52:09 splunk3 sendmail[32057]: n33Kq9Ja032057: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:53:09 splunk3 sendmail[32299]: n33Kr9J9032299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:54:09 splunk3 sendmail[32532]: n33Ks9kQ032532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:55:09 splunk3 sendmail[301]: n33Kt9NT000301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:55:25 splunk3 sendmail[373]: n33KtPW7000373: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032055.n33KtPkS006132@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 13:55:25 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48406
|
|
Apr 3 13:55:25 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 13:55:25 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 13:55:25 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 13:55:25 splunk3 spamd[12010]: spamd: processing message <200904032055.n33KtPkS006132@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 13:55:27 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 3 13:55:27 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48406,mid=<200904032055.n33KtPkS006132@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 13:55:27 splunk3 sendmail[386]: n33KtPW7000373: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 13:55:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 13:55:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 13:55:49 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 13:56:09 splunk3 sendmail[560]: n33Ku9EO000560: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 13:57:09 splunk3 sendmail[800]: n33Kv9ro000800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:58:09 splunk3 sendmail[1036]: n33Kw94C001036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 13:59:09 splunk3 sendmail[1276]: n33Kx9Qb001276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:00:04 splunk3 sendmail[1557]: n33L04oa001557: from=root, size=291, class=0, nrcpts=1, msgid=<200904032100.n33L04oa001557@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 14:00:04 splunk3 sendmail[1561]: n33L04qG001561: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904032100.n33L04oa001557@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 14:00:04 splunk3 sendmail[1557]: n33L04oa001557: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33L04qG001561 Message accepted for delivery)
|
|
Apr 3 14:00:05 splunk3 sendmail[1562]: n33L04qG001561: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:00:09 splunk3 sendmail[1586]: n33L09de001586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:00:12 splunk3 sendmail[1617]: n33L0Cso001617: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904032100.n33L0Cso001617@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 14:00:12 splunk3 sendmail[1619]: n33L0Cso001617: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 14:00:12 splunk3 sendmail[1619]: n33L0Cso001617: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 3 14:00:12 splunk3 sendmail[1619]: n33L0Cso001617: n33L0Cso001619: postmaster notify: User unknown
|
|
Apr 3 14:00:14 splunk3 sendmail[1619]: n33L0Cso001619: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:00:25 splunk3 sendmail[1689]: n33L0POn001689: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032100.n33L0PZR006772@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:00:25 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48471
|
|
Apr 3 14:00:25 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:00:25 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 14:00:25 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 14:00:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:00:25 splunk3 sendmail[1690]: n33L0POn001689: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:00:26 splunk3 sendmail[1669]: n33L0Mjr001669: from=<spamme@splunkit.com>, size=2736, class=0, nrcpts=1, msgid=<200904032100.n33L0Mjr001669@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=[78.165.141.50]
|
|
Apr 3 14:00:26 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48472
|
|
Apr 3 14:00:26 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:00:26 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 14:00:26 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 14:00:26 splunk3 sendmail[1694]: n33L0Mjr001669: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:02, xdelay=00:00:00, mailer=local, pri=33024, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:00:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:00:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:00:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:01:09 splunk3 sendmail[1876]: n33L19e9001876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:01:12 splunk3 sendmail[1853]: n33L11Pl001853: from=root, size=443, class=0, nrcpts=1, msgid=<200904032101.n33L11Pl001853@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 14:01:12 splunk3 sendmail[1896]: n33L1Cgd001896: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904032101.n33L11Pl001853@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 14:01:12 splunk3 sendmail[1853]: n33L11Pl001853: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33L1Cgd001896 Message accepted for delivery)
|
|
Apr 3 14:01:14 splunk3 sendmail[1897]: n33L1Cgd001896: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:02:09 splunk3 sendmail[2120]: n33L291f002120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:03:09 splunk3 sendmail[2358]: n33L39hm002358: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:04:09 splunk3 sendmail[2598]: n33L49Vn002598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:05:09 splunk3 sendmail[2850]: n33L593J002850: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:05:26 splunk3 sendmail[2937]: n33L5QTU002937: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032105.n33L5Q9w007456@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:05:26 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48528
|
|
Apr 3 14:05:26 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:05:26 splunk3 spamd[12010]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 14:05:26 splunk3 spamd[12010]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 14:05:26 splunk3 sendmail[2938]: n33L5QTU002937: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:05:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:05:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:05:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:06:09 splunk3 sendmail[3117]: n33L69Lf003117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:07:09 splunk3 sendmail[3357]: n33L79m7003357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:08:09 splunk3 sendmail[3616]: n33L89LW003616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:09:09 splunk3 sendmail[3863]: n33L99HZ003863: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:10:02 splunk3 sendmail[4196]: n33LA2JZ004196: from=root, size=292, class=0, nrcpts=1, msgid=<200904032110.n33LA2JZ004196@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 14:10:02 splunk3 sendmail[4203]: n33LA2iL004203: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904032110.n33LA2JZ004196@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 14:10:02 splunk3 sendmail[4196]: n33LA2JZ004196: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33LA2iL004203 Message accepted for delivery)
|
|
Apr 3 14:10:04 splunk3 sendmail[4204]: n33LA2iL004203: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:10:09 splunk3 sendmail[4226]: n33LA9xQ004226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:10:27 splunk3 sendmail[4327]: n33LARAS004327: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032110.n33LAQHK008070@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:10:27 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48585
|
|
Apr 3 14:10:27 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:10:27 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:10:27 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:10:27 splunk3 spamd[12010]: spamd: processing message <200904032110.n33LAQHK008070@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:10:29 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 14:10:29 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48585,mid=<200904032110.n33LAQHK008070@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 14:10:29 splunk3 sendmail[4328]: n33LARAS004327: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:10:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:10:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:10:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:11:09 splunk3 sendmail[4503]: n33LB9pV004503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 14:12:09 splunk3 sendmail[4740]: n33LC9rx004740: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:13:09 splunk3 sendmail[4990]: n33LD9Og004990: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:14:09 splunk3 sendmail[5260]: n33LE9B7005260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:15:09 splunk3 sendmail[5503]: n33LF9D8005503: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:15:27 splunk3 sendmail[5589]: n33LFRB9005589: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032115.n33LFRin008869@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:15:27 splunk3 spamd[12010]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48642
|
|
Apr 3 14:15:27 splunk3 spamd[12010]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:15:27 splunk3 spamd[12010]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:15:27 splunk3 spamd[12010]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:15:27 splunk3 spamd[12010]: spamd: processing message <200904032115.n33LFRin008869@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:15:29 splunk3 spamd[12010]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 14:15:29 splunk3 spamd[12010]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48642,mid=<200904032115.n33LFRin008869@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 14:15:29 splunk3 sendmail[5591]: n33LFRB9005589: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:15:29 splunk3 spamd[3033]: prefork: child states: BI
|
|
Apr 3 14:15:29 splunk3 spamd[3033]: spamd: handled cleanup of child pid 12010 due to SIGCHLD
|
|
Apr 3 14:15:29 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 5597
|
|
Apr 3 14:15:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:15:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:15:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:16:09 splunk3 sendmail[5761]: n33LG9Ya005761: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:17:09 splunk3 sendmail[6000]: n33LH9jG006000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:18:09 splunk3 sendmail[6236]: n33LI9BP006236: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:18:51 splunk3 sendmail[6410]: n33LIpEI006410: from=<3O33WSRQKBtgAIIAF84F8LNM-HIL8JFSAIIAF8.6IGMJ4GG8MJFOHECN.6IG@alerts.bounces.google.com>, size=11351, class=0, nrcpts=1, msgid=<000e0cd47e1e5e76ef0466ad18c8@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 3 14:18:51 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48675
|
|
Apr 3 14:18:51 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:18:51 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:18:51 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:18:51 splunk3 spamd[5597]: spamd: processing message <000e0cd47e1e5e76ef0466ad18c8@google.com> for spamme:501
|
|
Apr 3 14:18:53 splunk3 spamd[5597]: spamd: clean message (-0.5/5.0) for spamme:501 in 1.8 seconds, 11785 bytes.
|
|
Apr 3 14:18:53 splunk3 spamd[5597]: spamd: result: . 0 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY,URIBL_SBL scantime=1.8,size=11785,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48675,mid=<000e0cd47e1e5e76ef0466ad18c8@google.com>,bayes=0,autolearn=no
|
|
Apr 3 14:18:53 splunk3 sendmail[6411]: n33LIpEI006410: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=41566, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:18:53 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:19:09 splunk3 sendmail[6481]: n33LJ9ZK006481: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:20:09 splunk3 sendmail[6724]: n33LK9c2006724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:20:27 splunk3 sendmail[6810]: n33LKR6Y006810: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904032120.n33LKR9R009503@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:20:27 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48698
|
|
Apr 3 14:20:27 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:20:27 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:20:27 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:20:27 splunk3 spamd[5597]: spamd: processing message <200904032120.n33LKR9R009503@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:20:29 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1305 bytes.
|
|
Apr 3 14:20:29 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48698,mid=<200904032120.n33LKR9R009503@virt2.int.splunk.com>,bayes=0.168641996784997,autolearn=no
|
|
Apr 3 14:20:29 splunk3 sendmail[6811]: n33LKR6Y006810: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:20:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:20:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:20:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:21:09 splunk3 sendmail[6986]: n33LL90q006986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:22:09 splunk3 sendmail[7220]: n33LM9Ij007220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:23:09 splunk3 sendmail[7464]: n33LN9cJ007464: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:24:09 splunk3 sendmail[7707]: n33LO9Pg007707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:25:09 splunk3 sendmail[7946]: n33LP9ws007946: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:25:28 splunk3 sendmail[8033]: n33LPSKx008033: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032125.n33LPRIg010130@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:25:28 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48754
|
|
Apr 3 14:25:28 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:25:28 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:25:28 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:25:28 splunk3 spamd[5597]: spamd: processing message <200904032125.n33LPRIg010130@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:25:30 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 14:25:30 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48754,mid=<200904032125.n33LPRIg010130@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 14:25:30 splunk3 sendmail[8034]: n33LPSKx008033: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:25:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:25:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:25:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:26:09 splunk3 sendmail[8206]: n33LQ9RN008206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 14:27:09 splunk3 sendmail[8445]: n33LR9SY008445: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:28:09 splunk3 sendmail[8677]: n33LS9ce008677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:29:09 splunk3 sendmail[8914]: n33LT9GY008914: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:29:39 splunk3 sendmail[26586]: n33KTdWC026586: timeout waiting for input from 61-231-68-105.dynamic.hinet.net during server cmd read
|
|
Apr 3 14:29:39 splunk3 sendmail[26586]: n33KTdWC026586: lost input channel from 61-231-68-105.dynamic.hinet.net [61.231.68.105] to MTA after rcpt
|
|
Apr 3 14:29:39 splunk3 sendmail[26586]: n33KTdWC026586: from=<0403pc@163.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=61-231-68-105.dynamic.hinet.net [61.231.68.105]
|
|
Apr 3 14:30:09 splunk3 sendmail[9155]: n33LU9hu009155: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:30:29 splunk3 sendmail[9244]: n33LUTkD009244: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032130.n33LUSAr010730@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:30:29 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48810
|
|
Apr 3 14:30:29 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:30:29 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:30:29 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:30:29 splunk3 spamd[5597]: spamd: processing message <200904032130.n33LUSAr010730@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:30:31 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 14:30:31 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48810,mid=<200904032130.n33LUSAr010730@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 14:30:31 splunk3 sendmail[9245]: n33LUTkD009244: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:30:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:30:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:30:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:31:09 splunk3 sendmail[9417]: n33LV94g009417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:32:09 splunk3 sendmail[9665]: n33LW95S009665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:33:09 splunk3 sendmail[9904]: n33LX93n009904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:34:09 splunk3 sendmail[10139]: n33LY9Yt010139: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:35:09 splunk3 sendmail[10379]: n33LZ94s010379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:35:29 splunk3 sendmail[10467]: n33LZTEH010467: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032135.n33LZTPE011502@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:35:29 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48866
|
|
Apr 3 14:35:29 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:35:29 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:35:29 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:35:29 splunk3 spamd[5597]: spamd: processing message <200904032135.n33LZTPE011502@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:35:31 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 14:35:31 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48866,mid=<200904032135.n33LZTPE011502@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 14:35:32 splunk3 sendmail[10468]: n33LZTEH010467: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:35:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:35:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:35:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:36:09 splunk3 sendmail[10637]: n33La9QQ010637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:37:09 splunk3 sendmail[10876]: n33Lb9wr010876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:38:09 splunk3 sendmail[11115]: n33Lc9Op011115: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:39:09 splunk3 sendmail[11355]: n33Ld9NP011355: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:40:09 splunk3 sendmail[11596]: n33Le9vs011596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:40:30 splunk3 sendmail[11708]: n33LeULq011708: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032140.n33LeT72012109@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:40:30 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48922
|
|
Apr 3 14:40:30 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:40:30 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:40:30 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:40:30 splunk3 spamd[5597]: spamd: processing message <200904032140.n33LeT72012109@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:40:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:40:32 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 3 14:40:32 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48922,mid=<200904032140.n33LeT72012109@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 14:40:32 splunk3 sendmail[11709]: n33LeULq011708: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:40:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:40:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:41:09 splunk3 sendmail[11860]: n33Lf9w2011860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 14:42:09 splunk3 sendmail[12095]: n33Lg9hA012095: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:43:09 splunk3 sendmail[12331]: n33Lh9XI012331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:44:09 splunk3 sendmail[12566]: n33Li9CK012566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:45:00 splunk3 sendmail[12786]: n33Lj04M012786: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032145.n33Lj0X3012645@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:45:00 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 48966
|
|
Apr 3 14:45:00 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:45:00 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:45:00 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:45:00 splunk3 spamd[5597]: spamd: processing message <200904032145.n33Lj0X3012645@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:45:02 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 3 14:45:02 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=48966,mid=<200904032145.n33Lj0X3012645@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 14:45:02 splunk3 sendmail[12787]: n33Lj04M012786: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:45:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:45:09 splunk3 sendmail[12810]: n33Lj9BK012810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:45:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:45:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:46:09 splunk3 sendmail[13064]: n33Lk94l013064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:47:09 splunk3 sendmail[13334]: n33Ll95E013334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:48:09 splunk3 sendmail[13574]: n33Lm9U5013574: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:49:09 splunk3 sendmail[13813]: n33Ln9Sw013813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:50:01 splunk3 sendmail[14028]: n33Lo1Uu014028: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032150.n33Lo18p013256@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:50:01 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49022
|
|
Apr 3 14:50:01 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:50:01 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:50:01 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:50:01 splunk3 spamd[5597]: spamd: processing message <200904032150.n33Lo18p013256@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:50:03 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 14:50:03 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49022,mid=<200904032150.n33Lo18p013256@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 14:50:03 splunk3 sendmail[14029]: n33Lo1Uu014028: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:50:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:50:09 splunk3 sendmail[14061]: n33Lo9Ep014061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:50:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:50:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:51:09 splunk3 sendmail[14316]: n33Lp9Zn014316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:52:09 splunk3 sendmail[14550]: n33Lq9iB014550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:53:09 splunk3 sendmail[14795]: n33Lr9TI014795: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:54:09 splunk3 sendmail[15030]: n33Ls9EU015030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:55:02 splunk3 sendmail[15248]: n33Lt2kc015248: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032155.n33Lt1c1013905@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 14:55:02 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49077
|
|
Apr 3 14:55:02 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 14:55:02 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 14:55:02 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 14:55:02 splunk3 spamd[5597]: spamd: processing message <200904032155.n33Lt1c1013905@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 14:55:04 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 14:55:04 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49077,mid=<200904032155.n33Lt1c1013905@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 14:55:04 splunk3 sendmail[15249]: n33Lt2kc015248: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 14:55:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 14:55:09 splunk3 sendmail[15275]: n33Lt9DE015275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:55:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 14:55:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 14:56:09 splunk3 sendmail[15529]: n33Lu90h015529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 14:57:09 splunk3 sendmail[15769]: n33Lv9pK015769: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:58:09 splunk3 sendmail[16001]: n33Lw9Ih016001: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 14:59:09 splunk3 sendmail[16239]: n33Lx9oO016239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:00:02 splunk3 sendmail[16512]: n33M02C7016512: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032200.n33M0281014548@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:00:02 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49134
|
|
Apr 3 15:00:02 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:00:02 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 15:00:02 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 15:00:02 splunk3 sendmail[16513]: n33M02C7016512: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:00:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:00:04 splunk3 sendmail[16528]: n33M04F3016528: from=root, size=291, class=0, nrcpts=1, msgid=<200904032200.n33M04F3016528@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 15:00:04 splunk3 sendmail[16532]: n33M049T016532: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904032200.n33M04F3016528@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 15:00:04 splunk3 sendmail[16528]: n33M04F3016528: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33M049T016532 Message accepted for delivery)
|
|
Apr 3 15:00:06 splunk3 sendmail[16533]: n33M049T016532: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:00:09 splunk3 sendmail[16555]: n33M094f016555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:00:19 splunk3 sendmail[16605]: n33M0JcY016605: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904032200.n33M0JcY016605@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 15:00:19 splunk3 sendmail[16607]: n33M0JcY016605: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 15:00:19 splunk3 sendmail[16607]: n33M0JcY016605: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 15:00:19 splunk3 sendmail[16607]: n33M0JcY016605: n33M0JcY016607: postmaster notify: User unknown
|
|
Apr 3 15:00:20 splunk3 sendmail[16607]: n33M0JcY016607: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:00:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:00:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:01:09 splunk3 sendmail[16834]: n33M19sF016834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:01:12 splunk3 sendmail[16813]: n33M11kF016813: from=root, size=443, class=0, nrcpts=1, msgid=<200904032201.n33M11kF016813@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 15:01:12 splunk3 sendmail[16852]: n33M1CFP016852: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904032201.n33M11kF016813@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 15:01:12 splunk3 sendmail[16813]: n33M11kF016813: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33M1CFP016852 Message accepted for delivery)
|
|
Apr 3 15:01:13 splunk3 sendmail[16853]: n33M1CFP016852: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:02:09 splunk3 sendmail[17074]: n33M291x017074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:03:09 splunk3 sendmail[17313]: n33M39q9017313: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:04:09 splunk3 sendmail[17563]: n33M49bH017563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:05:03 splunk3 sendmail[17768]: n33M53jr017768: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032205.n33M522l015236@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:05:03 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49198
|
|
Apr 3 15:05:03 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:05:03 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 15:05:03 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 15:05:03 splunk3 sendmail[17769]: n33M53jr017768: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:05:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:05:09 splunk3 sendmail[17807]: n33M59LB017807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:05:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:05:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:06:09 splunk3 sendmail[18059]: n33M69AZ018059: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:07:09 splunk3 sendmail[18299]: n33M79i6018299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:08:09 splunk3 sendmail[18539]: n33M89BP018539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:09:09 splunk3 sendmail[18777]: n33M997m018777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:10:02 splunk3 sendmail[19076]: n33MA2CV019076: from=root, size=292, class=0, nrcpts=1, msgid=<200904032210.n33MA2CV019076@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 15:10:02 splunk3 sendmail[19081]: n33MA2Yj019081: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904032210.n33MA2CV019076@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 15:10:02 splunk3 sendmail[19076]: n33MA2CV019076: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33MA2Yj019081 Message accepted for delivery)
|
|
Apr 3 15:10:03 splunk3 sendmail[19082]: n33MA2Yj019081: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:10:03 splunk3 sendmail[19086]: n33MA3Gd019086: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032210.n33MA3SG015848@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:10:03 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49255
|
|
Apr 3 15:10:03 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:10:03 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:10:03 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:10:03 splunk3 spamd[5597]: spamd: processing message <200904032210.n33MA3SG015848@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:10:05 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 3 15:10:05 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49255,mid=<200904032210.n33MA3SG015848@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 15:10:05 splunk3 sendmail[19087]: n33MA3Gd019086: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:10:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:10:09 splunk3 sendmail[19128]: n33MA9Nj019128: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:10:32 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:10:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:11:09 splunk3 sendmail[19385]: n33MB93h019385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 15:12:09 splunk3 sendmail[19620]: n33MC9XS019620: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:13:09 splunk3 sendmail[19860]: n33MD9OT019860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:14:09 splunk3 sendmail[20102]: n33ME9dX020102: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:15:04 splunk3 sendmail[20307]: n33MF43V020307: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032215.n33MF3EO016640@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:15:04 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49311
|
|
Apr 3 15:15:04 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:15:04 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:15:04 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:15:04 splunk3 spamd[5597]: spamd: processing message <200904032215.n33MF3EO016640@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:15:06 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 15:15:06 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49311,mid=<200904032215.n33MF3EO016640@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 15:15:06 splunk3 sendmail[20308]: n33MF43V020307: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:15:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:15:09 splunk3 sendmail[20346]: n33MF9rl020346: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:15:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:15:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:16:09 splunk3 sendmail[20599]: n33MG9dt020599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:17:09 splunk3 sendmail[20838]: n33MH9o9020838: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:18:09 splunk3 sendmail[21071]: n33MI971021071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:19:09 splunk3 sendmail[21308]: n33MJ9ec021308: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:20:04 splunk3 sendmail[21533]: n33MK4RL021533: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032220.n33MK4vY017273@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:20:04 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49367
|
|
Apr 3 15:20:04 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:20:04 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:20:04 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:20:04 splunk3 spamd[5597]: spamd: processing message <200904032220.n33MK4vY017273@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:20:06 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 15:20:06 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49367,mid=<200904032220.n33MK4vY017273@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 15:20:06 splunk3 sendmail[21534]: n33MK4RL021533: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:20:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:20:09 splunk3 sendmail[21555]: n33MK9Pi021555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:20:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:20:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:21:09 splunk3 sendmail[21814]: n33ML9V3021814: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:22:09 splunk3 sendmail[22049]: n33MM9dT022049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:23:09 splunk3 sendmail[22293]: n33MN9L6022293: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:24:09 splunk3 sendmail[22528]: n33MO9La022528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:25:05 splunk3 sendmail[22747]: n33MP53t022747: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032225.n33MP5BC017884@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:25:05 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49423
|
|
Apr 3 15:25:05 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:25:05 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:25:05 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:25:05 splunk3 spamd[5597]: spamd: processing message <200904032225.n33MP5BC017884@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:25:07 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 15:25:07 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49423,mid=<200904032225.n33MP5BC017884@virt2.int.splunk.com>,bayes=0.111788462071818,autolearn=no
|
|
Apr 3 15:25:07 splunk3 sendmail[22748]: n33MP53t022747: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:25:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:25:10 splunk3 sendmail[22772]: n33MP9FL022772: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:25:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:25:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:26:10 splunk3 sendmail[23025]: n33MQAMr023025: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 15:27:10 splunk3 sendmail[23264]: n33MRApk023264: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:28:10 splunk3 sendmail[23501]: n33MSA0B023501: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:28:57 splunk3 sendmail[23404]: n33MRjrM023404: from=<shreeramu@deleteddomains.com>, size=5795, class=0, nrcpts=1, msgid=<3fe6019dc4e7$840cc51a$22268ce9@deleteddomains.com>, proto=ESMTP, daemon=MTA, relay=cpc1-lutn7-0-0-cust1018.lutn.cable.ntl.com [86.16.95.251]
|
|
Apr 3 15:28:57 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49469
|
|
Apr 3 15:28:57 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:28:57 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:28:57 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:28:57 splunk3 spamd[5597]: spamd: processing message <3fe6019dc4e7$840cc51a$22268ce9@deleteddomains.com> for spamme:501
|
|
Apr 3 15:28:59 splunk3 spamd[5597]: spamd: identified spam (44.0/5.0) for spamme:501 in 1.5 seconds, 6156 bytes.
|
|
Apr 3 15:28:59 splunk3 spamd[5597]: spamd: result: Y 44 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_HCC,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.5,size=6156,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49469,mid=<3fe6019dc4e7$840cc51a$22268ce9@deleteddomains.com>,bayes=1,autolearn=spam
|
|
Apr 3 15:28:59 splunk3 sendmail[23682]: n33MRjrM023404: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=36047, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:28:59 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:29:10 splunk3 sendmail[23745]: n33MTAbe023745: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:30:05 splunk3 sendmail[23970]: n33MU50P023970: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032230.n33MU5ev018501@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:30:06 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49480
|
|
Apr 3 15:30:06 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:30:06 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:30:06 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:30:06 splunk3 spamd[5597]: spamd: processing message <200904032230.n33MU5ev018501@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:30:08 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 15:30:08 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49480,mid=<200904032230.n33MU5ev018501@virt2.int.splunk.com>,bayes=0.111784010616078,autolearn=no
|
|
Apr 3 15:30:08 splunk3 sendmail[23971]: n33MU50P023970: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:30:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:30:10 splunk3 sendmail[23993]: n33MUAAk023993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:30:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:30:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:31:10 splunk3 sendmail[24250]: n33MVA7c024250: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:32:10 splunk3 sendmail[24484]: n33MWABo024484: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:33:10 splunk3 sendmail[24721]: n33MXA4Q024721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:34:10 splunk3 sendmail[24955]: n33MYAgN024955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:35:06 splunk3 sendmail[25177]: n33MZ6EL025177: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032235.n33MZ6pp019252@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:35:06 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49536
|
|
Apr 3 15:35:06 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:35:06 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:35:06 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:35:06 splunk3 spamd[5597]: spamd: processing message <200904032235.n33MZ6pp019252@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:35:08 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 15:35:08 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49536,mid=<200904032235.n33MZ6pp019252@virt2.int.splunk.com>,bayes=0.111784010616078,autolearn=no
|
|
Apr 3 15:35:08 splunk3 sendmail[25178]: n33MZ6EL025177: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:35:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:35:10 splunk3 sendmail[25201]: n33MZAE4025201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:35:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:35:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:36:10 splunk3 sendmail[25453]: n33MaAVw025453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:37:10 splunk3 sendmail[25692]: n33MbAXf025692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:38:10 splunk3 sendmail[25932]: n33McAcX025932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:39:10 splunk3 sendmail[26170]: n33MdAvN026170: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:40:07 splunk3 sendmail[26393]: n33Me7bD026393: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032240.n33Me6dL019893@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:40:07 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49591
|
|
Apr 3 15:40:07 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:40:07 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:40:07 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:40:07 splunk3 spamd[5597]: spamd: processing message <200904032240.n33Me6dL019893@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:40:09 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 15:40:09 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49591,mid=<200904032240.n33Me6dL019893@virt2.int.splunk.com>,bayes=0.111784010616078,autolearn=no
|
|
Apr 3 15:40:09 splunk3 sendmail[26394]: n33Me7bD026393: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:40:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:40:10 splunk3 sendmail[26417]: n33MeAWK026417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:40:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:40:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:41:10 splunk3 sendmail[26675]: n33MfAbI026675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 15:42:10 splunk3 sendmail[26911]: n33MgADE026911: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:43:10 splunk3 sendmail[27149]: n33MhAdL027149: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:44:10 splunk3 sendmail[27386]: n33MiAea027386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:44:35 splunk3 sendmail[27252]: n33Mhd3n027252: from=<sheng_jyf@dropscout.com>, size=5717, class=0, nrcpts=1, msgid=<50a8019db41d$cd9f7f53$f9802cd1@dropscout.com>, proto=ESMTP, daemon=MTA, relay=dsl85-106-65070.ttnet.net.tr [85.106.254.46] (may be forged)
|
|
Apr 3 15:44:35 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49644
|
|
Apr 3 15:44:35 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:44:35 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:44:35 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:44:35 splunk3 spamd[5597]: spamd: processing message <50a8019db41d$cd9f7f53$f9802cd1@dropscout.com> for spamme:501
|
|
Apr 3 15:44:37 splunk3 spamd[5597]: spamd: identified spam (43.0/5.0) for spamme:501 in 1.8 seconds, 6057 bytes.
|
|
Apr 3 15:44:37 splunk3 spamd[5597]: spamd: result: Y 42 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HELO_DYNAMIC_DHCP,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.8,size=6057,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49644,mid=<50a8019db41d$cd9f7f53$f9802cd1@dropscout.com>,bayes=1,autolearn=spam
|
|
Apr 3 15:44:37 splunk3 sendmail[27485]: n33Mhd3n027252: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:02, mailer=local, pri=35958, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:44:37 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:45:07 splunk3 sendmail[27612]: n33Mj7ow027612: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032245.n33Mj7iq020502@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:45:07 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49649
|
|
Apr 3 15:45:07 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:45:07 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:45:07 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:45:07 splunk3 spamd[5597]: spamd: processing message <200904032245.n33Mj7iq020502@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:45:09 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 15:45:09 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49649,mid=<200904032245.n33Mj7iq020502@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 15:45:09 splunk3 sendmail[27613]: n33Mj7ow027612: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:45:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:45:10 splunk3 sendmail[27636]: n33MjAKi027636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:45:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:45:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:46:10 splunk3 sendmail[27888]: n33MkA5v027888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:47:10 splunk3 sendmail[28127]: n33MlAvu028127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:48:10 splunk3 sendmail[28361]: n33MmASC028361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:49:10 splunk3 sendmail[28599]: n33MnA9q028599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:50:08 splunk3 sendmail[28821]: n33Mo8x9028821: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032250.n33Mo7qh021113@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:50:08 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49704
|
|
Apr 3 15:50:08 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:50:08 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:50:08 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:50:08 splunk3 spamd[5597]: spamd: processing message <200904032250.n33Mo7qh021113@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:50:10 splunk3 sendmail[28844]: n33MoAp6028844: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:50:10 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 3 15:50:10 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49704,mid=<200904032250.n33Mo7qh021113@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 15:50:10 splunk3 sendmail[28822]: n33Mo8x9028821: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:50:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:50:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:50:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:51:10 splunk3 sendmail[29100]: n33MpA1c029100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:52:10 splunk3 sendmail[29335]: n33MqAqV029335: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:53:10 splunk3 sendmail[29579]: n33MrApH029579: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:54:10 splunk3 sendmail[29812]: n33MsAPA029812: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:55:08 splunk3 sendmail[30034]: n33Mt8cm030034: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032255.n33Mt8UL021719@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 15:55:08 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49760
|
|
Apr 3 15:55:08 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 15:55:08 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 15:55:08 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 15:55:08 splunk3 spamd[5597]: spamd: processing message <200904032255.n33Mt8UL021719@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 15:55:10 splunk3 sendmail[30056]: n33MtAlt030056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:55:10 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 15:55:10 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49760,mid=<200904032255.n33Mt8UL021719@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 15:55:10 splunk3 sendmail[30035]: n33Mt8cm030034: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 15:55:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 15:55:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 15:55:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 15:56:10 splunk3 sendmail[30311]: n33MuAWm030311: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 15:57:10 splunk3 sendmail[30550]: n33MvAoc030550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:58:10 splunk3 sendmail[30785]: n33MwAqM030785: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 15:59:10 splunk3 sendmail[31025]: n33MxA13031025: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:00:04 splunk3 sendmail[31307]: n33N04ra031307: from=root, size=291, class=0, nrcpts=1, msgid=<200904032300.n33N04ra031307@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 16:00:04 splunk3 sendmail[31311]: n33N044x031311: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904032300.n33N04ra031307@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 16:00:04 splunk3 sendmail[31307]: n33N04ra031307: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33N044x031311 Message accepted for delivery)
|
|
Apr 3 16:00:05 splunk3 sendmail[31312]: n33N044x031311: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:00:09 splunk3 sendmail[31334]: n33N096Q031334: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032300.n33N090F022356@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:00:09 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49817
|
|
Apr 3 16:00:09 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:00:09 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 16:00:09 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 16:00:09 splunk3 sendmail[31336]: n33N096Q031334: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:00:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:00:10 splunk3 sendmail[31341]: n33N0AX2031341: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:00:24 splunk3 sendmail[31407]: n33N0OOX031407: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904032300.n33N0OOX031407@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 16:00:24 splunk3 sendmail[31409]: n33N0OOX031407: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 16:00:24 splunk3 sendmail[31409]: n33N0OOX031407: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 16:00:24 splunk3 sendmail[31409]: n33N0OOX031407: n33N0OOX031409: postmaster notify: User unknown
|
|
Apr 3 16:00:26 splunk3 sendmail[31409]: n33N0OOX031409: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:00:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:00:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:01:10 splunk3 sendmail[31620]: n33N1AUp031620: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:01:12 splunk3 sendmail[31581]: n33N11uW031581: from=root, size=443, class=0, nrcpts=1, msgid=<200904032301.n33N11uW031581@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 16:01:12 splunk3 sendmail[31624]: n33N1CGH031624: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904032301.n33N11uW031581@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 16:01:12 splunk3 sendmail[31581]: n33N11uW031581: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33N1CGH031624 Message accepted for delivery)
|
|
Apr 3 16:01:14 splunk3 sendmail[31625]: n33N1CGH031624: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:02:10 splunk3 sendmail[31860]: n33N2A1k031860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:03:10 splunk3 sendmail[32099]: n33N3An3032099: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:04:10 splunk3 sendmail[32331]: n33N4Ara032331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:05:10 splunk3 sendmail[32571]: n33N5AEG032571: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:05:10 splunk3 sendmail[32570]: n33N5AF0032570: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032305.n33N59dV023039@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:05:10 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49881
|
|
Apr 3 16:05:10 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:05:10 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 16:05:10 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 16:05:10 splunk3 sendmail[32572]: n33N5AF0032570: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:05:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:05:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:05:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:06:10 splunk3 sendmail[361]: n33N6AhH000361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:07:10 splunk3 sendmail[600]: n33N7AfS000600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:08:10 splunk3 sendmail[837]: n33N8Ap6000837: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:09:10 splunk3 sendmail[1073]: n33N9A41001073: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:10:03 splunk3 sendmail[1375]: n33NA3ih001375: from=root, size=292, class=0, nrcpts=1, msgid=<200904032310.n33NA3ih001375@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 16:10:03 splunk3 sendmail[1380]: n33NA3XH001380: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904032310.n33NA3ih001375@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 16:10:03 splunk3 sendmail[1375]: n33NA3ih001375: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n33NA3XH001380 Message accepted for delivery)
|
|
Apr 3 16:10:04 splunk3 sendmail[1381]: n33NA3XH001380: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:10:10 splunk3 sendmail[1420]: n33NAAn2001420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:10:11 splunk3 sendmail[1421]: n33NABWD001421: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032310.n33NAANH023683@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:10:11 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49938
|
|
Apr 3 16:10:11 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:10:11 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:10:11 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:10:11 splunk3 spamd[5597]: spamd: processing message <200904032310.n33NAANH023683@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:10:13 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 16:10:13 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49938,mid=<200904032310.n33NAANH023683@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:10:13 splunk3 sendmail[1422]: n33NABWD001421: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:10:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:10:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:10:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:11:10 splunk3 sendmail[1684]: n33NBAT1001684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 16:12:10 splunk3 sendmail[1921]: n33NCAmB001921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:13:10 splunk3 sendmail[2161]: n33NDANJ002161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:14:10 splunk3 sendmail[2396]: n33NEAUe002396: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:15:10 splunk3 sendmail[2639]: n33NFAQY002639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:15:11 splunk3 sendmail[2640]: n33NFB0S002640: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032315.n33NFBQm024479@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:15:11 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 49994
|
|
Apr 3 16:15:11 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:15:11 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:15:11 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:15:11 splunk3 spamd[5597]: spamd: processing message <200904032315.n33NFBQm024479@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:15:13 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 3 16:15:13 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=49994,mid=<200904032315.n33NFBQm024479@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:15:13 splunk3 sendmail[2642]: n33NFB0S002640: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:15:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:15:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:15:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:16:10 splunk3 sendmail[2908]: n33NGAfg002908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:17:10 splunk3 sendmail[3158]: n33NHA5M003158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:18:10 splunk3 sendmail[3394]: n33NIAmO003394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:19:10 splunk3 sendmail[3654]: n33NJA0N003654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:20:10 splunk3 sendmail[3906]: n33NKAfq003906: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:20:12 splunk3 sendmail[3907]: n33NKCQc003907: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032320.n33NKC7V025112@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:20:12 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50050
|
|
Apr 3 16:20:12 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:20:12 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:20:12 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:20:12 splunk3 spamd[5597]: spamd: processing message <200904032320.n33NKC7V025112@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:20:14 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 16:20:14 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50050,mid=<200904032320.n33NKC7V025112@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:20:14 splunk3 sendmail[3908]: n33NKCQc003907: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:20:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:20:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:20:48 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:21:10 splunk3 sendmail[4182]: n33NLAlI004182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:22:10 splunk3 sendmail[4430]: n33NMAWi004430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:23:10 splunk3 sendmail[4674]: n33NNAIu004674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:24:10 splunk3 sendmail[4917]: n33NOA6C004917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:25:10 splunk3 sendmail[5194]: n33NPAvH005194: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:25:13 splunk3 sendmail[5214]: n33NPDnl005214: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032325.n33NPDlM025724@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:25:13 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50105
|
|
Apr 3 16:25:13 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:25:13 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:25:13 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:25:13 splunk3 spamd[5597]: spamd: processing message <200904032325.n33NPDlM025724@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:25:15 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 16:25:15 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50105,mid=<200904032325.n33NPDlM025724@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:25:15 splunk3 sendmail[5215]: n33NPDnl005214: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:25:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:25:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:25:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:26:10 splunk3 sendmail[5458]: n33NQAMU005458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 16:27:10 splunk3 sendmail[5699]: n33NRAx3005699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:28:10 splunk3 sendmail[5933]: n33NSAOg005933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:29:10 splunk3 sendmail[6172]: n33NTA1w006172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:30:10 splunk3 sendmail[6412]: n33NUAxt006412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:30:14 splunk3 sendmail[6431]: n33NUDcw006431: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032330.n33NUDx9026348@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:30:14 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50162
|
|
Apr 3 16:30:14 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:30:14 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:30:14 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:30:14 splunk3 spamd[5597]: spamd: processing message <200904032330.n33NUDx9026348@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:30:16 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 16:30:16 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50162,mid=<200904032330.n33NUDx9026348@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:30:16 splunk3 sendmail[6433]: n33NUDcw006431: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:30:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:30:31 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:30:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:31:10 splunk3 sendmail[6676]: n33NVAjF006676: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:32:10 splunk3 sendmail[6911]: n33NWAfO006911: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:33:10 splunk3 sendmail[7150]: n33NXAU5007150: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:34:10 splunk3 sendmail[7385]: n33NYAnG007385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:35:10 splunk3 sendmail[7632]: n33NZAEf007632: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:35:14 splunk3 sendmail[7652]: n33NZEJ7007652: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032335.n33NZEgw027093@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:35:14 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50217
|
|
Apr 3 16:35:14 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:35:14 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:35:14 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:35:14 splunk3 spamd[5597]: spamd: processing message <200904032335.n33NZEgw027093@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:35:16 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 16:35:16 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50217,mid=<200904032335.n33NZEgw027093@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:35:16 splunk3 sendmail[7653]: n33NZEJ7007652: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:35:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:35:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:35:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:36:10 splunk3 sendmail[7891]: n33NaA7L007891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:37:10 splunk3 sendmail[8127]: n33NbAhh008127: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:38:10 splunk3 sendmail[8367]: n33NcArB008367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:39:10 splunk3 sendmail[8605]: n33NdAGX008605: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:40:10 splunk3 sendmail[8845]: n33NeA0F008845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:40:15 splunk3 sendmail[8866]: n33NeFJj008866: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032340.n33NeFhC027735@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:40:15 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50273
|
|
Apr 3 16:40:15 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:40:15 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:40:15 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:40:15 splunk3 spamd[5597]: spamd: processing message <200904032340.n33NeFhC027735@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:40:17 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 16:40:17 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50273,mid=<200904032340.n33NeFhC027735@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:40:17 splunk3 sendmail[8868]: n33NeFJj008866: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:40:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:40:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:40:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:41:10 splunk3 sendmail[9111]: n33NfAH1009111: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 16:42:10 splunk3 sendmail[9344]: n33NgARn009344: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:43:10 splunk3 sendmail[9592]: n33NhAB0009592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:44:10 splunk3 sendmail[9827]: n33NiApH009827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:45:10 splunk3 sendmail[10067]: n33NjAE4010067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:45:16 splunk3 sendmail[10086]: n33NjGqq010086: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032345.n33NjFGT028346@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:45:16 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50330
|
|
Apr 3 16:45:16 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:45:16 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:45:16 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:45:16 splunk3 spamd[5597]: spamd: processing message <200904032345.n33NjFGT028346@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:45:18 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 16:45:18 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50330,mid=<200904032345.n33NjFGT028346@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:45:18 splunk3 sendmail[10087]: n33NjGqq010086: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:45:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:45:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:45:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:46:10 splunk3 sendmail[10325]: n33NkA3l010325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:47:10 splunk3 sendmail[10564]: n33NlA1N010564: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:48:10 splunk3 sendmail[10800]: n33NmAPa010800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:49:10 splunk3 sendmail[11037]: n33NnAMh011037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:50:10 splunk3 sendmail[11279]: n33NoA7Z011279: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:50:17 splunk3 sendmail[11300]: n33NoHMr011300: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032350.n33NoGRl028959@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:50:17 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50385
|
|
Apr 3 16:50:17 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:50:17 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:50:17 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:50:17 splunk3 spamd[5597]: spamd: processing message <200904032350.n33NoGRl028959@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:50:19 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 3 16:50:19 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50385,mid=<200904032350.n33NoGRl028959@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:50:19 splunk3 sendmail[11301]: n33NoHMr011300: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:50:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:50:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:50:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:51:10 splunk3 sendmail[11541]: n33NpAwM011541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:52:10 splunk3 sendmail[11777]: n33NqAU5011777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:52:31 splunk3 sendmail[11860]: n33NqU7m011860: ruleset=check_rcpt, arg1=<s2288@mail2000.com.tw>, relay=118-167-132-250.dynamic.hinet.net [118.167.132.250], reject=550 5.7.1 <s2288@mail2000.com.tw>... Relaying denied
|
|
Apr 3 16:53:10 splunk3 sendmail[12021]: n33NrAN4012021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:54:10 splunk3 sendmail[12254]: n33NsAW3012254: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:55:10 splunk3 sendmail[12492]: n33NtA7i012492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:55:17 splunk3 sendmail[12512]: n33NtH23012512: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904032355.n33NtHqe029570@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 16:55:17 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50441
|
|
Apr 3 16:55:17 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:55:17 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:55:17 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:55:17 splunk3 spamd[5597]: spamd: processing message <200904032355.n33NtHqe029570@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 16:55:19 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 16:55:19 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50441,mid=<200904032355.n33NtHqe029570@virt2.int.splunk.com>,bayes=0.111779559523394,autolearn=no
|
|
Apr 3 16:55:19 splunk3 sendmail[12514]: n33NtH23012512: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:55:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:55:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 16:55:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 16:56:10 splunk3 sendmail[12749]: n33NuA3A012749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 16:57:10 splunk3 sendmail[12989]: n33NvAZ0012989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:58:10 splunk3 sendmail[13228]: n33NwAcI013228: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 16:58:10 splunk3 sendmail[13211]: n33Nw8W8013211: from=<spamme@splunkit.com>, size=2761, class=0, nrcpts=1, msgid=<200904032358.n33Nw8W8013211@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=d-24-233-251-207.cpe.metrocast.net [24.233.251.207]
|
|
Apr 3 16:58:11 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50479
|
|
Apr 3 16:58:11 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 16:58:11 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 16:58:11 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 16:58:11 splunk3 spamd[5597]: spamd: processing message <200904032358.n33Nw8W8013211@splunk3.splunkit.com> for spamme:501
|
|
Apr 3 16:58:13 splunk3 spamd[5597]: spamd: identified spam (40.3/5.0) for spamme:501 in 2.8 seconds, 3182 bytes.
|
|
Apr 3 16:58:13 splunk3 spamd[5597]: spamd: result: Y 40 - BAYES_99,HELO_DYNAMIC_HCC,HELO_DYNAMIC_IPADDR,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.8,size=3182,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50479,mid=<200904032358.n33Nw8W8013211@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 3 16:58:13 splunk3 sendmail[13229]: n33Nw8W8013211: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:02, mailer=local, pri=33104, dsn=2.0.0, stat=Sent
|
|
Apr 3 16:58:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 16:59:10 splunk3 sendmail[13514]: n33NxAZX013514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:00:00 splunk3 sendmail[13719]: n34000b7013719: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904040000.n34000b7013719@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 17:00:00 splunk3 sendmail[13721]: n34000b7013719: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 17:00:00 splunk3 sendmail[13721]: n34000b7013719: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 17:00:00 splunk3 sendmail[13721]: n34000b7013719: n34000b7013721: postmaster notify: User unknown
|
|
Apr 3 17:00:01 splunk3 sendmail[13721]: n34000b7013721: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:00:04 splunk3 sendmail[13820]: n34004M5013820: from=root, size=291, class=0, nrcpts=1, msgid=<200904040000.n34004M5013820@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 17:00:05 splunk3 sendmail[13824]: n34004je013824: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040000.n34004M5013820@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 17:00:05 splunk3 sendmail[13820]: n34004M5013820: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34004je013824 Message accepted for delivery)
|
|
Apr 3 17:00:06 splunk3 sendmail[13825]: n34004je013824: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:00:10 splunk3 sendmail[13847]: n3400A58013847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:00:18 splunk3 sendmail[13884]: n3400IUI013884: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040000.n3400IZB030210@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:00:18 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50514
|
|
Apr 3 17:00:18 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:00:18 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 17:00:18 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 17:00:18 splunk3 sendmail[13886]: n3400IUI013884: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:00:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:00:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:00:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:01:07 splunk3 sendmail[14069]: n34011vE014069: from=root, size=443, class=0, nrcpts=1, msgid=<200904040001.n34011vE014069@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 17:01:07 splunk3 sendmail[14091]: n34017m5014091: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040001.n34011vE014069@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 17:01:07 splunk3 sendmail[14069]: n34011vE014069: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34017m5014091 Message accepted for delivery)
|
|
Apr 3 17:01:08 splunk3 sendmail[14092]: n34017m5014091: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:01:10 splunk3 sendmail[14113]: n3401ApF014113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:02:10 splunk3 sendmail[14349]: n3402AZu014349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:03:10 splunk3 sendmail[14588]: n3403Aow014588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:04:10 splunk3 sendmail[14822]: n3404A4v014822: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:05:10 splunk3 sendmail[15070]: n3405AWm015070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:05:19 splunk3 sendmail[15109]: n3405JgG015109: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040005.n3405IOW030892@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:05:19 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50571
|
|
Apr 3 17:05:19 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:05:19 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 17:05:19 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 17:05:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:05:19 splunk3 sendmail[15110]: n3405JgG015109: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:05:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:05:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:06:10 splunk3 sendmail[15319]: n3406AJ1015319: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:07:10 splunk3 sendmail[15557]: n3407APe015557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:08:10 splunk3 sendmail[15797]: n3408Ak3015797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:09:10 splunk3 sendmail[16036]: n3409AKO016036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:10:02 splunk3 sendmail[16345]: n340A2vV016345: from=root, size=292, class=0, nrcpts=1, msgid=<200904040010.n340A2vV016345@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 17:10:02 splunk3 sendmail[16350]: n340A2b9016350: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040010.n340A2vV016345@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 17:10:02 splunk3 sendmail[16345]: n340A2vV016345: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n340A2b9016350 Message accepted for delivery)
|
|
Apr 3 17:10:03 splunk3 sendmail[16351]: n340A2b9016350: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:10:10 splunk3 sendmail[16390]: n340AAsd016390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:10:19 splunk3 sendmail[16429]: n340AJDq016429: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040010.n340AJ3k031499@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:10:19 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50627
|
|
Apr 3 17:10:19 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:10:19 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:10:19 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:10:19 splunk3 spamd[5597]: spamd: processing message <200904040010.n340AJ3k031499@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:10:21 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 17:10:21 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50627,mid=<200904040010.n340AJ3k031499@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 17:10:21 splunk3 sendmail[16430]: n340AJDq016429: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:10:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:10:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:10:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:11:10 splunk3 sendmail[16645]: n340BAjs016645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 17:12:10 splunk3 sendmail[16880]: n340CAcr016880: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:13:10 splunk3 sendmail[17117]: n340DAhv017117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:14:10 splunk3 sendmail[17351]: n340EArh017351: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:15:10 splunk3 sendmail[17599]: n340FA1w017599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:15:20 splunk3 sendmail[17636]: n340FK1r017636: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040015.n340FJS5032289@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:15:20 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50684
|
|
Apr 3 17:15:20 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:15:20 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:15:20 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:15:20 splunk3 spamd[5597]: spamd: processing message <200904040015.n340FJS5032289@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:15:22 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 17:15:22 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50684,mid=<200904040015.n340FJS5032289@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 17:15:22 splunk3 sendmail[17637]: n340FK1r017636: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:15:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:15:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:15:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:16:10 splunk3 sendmail[17849]: n340GAlJ017849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:17:10 splunk3 sendmail[18089]: n340HAnr018089: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:18:10 splunk3 sendmail[18324]: n340IA53018324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:19:10 splunk3 sendmail[18562]: n340JA8B018562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:20:10 splunk3 sendmail[18815]: n340KAM1018815: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:20:20 splunk3 sendmail[18852]: n340KKhM018852: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904040020.n340KKvZ000455@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:20:20 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50740
|
|
Apr 3 17:20:20 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:20:20 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:20:20 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:20:20 splunk3 spamd[5597]: spamd: processing message <200904040020.n340KKvZ000455@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:20:22 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1302 bytes.
|
|
Apr 3 17:20:22 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50740,mid=<200904040020.n340KKvZ000455@virt2.int.splunk.com>,bayes=0.065877880708834,autolearn=no
|
|
Apr 3 17:20:22 splunk3 sendmail[18854]: n340KKhM018852: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:20:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:20:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:20:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:21:10 splunk3 sendmail[19067]: n340LATa019067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:22:10 splunk3 sendmail[19302]: n340MAj0019302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:23:10 splunk3 sendmail[19546]: n340NAEs019546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:24:10 splunk3 sendmail[19782]: n340OAYj019782: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:25:10 splunk3 sendmail[20030]: n340PA1B020030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:25:21 splunk3 sendmail[20069]: n340PK2x020069: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040025.n340PKwT001059@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:25:21 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50795
|
|
Apr 3 17:25:21 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:25:21 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:25:21 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:25:21 splunk3 spamd[5597]: spamd: processing message <200904040025.n340PKwT001059@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:25:23 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 3 17:25:23 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50795,mid=<200904040025.n340PKwT001059@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 17:25:23 splunk3 sendmail[20070]: n340PK2x020069: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:25:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:25:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:25:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:26:10 splunk3 sendmail[20280]: n340QABq020280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 17:27:10 splunk3 sendmail[20521]: n340RAb7020521: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:28:10 splunk3 sendmail[20753]: n340SAdn020753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:29:10 splunk3 sendmail[20992]: n340TAGn020992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:30:10 splunk3 sendmail[21240]: n340UA9t021240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:30:21 splunk3 sendmail[21279]: n340UL7v021279: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040030.n340UL66001717@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:30:21 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50852
|
|
Apr 3 17:30:21 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:30:21 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:30:21 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:30:21 splunk3 spamd[5597]: spamd: processing message <200904040030.n340UL66001717@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:30:23 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 3 17:30:23 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50852,mid=<200904040030.n340UL66001717@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 17:30:23 splunk3 sendmail[21280]: n340UL7v021279: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:30:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:30:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:30:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:31:10 splunk3 sendmail[21494]: n340VAZp021494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:32:10 splunk3 sendmail[21730]: n340WALR021730: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:33:10 splunk3 sendmail[21968]: n340XAdr021968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:34:10 splunk3 sendmail[22206]: n340YAg7022206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:35:10 splunk3 sendmail[22453]: n340ZAwa022453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:35:21 splunk3 sendmail[22492]: n340ZLYW022492: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040035.n340ZLpS002469@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:35:22 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50907
|
|
Apr 3 17:35:22 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:35:22 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:35:22 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:35:22 splunk3 spamd[5597]: spamd: processing message <200904040035.n340ZLpS002469@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:35:24 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 17:35:24 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50907,mid=<200904040035.n340ZLpS002469@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 17:35:24 splunk3 sendmail[22493]: n340ZLYW022492: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:35:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:35:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:35:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:36:11 splunk3 sendmail[22703]: n340aBtx022703: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:37:11 splunk3 sendmail[22941]: n340bBUN022941: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:38:11 splunk3 sendmail[23180]: n340cBDP023180: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:39:11 splunk3 sendmail[23419]: n340dBPn023419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:40:11 splunk3 sendmail[23668]: n340eB9w023668: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:40:22 splunk3 sendmail[23709]: n340eM1F023709: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040040.n340eMl9003104@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:40:22 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 50963
|
|
Apr 3 17:40:22 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:40:22 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:40:22 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:40:22 splunk3 spamd[5597]: spamd: processing message <200904040040.n340eMl9003104@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:40:24 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 3 17:40:24 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=50963,mid=<200904040040.n340eMl9003104@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 17:40:24 splunk3 sendmail[23710]: n340eM1F023709: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:40:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:40:30 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:40:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:41:11 splunk3 sendmail[23924]: n340fBDY023924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 17:42:11 splunk3 sendmail[24157]: n340gBvH024157: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:43:11 splunk3 sendmail[24395]: n340hBp8024395: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:44:11 splunk3 sendmail[24630]: n340iB4T024630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:45:11 splunk3 sendmail[24875]: n340jBpK024875: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:45:23 splunk3 sendmail[24931]: n340jNx1024931: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040045.n340jMKF003716@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:45:23 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51019
|
|
Apr 3 17:45:23 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:45:23 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:45:23 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:45:23 splunk3 spamd[5597]: spamd: processing message <200904040045.n340jMKF003716@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:45:25 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 3 17:45:25 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51019,mid=<200904040045.n340jMKF003716@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 17:45:25 splunk3 sendmail[24932]: n340jNx1024931: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:45:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:45:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:45:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:46:11 splunk3 sendmail[25125]: n340kBXh025125: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:47:11 splunk3 sendmail[25364]: n340lBKu025364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:48:11 splunk3 sendmail[25600]: n340mBi2025600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:49:11 splunk3 sendmail[25836]: n340nBmb025836: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:50:11 splunk3 sendmail[26086]: n340oBfX026086: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:50:23 splunk3 sendmail[26141]: n340oNjD026141: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040050.n340oNpj004338@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:50:23 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51075
|
|
Apr 3 17:50:23 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:50:23 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:50:23 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:50:23 splunk3 spamd[5597]: spamd: processing message <200904040050.n340oNpj004338@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:50:25 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 17:50:25 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51075,mid=<200904040050.n340oNpj004338@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 17:50:25 splunk3 sendmail[26142]: n340oNjD026141: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:50:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:50:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:51:11 splunk3 sendmail[26340]: n340pBbS026340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:52:11 splunk3 sendmail[26574]: n340qBrQ026574: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:52:31 splunk3 sendmail[11860]: n33NqU7m011860: timeout waiting for input from 118-167-132-250.dynamic.hinet.net during server cmd read
|
|
Apr 3 17:52:31 splunk3 sendmail[11860]: n33NqU7m011860: lost input channel from 118-167-132-250.dynamic.hinet.net [118.167.132.250] to MTA after rcpt
|
|
Apr 3 17:52:31 splunk3 sendmail[11860]: n33NqU7m011860: from=<titrkuy@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-167-132-250.dynamic.hinet.net [118.167.132.250]
|
|
Apr 3 17:53:11 splunk3 sendmail[26819]: n340rB8C026819: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:54:11 splunk3 sendmail[27053]: n340sB3A027053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:55:11 splunk3 sendmail[27301]: n340tBu7027301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:55:24 splunk3 sendmail[27358]: n340tN3x027358: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040055.n340tNih004940@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 17:55:24 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51130
|
|
Apr 3 17:55:24 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 17:55:24 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 17:55:24 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 17:55:24 splunk3 spamd[5597]: spamd: processing message <200904040055.n340tNih004940@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 17:55:26 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 3 17:55:26 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51130,mid=<200904040055.n340tNih004940@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 17:55:26 splunk3 sendmail[27359]: n340tN3x027358: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 17:55:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 17:55:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 17:55:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 17:56:11 splunk3 sendmail[27550]: n340uBB7027550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 17:57:11 splunk3 sendmail[27790]: n340vBHo027790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:58:11 splunk3 sendmail[28024]: n340wBPQ028024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 17:59:11 splunk3 sendmail[28264]: n340xBp0028264: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:00:04 splunk3 sendmail[28544]: n34104g1028544: from=root, size=291, class=0, nrcpts=1, msgid=<200904040100.n34104g1028544@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 18:00:04 splunk3 sendmail[28548]: n34104xw028548: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040100.n34104g1028544@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 18:00:04 splunk3 sendmail[28544]: n34104g1028544: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34104xw028548 Message accepted for delivery)
|
|
Apr 3 18:00:05 splunk3 sendmail[28549]: n34104xw028548: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:00:05 splunk3 sendmail[28566]: n341059t028566: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904040100.n341059t028566@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 18:00:05 splunk3 sendmail[28568]: n341059t028566: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 18:00:06 splunk3 sendmail[28568]: n341059t028566: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 18:00:06 splunk3 sendmail[28568]: n341059t028566: n341069t028568: postmaster notify: User unknown
|
|
Apr 3 18:00:07 splunk3 sendmail[28568]: n341069t028568: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:00:11 splunk3 sendmail[28598]: n3410BPW028598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:00:24 splunk3 sendmail[28655]: n3410Ofn028655: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040100.n3410OHJ005589@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:00:24 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51195
|
|
Apr 3 18:00:24 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:00:24 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 18:00:24 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 18:00:24 splunk3 sendmail[28657]: n3410Ofn028655: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:00:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:00:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:01:11 splunk3 sendmail[28860]: n3411BQA028860: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:01:14 splunk3 sendmail[28816]: n34111N4028816: from=root, size=443, class=0, nrcpts=1, msgid=<200904040101.n34111N4028816@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 18:01:14 splunk3 sendmail[28879]: n3411EOo028879: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040101.n34111N4028816@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 18:01:14 splunk3 sendmail[28816]: n34111N4028816: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3411EOo028879 Message accepted for delivery)
|
|
Apr 3 18:01:15 splunk3 sendmail[28880]: n3411EOo028879: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:02:11 splunk3 sendmail[29099]: n3412BrU029099: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:03:11 splunk3 sendmail[29335]: n3413Ba8029335: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:04:11 splunk3 sendmail[29570]: n3414BQ5029570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:05:11 splunk3 sendmail[29818]: n3415B74029818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:05:25 splunk3 sendmail[29873]: n3415PXP029873: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040105.n3415OWg006272@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:05:25 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51251
|
|
Apr 3 18:05:25 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:05:25 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 18:05:25 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 18:05:25 splunk3 sendmail[29874]: n3415PXP029873: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:05:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:05:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:06:11 splunk3 sendmail[30065]: n3416BHE030065: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:07:11 splunk3 sendmail[30303]: n3417BBY030303: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:08:11 splunk3 sendmail[30544]: n3418BAb030544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:09:11 splunk3 sendmail[30784]: n3419B27030784: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:10:02 splunk3 sendmail[31095]: n341A2rJ031095: from=root, size=292, class=0, nrcpts=1, msgid=<200904040110.n341A2rJ031095@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 18:10:02 splunk3 sendmail[31100]: n341A2jH031100: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040110.n341A2rJ031095@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 18:10:02 splunk3 sendmail[31095]: n341A2rJ031095: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n341A2jH031100 Message accepted for delivery)
|
|
Apr 3 18:10:03 splunk3 sendmail[31101]: n341A2jH031100: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:10:11 splunk3 sendmail[31138]: n341ABVX031138: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:10:25 splunk3 sendmail[31195]: n341APW1031195: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040110.n341APaY006886@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:10:25 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51308
|
|
Apr 3 18:10:25 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:10:25 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:10:25 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:10:25 splunk3 spamd[5597]: spamd: processing message <200904040110.n341APaY006886@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:10:27 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 18:10:27 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51308,mid=<200904040110.n341APaY006886@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 18:10:27 splunk3 sendmail[31196]: n341APW1031195: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:10:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:10:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:11:11 splunk3 sendmail[31392]: n341BBJl031392: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 18:12:11 splunk3 sendmail[31629]: n341CBD7031629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:13:11 splunk3 sendmail[31866]: n341DB36031866: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:14:11 splunk3 sendmail[32100]: n341EBh7032100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:15:11 splunk3 sendmail[32348]: n341FBqP032348: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:15:26 splunk3 sendmail[32405]: n341FQBI032405: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040115.n341FPgW007676@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:15:26 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51365
|
|
Apr 3 18:15:26 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:15:26 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:15:26 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:15:26 splunk3 spamd[5597]: spamd: processing message <200904040115.n341FPgW007676@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:15:28 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 18:15:28 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51365,mid=<200904040115.n341FPgW007676@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 18:15:28 splunk3 sendmail[32406]: n341FQBI032405: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:15:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:15:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:16:11 splunk3 sendmail[32598]: n341GBkH032598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:17:11 splunk3 sendmail[369]: n341HBmW000369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:18:11 splunk3 sendmail[602]: n341IB19000602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:19:11 splunk3 sendmail[839]: n341JBvP000839: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:20:11 splunk3 sendmail[1089]: n341KB6N001089: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:20:27 splunk3 sendmail[1170]: n341KRQa001170: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040120.n341KR3Q008310@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:20:27 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51421
|
|
Apr 3 18:20:27 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:20:27 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:20:27 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:20:27 splunk3 spamd[5597]: spamd: processing message <200904040120.n341KR3Q008310@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:20:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:20:29 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 3 18:20:29 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51421,mid=<200904040120.n341KR3Q008310@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 18:20:29 splunk3 sendmail[1171]: n341KRQa001170: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:20:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:20:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:21:11 splunk3 sendmail[1343]: n341LBmP001343: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:22:11 splunk3 sendmail[1578]: n341MBqD001578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:23:11 splunk3 sendmail[1824]: n341NBMN001824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:24:11 splunk3 sendmail[2060]: n341OBxo002060: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:25:11 splunk3 sendmail[2307]: n341PBY2002307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:25:28 splunk3 sendmail[2390]: n341PRmX002390: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040125.n341PRFA008938@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:25:28 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51477
|
|
Apr 3 18:25:28 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:25:28 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:25:28 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:25:28 splunk3 spamd[5597]: spamd: processing message <200904040125.n341PRFA008938@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:25:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:25:30 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 18:25:30 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51477,mid=<200904040125.n341PRFA008938@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 18:25:30 splunk3 sendmail[2391]: n341PRmX002390: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:25:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:25:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:26:11 splunk3 sendmail[2558]: n341QBOe002558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 18:27:11 splunk3 sendmail[2812]: n341RBRX002812: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:28:11 splunk3 sendmail[3057]: n341SBOf003057: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:29:11 splunk3 sendmail[3299]: n341TBab003299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:30:11 splunk3 sendmail[3556]: n341UBKT003556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:30:28 splunk3 sendmail[3654]: n341UShw003654: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040130.n341USCs009532@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:30:28 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51533
|
|
Apr 3 18:30:28 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:30:28 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:30:28 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:30:28 splunk3 spamd[5597]: spamd: processing message <200904040130.n341USCs009532@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:30:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:30:30 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 18:30:30 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51533,mid=<200904040130.n341USCs009532@virt2.int.splunk.com>,bayes=0.168622490565697,autolearn=no
|
|
Apr 3 18:30:30 splunk3 sendmail[3655]: n341UShw003654: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:30:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:31:11 splunk3 sendmail[3830]: n341VBdh003830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:32:11 splunk3 sendmail[4079]: n341WBHt004079: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:33:11 splunk3 sendmail[4336]: n341XBsZ004336: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:34:11 splunk3 sendmail[4570]: n341YBfp004570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:35:11 splunk3 sendmail[4818]: n341ZBn5004818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:35:28 splunk3 sendmail[4908]: n341ZSC0004908: from=<3YLnWSRQKBjockkchaWhanpo-jknalhuckkcha.YkiolWiiaolhqjgep.Yki@alerts.bounces.google.com>, size=7880, class=0, nrcpts=1, msgid=<0016368e20f61c2c010466b0ae8b@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.185]
|
|
Apr 3 18:35:28 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51589
|
|
Apr 3 18:35:28 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:35:28 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:35:28 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:35:28 splunk3 spamd[5597]: spamd: processing message <0016368e20f61c2c010466b0ae8b@google.com> for spamme:501
|
|
Apr 3 18:35:29 splunk3 sendmail[4911]: n341ZSDq004911: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040135.n341ZS3f010309@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:35:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:35:31 splunk3 spamd[5597]: spamd: clean message (-1.3/5.0) for spamme:501 in 2.1 seconds, 8310 bytes.
|
|
Apr 3 18:35:31 splunk3 spamd[5597]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=2.1,size=8310,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51589,mid=<0016368e20f61c2c010466b0ae8b@google.com>,bayes=1.66533453693773e-16,autolearn=no
|
|
Apr 3 18:35:31 splunk3 sendmail[4909]: n341ZSC0004908: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=38091, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:35:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:35:37 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51591
|
|
Apr 3 18:35:37 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:35:37 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:35:37 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:35:37 splunk3 spamd[5597]: spamd: processing message <200904040135.n341ZS3f010309@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:35:39 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 3 18:35:39 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51591,mid=<200904040135.n341ZS3f010309@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 18:35:39 splunk3 sendmail[4915]: n341ZSDq004911: to=<spamme@splunkit.com>, delay=00:00:11, xdelay=00:00:10, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:35:39 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:35:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:36:11 splunk3 sendmail[5083]: n341aBsi005083: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:37:11 splunk3 sendmail[5364]: n341bBP7005364: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:38:11 splunk3 sendmail[5603]: n341cBGx005603: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:39:11 splunk3 sendmail[5843]: n341dBbp005843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:40:11 splunk3 sendmail[6094]: n341eBHW006094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:40:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:40:30 splunk3 sendmail[6177]: n341eTE9006177: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040140.n341eTeX010920@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:40:30 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51646
|
|
Apr 3 18:40:30 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:40:30 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:40:30 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:40:30 splunk3 spamd[5597]: spamd: processing message <200904040140.n341eTeX010920@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:40:32 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 18:40:32 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51646,mid=<200904040140.n341eTeX010920@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 18:40:32 splunk3 sendmail[6178]: n341eTE9006177: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:40:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:40:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:41:11 splunk3 sendmail[6346]: n341fBA1006346: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 18:42:11 splunk3 sendmail[6580]: n341gBpv006580: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:43:11 splunk3 sendmail[6818]: n341hBFJ006818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:44:11 splunk3 sendmail[7055]: n341iBrI007055: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:45:00 splunk3 sendmail[7256]: n341j0wK007256: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040145.n341j0aB011456@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:45:00 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51689
|
|
Apr 3 18:45:00 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:45:00 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:45:00 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:45:00 splunk3 spamd[5597]: spamd: processing message <200904040145.n341j0aB011456@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:45:02 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 18:45:02 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51689,mid=<200904040145.n341j0aB011456@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 18:45:02 splunk3 sendmail[7257]: n341j0wK007256: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:45:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:45:11 splunk3 sendmail[7299]: n341jBRl007299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:45:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:45:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:46:11 splunk3 sendmail[7557]: n341kBRZ007557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:47:11 splunk3 sendmail[7801]: n341lBaP007801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:48:11 splunk3 sendmail[8033]: n341mBa2008033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:49:11 splunk3 sendmail[8270]: n341nBRP008270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:50:01 splunk3 sendmail[8468]: n341o0uJ008468: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040150.n341o0GM012071@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:50:01 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51745
|
|
Apr 3 18:50:01 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:50:01 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:50:01 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:50:01 splunk3 spamd[5597]: spamd: processing message <200904040150.n341o0GM012071@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:50:03 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 3 18:50:03 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51745,mid=<200904040150.n341o0GM012071@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 18:50:03 splunk3 sendmail[8469]: n341o0uJ008468: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:50:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:50:11 splunk3 sendmail[8516]: n341oBAR008516: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:50:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:50:47 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:51:11 splunk3 sendmail[8773]: n341pBbv008773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:52:11 splunk3 sendmail[9005]: n341qB9i009005: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:53:11 splunk3 sendmail[9249]: n341rBL0009249: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:54:11 splunk3 sendmail[9486]: n341sB0R009486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:55:01 splunk3 sendmail[9714]: n341t1UE009714: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040155.n341t1m4012676@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 18:55:01 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51800
|
|
Apr 3 18:55:01 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 18:55:01 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 18:55:01 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 18:55:01 splunk3 spamd[5597]: spamd: processing message <200904040155.n341t1m4012676@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 18:55:04 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 18:55:04 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51800,mid=<200904040155.n341t1m4012676@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 18:55:04 splunk3 sendmail[9715]: n341t1UE009714: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 18:55:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 18:55:11 splunk3 sendmail[9739]: n341tB4w009739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:55:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 18:55:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 18:56:11 splunk3 sendmail[9997]: n341uBeA009997: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 18:57:11 splunk3 sendmail[10239]: n341vBm9010239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:58:11 splunk3 sendmail[10484]: n341wBjP010484: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 18:59:11 splunk3 sendmail[10711]: n341xB7r010711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:00:02 splunk3 sendmail[10978]: n34202bE010978: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040200.n342029P013352@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:00:02 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51857
|
|
Apr 3 19:00:02 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:00:02 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 19:00:02 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 19:00:02 splunk3 sendmail[10979]: n34202bE010978: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:00:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:00:04 splunk3 sendmail[10994]: n34204Ss010994: from=root, size=291, class=0, nrcpts=1, msgid=<200904040200.n34204Ss010994@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 19:00:04 splunk3 sendmail[10998]: n34204vP010998: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040200.n34204Ss010994@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 19:00:04 splunk3 sendmail[10994]: n34204Ss010994: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34204vP010998 Message accepted for delivery)
|
|
Apr 3 19:00:07 splunk3 sendmail[10999]: n34204vP010998: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:00:11 splunk3 sendmail[11038]: n3420B7c011038: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:00:13 splunk3 sendmail[11052]: n3420DVw011052: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904040200.n3420DVw011052@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 19:00:13 splunk3 sendmail[11054]: n3420DVw011052: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 19:00:13 splunk3 sendmail[11054]: n3420DVw011052: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 19:00:13 splunk3 sendmail[11054]: n3420DVw011052: n3420DVw011054: postmaster notify: User unknown
|
|
Apr 3 19:00:14 splunk3 sendmail[11054]: n3420DVw011054: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:00:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:00:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:01:04 splunk3 sendmail[11262]: n34211RK011262: from=root, size=443, class=0, nrcpts=1, msgid=<200904040201.n34211RK011262@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 19:01:04 splunk3 sendmail[11281]: n342148P011281: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040201.n34211RK011262@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 19:01:04 splunk3 sendmail[11262]: n34211RK011262: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n342148P011281 Message accepted for delivery)
|
|
Apr 3 19:01:05 splunk3 sendmail[11282]: n342148P011281: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:01:11 splunk3 sendmail[11323]: n3421BAT011323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:02:11 splunk3 sendmail[11557]: n3422Btg011557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:03:11 splunk3 sendmail[11798]: n3423BBn011798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:04:11 splunk3 sendmail[12031]: n3424BOc012031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:05:03 splunk3 sendmail[12234]: n34253pZ012234: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040205.n34253FV014037@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:05:03 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51922
|
|
Apr 3 19:05:03 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:05:03 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 19:05:03 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 19:05:03 splunk3 sendmail[12235]: n34253pZ012234: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:05:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:05:11 splunk3 sendmail[12275]: n3425B3k012275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:05:29 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:05:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:06:11 splunk3 sendmail[12526]: n3426BPn012526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:07:11 splunk3 sendmail[12764]: n3427Bir012764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:08:11 splunk3 sendmail[13003]: n3428Blw013003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:09:11 splunk3 sendmail[13239]: n3429BdS013239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:10:02 splunk3 sendmail[13576]: n342A2Yn013576: from=root, size=292, class=0, nrcpts=1, msgid=<200904040210.n342A2Yn013576@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 19:10:03 splunk3 sendmail[13581]: n342A2CS013581: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040210.n342A2Yn013576@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 19:10:03 splunk3 sendmail[13576]: n342A2Yn013576: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n342A2CS013581 Message accepted for delivery)
|
|
Apr 3 19:10:03 splunk3 sendmail[13586]: n342A3AF013586: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040210.n342A3Gs014656@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:10:03 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 51978
|
|
Apr 3 19:10:03 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:10:03 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:10:03 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:10:03 splunk3 spamd[5597]: spamd: processing message <200904040210.n342A3Gs014656@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:10:04 splunk3 sendmail[13582]: n342A2CS013581: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:10:05 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 19:10:05 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=51978,mid=<200904040210.n342A3Gs014656@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:10:05 splunk3 sendmail[13587]: n342A3AF013586: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:10:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:10:11 splunk3 sendmail[13627]: n342ABFU013627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:10:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:10:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:11:11 splunk3 sendmail[13884]: n342BBPk013884: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 19:12:11 splunk3 sendmail[14123]: n342CB6Z014123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:13:11 splunk3 sendmail[14361]: n342DBPv014361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:14:11 splunk3 sendmail[14597]: n342EBnZ014597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:15:04 splunk3 sendmail[14800]: n342F4GJ014800: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040215.n342F4cU015449@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:15:04 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52035
|
|
Apr 3 19:15:04 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:15:04 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:15:04 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:15:04 splunk3 spamd[5597]: spamd: processing message <200904040215.n342F4cU015449@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:15:07 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 3 19:15:07 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52035,mid=<200904040215.n342F4cU015449@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:15:07 splunk3 sendmail[14801]: n342F4GJ014800: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:15:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:15:11 splunk3 sendmail[14843]: n342FBkv014843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:15:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:15:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:16:11 splunk3 sendmail[15093]: n342GBo2015093: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:17:11 splunk3 sendmail[15335]: n342HBkX015335: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:18:11 splunk3 sendmail[15569]: n342IBbl015569: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:19:11 splunk3 sendmail[15810]: n342JBG5015810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:20:05 splunk3 sendmail[16015]: n342K5KZ016015: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040220.n342K5W0016083@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:20:05 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52090
|
|
Apr 3 19:20:05 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:20:05 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:20:05 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:20:05 splunk3 spamd[5597]: spamd: processing message <200904040220.n342K5W0016083@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:20:07 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 19:20:07 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52090,mid=<200904040220.n342K5W0016083@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:20:07 splunk3 sendmail[16016]: n342K5KZ016015: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:20:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:20:11 splunk3 sendmail[16057]: n342KB94016057: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:20:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:20:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:21:11 splunk3 sendmail[16313]: n342LB9o016313: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:22:11 splunk3 sendmail[16548]: n342MBhf016548: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:23:11 splunk3 sendmail[16791]: n342NBqM016791: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:24:11 splunk3 sendmail[17026]: n342OBHS017026: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:25:05 splunk3 sendmail[17229]: n342P5Fe017229: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040225.n342P5UX016692@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:25:05 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52146
|
|
Apr 3 19:25:05 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:25:05 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:25:05 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:25:05 splunk3 spamd[5597]: spamd: processing message <200904040225.n342P5UX016692@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:25:07 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 3 19:25:07 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52146,mid=<200904040225.n342P5UX016692@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:25:07 splunk3 sendmail[17230]: n342P5Fe017229: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:25:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:25:11 splunk3 sendmail[17269]: n342PB0l017269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:25:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:25:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:26:11 splunk3 sendmail[17523]: n342QBRv017523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 19:27:11 splunk3 sendmail[17763]: n342RBvE017763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:28:11 splunk3 sendmail[17997]: n342SBwS017997: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:29:11 splunk3 sendmail[18237]: n342TBcS018237: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:30:06 splunk3 sendmail[18446]: n342U6mn018446: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040230.n342U5H2017314@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:30:06 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52201
|
|
Apr 3 19:30:06 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:30:06 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:30:06 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:30:06 splunk3 spamd[5597]: spamd: processing message <200904040230.n342U5H2017314@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:30:08 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 19:30:08 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52201,mid=<200904040230.n342U5H2017314@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:30:08 splunk3 sendmail[18460]: n342U6mn018446: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:30:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:30:11 splunk3 sendmail[18483]: n342UBm7018483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:30:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:30:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:31:11 splunk3 sendmail[18739]: n342VBo9018739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:32:11 splunk3 sendmail[18975]: n342WBXg018975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:33:11 splunk3 sendmail[19215]: n342XBLv019215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:34:11 splunk3 sendmail[19449]: n342YBTc019449: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:35:07 splunk3 sendmail[19669]: n342Z7W2019669: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040235.n342Z6r3018055@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:35:07 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52257
|
|
Apr 3 19:35:07 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:35:07 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:35:07 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:35:07 splunk3 spamd[5597]: spamd: processing message <200904040235.n342Z6r3018055@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:35:09 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 19:35:09 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52257,mid=<200904040235.n342Z6r3018055@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:35:09 splunk3 sendmail[19670]: n342Z7W2019669: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:35:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:35:12 splunk3 sendmail[19694]: n342ZBWD019694: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:35:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:35:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:36:12 splunk3 sendmail[19948]: n342aCV0019948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:37:12 splunk3 sendmail[20187]: n342bChe020187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:38:12 splunk3 sendmail[20427]: n342cCcm020427: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:39:12 splunk3 sendmail[20664]: n342dCgo020664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:40:07 splunk3 sendmail[20885]: n342e7J8020885: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040240.n342e7t6018691@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:40:07 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52313
|
|
Apr 3 19:40:07 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:40:07 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:40:07 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:40:07 splunk3 spamd[5597]: spamd: processing message <200904040240.n342e7t6018691@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:40:11 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 3.5 seconds, 1308 bytes.
|
|
Apr 3 19:40:11 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=3.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52313,mid=<200904040240.n342e7t6018691@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:40:11 splunk3 sendmail[20886]: n342e7J8020885: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:40:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:40:12 splunk3 sendmail[20910]: n342eCt7020910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:40:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:40:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:41:12 splunk3 sendmail[21166]: n342fCFd021166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 19:42:12 splunk3 sendmail[21401]: n342gCt2021401: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:43:12 splunk3 sendmail[21639]: n342hCRX021639: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:44:12 splunk3 sendmail[21873]: n342iCrR021873: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:45:08 splunk3 sendmail[22095]: n342j8B7022095: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040245.n342j7Km019303@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:45:08 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52369
|
|
Apr 3 19:45:08 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:45:08 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:45:08 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:45:08 splunk3 spamd[5597]: spamd: processing message <200904040245.n342j7Km019303@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:45:10 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 19:45:10 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52369,mid=<200904040245.n342j7Km019303@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:45:10 splunk3 sendmail[22096]: n342j8B7022095: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:45:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:45:12 splunk3 sendmail[22119]: n342jCm8022119: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:45:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:45:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:46:12 splunk3 sendmail[22370]: n342kCmN022370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:47:12 splunk3 sendmail[22612]: n342lCKw022612: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:48:12 splunk3 sendmail[22846]: n342mCVn022846: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:49:12 splunk3 sendmail[23084]: n342nCej023084: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:50:08 splunk3 sendmail[23307]: n342o8OI023307: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040250.n342o8L9019922@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:50:08 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52425
|
|
Apr 3 19:50:08 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:50:08 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:50:08 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:50:08 splunk3 spamd[5597]: spamd: processing message <200904040250.n342o8L9019922@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:50:10 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.9 seconds, 1308 bytes.
|
|
Apr 3 19:50:10 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.9,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52425,mid=<200904040250.n342o8L9019922@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:50:10 splunk3 sendmail[23308]: n342o8OI023307: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:50:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:50:12 splunk3 sendmail[23332]: n342oCXL023332: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:50:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:50:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:51:12 splunk3 sendmail[23587]: n342pCRO023587: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:52:12 splunk3 sendmail[23822]: n342qCc8023822: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:53:12 splunk3 sendmail[24065]: n342rCUZ024065: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:54:12 splunk3 sendmail[24301]: n342sCPr024301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:55:09 splunk3 sendmail[24521]: n342t82S024521: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040255.n342t8cX020530@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 19:55:09 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52480
|
|
Apr 3 19:55:09 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 19:55:09 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 19:55:09 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 19:55:09 splunk3 spamd[5597]: spamd: processing message <200904040255.n342t8cX020530@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 19:55:11 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 3 19:55:11 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52480,mid=<200904040255.n342t8cX020530@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 19:55:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 19:55:11 splunk3 sendmail[24522]: n342t82S024521: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 19:55:12 splunk3 sendmail[24545]: n342tC5G024545: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:55:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 19:55:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 19:56:12 splunk3 sendmail[24797]: n342uCxq024797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 19:57:12 splunk3 sendmail[25037]: n342vCqb025037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:58:12 splunk3 sendmail[25271]: n342wCOo025271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 19:59:12 splunk3 sendmail[25511]: n342xCLn025511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:00:04 splunk3 sendmail[25777]: n343040s025777: from=root, size=291, class=0, nrcpts=1, msgid=<200904040300.n343040s025777@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 20:00:04 splunk3 sendmail[25781]: n3430487025781: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040300.n343040s025777@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 20:00:04 splunk3 sendmail[25777]: n343040s025777: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3430487025781 Message accepted for delivery)
|
|
Apr 3 20:00:06 splunk3 sendmail[25782]: n3430487025781: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:00:09 splunk3 sendmail[25805]: n34309ur025805: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040300.n3430959021176@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:00:09 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52538
|
|
Apr 3 20:00:09 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:00:09 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 20:00:09 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 20:00:09 splunk3 sendmail[25806]: n34309ur025805: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:00:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:00:12 splunk3 sendmail[25826]: n3430Cds025826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:00:18 splunk3 sendmail[25858]: n3430Id8025858: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904040300.n3430Id8025858@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 20:00:19 splunk3 sendmail[25860]: n3430Id8025858: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 20:00:19 splunk3 sendmail[25860]: n3430Id8025858: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 20:00:19 splunk3 sendmail[25860]: n3430Id8025858: n3430Jd8025860: postmaster notify: User unknown
|
|
Apr 3 20:00:20 splunk3 sendmail[25860]: n3430Jd8025860: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:00:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:00:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:01:05 splunk3 sendmail[26065]: n34311bG026065: from=root, size=443, class=0, nrcpts=1, msgid=<200904040301.n34311bG026065@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 20:01:05 splunk3 sendmail[26070]: n34315QP026070: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040301.n34311bG026065@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 20:01:05 splunk3 sendmail[26065]: n34311bG026065: to=root, ctladdr=root (0/0), delay=00:00:04, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34315QP026070 Message accepted for delivery)
|
|
Apr 3 20:01:06 splunk3 sendmail[26071]: n34315QP026070: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:01:12 splunk3 sendmail[26111]: n3431CIg026111: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:02:12 splunk3 sendmail[26347]: n3432C7o026347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:03:12 splunk3 sendmail[26585]: n3433CjX026585: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:04:12 splunk3 sendmail[26820]: n3434Cxg026820: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:05:10 splunk3 sendmail[27042]: n3435ANT027042: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040305.n34359D7021858@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:05:10 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52601
|
|
Apr 3 20:05:10 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:05:10 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 20:05:10 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 20:05:10 splunk3 sendmail[27043]: n3435ANT027042: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:05:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:05:12 splunk3 sendmail[27064]: n3435Cea027064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:05:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:05:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:06:12 splunk3 sendmail[27316]: n3436CRF027316: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:07:10 splunk3 sendmail[27538]: n343792m027538: from=<site@enetis.net>, size=978, class=0, nrcpts=1, msgid=<01C9B4D2.767C5092@ip-9-50.byte-city.ru>, proto=SMTP, daemon=MTA, relay=ip-9-50.byte-city.ru [77.74.9.50]
|
|
Apr 3 20:07:12 splunk3 sendmail[27558]: n3437CbZ027558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:07:14 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52629
|
|
Apr 3 20:07:14 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:07:14 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 20:07:14 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 20:07:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:07:15 splunk3 sendmail[27540]: n343792m027538: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:05, mailer=local, pri=31184, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:08:12 splunk3 sendmail[27801]: n3438C1F027801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:09:12 splunk3 sendmail[28039]: n3439CpC028039: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:10:02 splunk3 sendmail[28336]: n343A2nn028336: from=root, size=292, class=0, nrcpts=1, msgid=<200904040310.n343A2nn028336@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 20:10:02 splunk3 sendmail[28341]: n343A2wX028341: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040310.n343A2nn028336@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 20:10:02 splunk3 sendmail[28336]: n343A2nn028336: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n343A2wX028341 Message accepted for delivery)
|
|
Apr 3 20:10:03 splunk3 sendmail[28342]: n343A2wX028341: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:10:10 splunk3 sendmail[28370]: n343AAIu028370: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040310.n343AAFs022468@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:10:10 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52659
|
|
Apr 3 20:10:10 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:10:10 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:10:10 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:10:10 splunk3 spamd[5597]: spamd: processing message <200904040310.n343AAFs022468@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:10:12 splunk3 sendmail[28388]: n343ACVv028388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:10:12 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 20:10:12 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52659,mid=<200904040310.n343AAFs022468@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:10:12 splunk3 sendmail[28383]: n343AAIu028370: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:10:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:10:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:10:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:11:12 splunk3 sendmail[28645]: n343BC8i028645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 20:12:12 splunk3 sendmail[28881]: n343CCqI028881: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:13:12 splunk3 sendmail[29118]: n343DCjE029118: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:14:12 splunk3 sendmail[29353]: n343ECkq029353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:15:11 splunk3 sendmail[29591]: n343FB8j029591: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040315.n343FAqI023267@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:15:11 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52715
|
|
Apr 3 20:15:11 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:15:11 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:15:11 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:15:11 splunk3 spamd[5597]: spamd: processing message <200904040315.n343FAqI023267@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:15:12 splunk3 sendmail[29598]: n343FCux029598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:15:13 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 3 20:15:13 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52715,mid=<200904040315.n343FAqI023267@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:15:13 splunk3 sendmail[29592]: n343FB8j029591: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:15:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:15:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:15:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:16:12 splunk3 sendmail[29848]: n343GCnK029848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:17:12 splunk3 sendmail[30089]: n343HCE2030089: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:18:12 splunk3 sendmail[30324]: n343ICup030324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:19:12 splunk3 sendmail[30561]: n343JCfv030561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:20:11 splunk3 sendmail[30802]: n343KBOi030802: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040320.n343KBJE023962@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:20:11 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52771
|
|
Apr 3 20:20:11 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:20:11 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:20:11 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:20:11 splunk3 spamd[5597]: spamd: processing message <200904040320.n343KBJE023962@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:20:12 splunk3 sendmail[30809]: n343KC4W030809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:20:13 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 20:20:13 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52771,mid=<200904040320.n343KBJE023962@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:20:13 splunk3 sendmail[30803]: n343KBOi030802: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:20:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:20:28 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:20:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:21:12 splunk3 sendmail[31064]: n343LCZv031064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:22:12 splunk3 sendmail[31301]: n343MCLb031301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:23:12 splunk3 sendmail[31544]: n343NCiR031544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:24:12 splunk3 sendmail[31778]: n343OCF5031778: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:24:35 splunk3 sendmail[31862]: n343OVXt031862: from=<spamme@splunkit.com>, size=2743, class=0, nrcpts=1, msgid=<200904040324.n343OVXt031862@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=190-50-220-219.speedy.com.ar [190.50.220.219] (may be forged)
|
|
Apr 3 20:24:35 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52822
|
|
Apr 3 20:24:35 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:24:35 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:24:35 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:24:35 splunk3 spamd[5597]: spamd: processing message <200904040324.n343OVXt031862@splunk3.splunkit.com> for spamme:501
|
|
Apr 3 20:24:37 splunk3 spamd[5597]: spamd: identified spam (24.1/5.0) for spamme:501 in 2.7 seconds, 3149 bytes.
|
|
Apr 3 20:24:37 splunk3 spamd[5597]: spamd: result: Y 24 - AWL,BAYES_99,FORGED_RCVD_HELO,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.7,size=3149,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52822,mid=<200904040324.n343OVXt031862@splunk3.splunkit.com>,bayes=1,autolearn=no
|
|
Apr 3 20:24:37 splunk3 sendmail[31864]: n343OVXt031862: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:02, mailer=local, pri=33071, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:24:37 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:25:12 splunk3 sendmail[32025]: n343PCn1032025: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:25:14 splunk3 sendmail[32027]: n343PE8l032027: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040325.n343PB7d024571@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:25:14 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52828
|
|
Apr 3 20:25:14 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:25:14 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:25:14 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:25:14 splunk3 spamd[5597]: spamd: processing message <200904040325.n343PB7d024571@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:25:16 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 20:25:16 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52828,mid=<200904040325.n343PB7d024571@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:25:16 splunk3 sendmail[32028]: n343PE8l032027: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:25:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:25:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:25:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:26:12 splunk3 sendmail[32282]: n343QCJS032282: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 20:27:12 splunk3 sendmail[32522]: n343RCYZ032522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:28:12 splunk3 sendmail[32756]: n343SCWG032756: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:29:12 splunk3 sendmail[525]: n343TCju000525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:30:12 splunk3 sendmail[763]: n343UClg000763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:30:14 splunk3 sendmail[766]: n343UEZ5000766: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040330.n343UEb2025193@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:30:14 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52883
|
|
Apr 3 20:30:14 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:30:14 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:30:14 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:30:14 splunk3 spamd[5597]: spamd: processing message <200904040330.n343UEb2025193@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:30:16 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 20:30:16 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52883,mid=<200904040330.n343UEb2025193@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:30:16 splunk3 sendmail[767]: n343UEZ5000766: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:30:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:30:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:30:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:31:12 splunk3 sendmail[1025]: n343VCNW001025: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:32:12 splunk3 sendmail[1261]: n343WCmv001261: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:33:12 splunk3 sendmail[1499]: n343XCQH001499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:34:12 splunk3 sendmail[1736]: n343YC7v001736: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:35:12 splunk3 sendmail[1976]: n343ZCrk001976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:35:15 splunk3 sendmail[1979]: n343ZFi6001979: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040335.n343ZEaX025942@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:35:15 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52939
|
|
Apr 3 20:35:15 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:35:15 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:35:15 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:35:15 splunk3 spamd[5597]: spamd: processing message <200904040335.n343ZEaX025942@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:35:17 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 3 20:35:17 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52939,mid=<200904040335.n343ZEaX025942@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:35:17 splunk3 sendmail[1980]: n343ZFi6001979: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:35:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:35:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:35:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:36:12 splunk3 sendmail[2235]: n343aCGf002235: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:37:12 splunk3 sendmail[2474]: n343bCVu002474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:38:12 splunk3 sendmail[2722]: n343cCFC002722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:39:12 splunk3 sendmail[2972]: n343dC3X002972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:40:12 splunk3 sendmail[3220]: n343eCQX003220: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:40:15 splunk3 sendmail[3240]: n343eFCB003240: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040340.n343eFeL026573@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:40:15 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 52994
|
|
Apr 3 20:40:15 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:40:15 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:40:15 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:40:15 splunk3 spamd[5597]: spamd: processing message <200904040340.n343eFeL026573@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:40:17 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 20:40:17 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=52994,mid=<200904040340.n343eFeL026573@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:40:17 splunk3 sendmail[3241]: n343eFCB003240: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:40:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:40:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:40:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:41:12 splunk3 sendmail[3483]: n343fCcj003483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 20:42:12 splunk3 sendmail[3749]: n343gCQR003749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:43:08 splunk3 sendmail[3972]: n343h8st003972: ruleset=check_rcpt, arg1=<spamery@tiscali.it>, relay=66-209-109-108.skyriver.net [66.209.107.108] (may be forged), reject=550 5.7.1 <spamery@tiscali.it>... Relaying denied. IP name possibly forged [66.209.107.108]
|
|
Apr 3 20:43:08 splunk3 sendmail[3972]: n343h8st003972: from=<spamery@tiscali.it>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=66-209-109-108.skyriver.net [66.209.107.108] (may be forged)
|
|
Apr 3 20:43:12 splunk3 sendmail[3991]: n343hC6Z003991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:44:12 splunk3 sendmail[4242]: n343iCpC004242: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:45:12 splunk3 sendmail[4491]: n343jCxR004491: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:45:16 splunk3 sendmail[4511]: n343jGgW004511: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040345.n343jFxS027184@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:45:16 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53051
|
|
Apr 3 20:45:16 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:45:16 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:45:16 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:45:16 splunk3 spamd[5597]: spamd: processing message <200904040345.n343jFxS027184@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:45:18 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 20:45:18 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53051,mid=<200904040345.n343jFxS027184@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:45:18 splunk3 sendmail[4512]: n343jGgW004511: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:45:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:45:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:45:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:46:12 splunk3 sendmail[4749]: n343kCCn004749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:47:12 splunk3 sendmail[5000]: n343lCTk005000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:48:12 splunk3 sendmail[5271]: n343mChT005271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:49:12 splunk3 sendmail[5514]: n343nCWa005514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:50:12 splunk3 sendmail[5754]: n343oC4d005754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:50:16 splunk3 sendmail[5773]: n343oGqG005773: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040350.n343oGJ6027796@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:50:16 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53106
|
|
Apr 3 20:50:16 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:50:16 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:50:16 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:50:16 splunk3 spamd[5597]: spamd: processing message <200904040350.n343oGJ6027796@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:50:18 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 20:50:18 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53106,mid=<200904040350.n343oGJ6027796@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:50:18 splunk3 sendmail[5774]: n343oGqG005773: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:50:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:50:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:50:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:51:12 splunk3 sendmail[6015]: n343pCq5006015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:52:12 splunk3 sendmail[6250]: n343qCdF006250: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:53:12 splunk3 sendmail[6494]: n343rCOW006494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:54:12 splunk3 sendmail[6728]: n343sCNr006728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:55:12 splunk3 sendmail[6967]: n343tCQv006967: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:55:16 splunk3 sendmail[6987]: n343tGxb006987: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040355.n343tGTd028408@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 20:55:17 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53162
|
|
Apr 3 20:55:17 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 20:55:17 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 20:55:17 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 20:55:17 splunk3 spamd[5597]: spamd: processing message <200904040355.n343tGTd028408@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 20:55:19 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 3 20:55:19 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53162,mid=<200904040355.n343tGTd028408@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 20:55:19 splunk3 sendmail[6988]: n343tGxb006987: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 20:55:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 20:55:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 20:55:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 20:56:12 splunk3 sendmail[7227]: n343uClP007227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 20:57:12 splunk3 sendmail[7467]: n343vC1l007467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:58:12 splunk3 sendmail[7710]: n343wCBk007710: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 20:59:12 splunk3 sendmail[7947]: n343xCfF007947: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:00:04 splunk3 sendmail[8213]: n34404Z8008213: from=root, size=291, class=0, nrcpts=1, msgid=<200904040400.n34404Z8008213@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 21:00:04 splunk3 sendmail[8217]: n34404fP008217: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040400.n34404Z8008213@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 21:00:04 splunk3 sendmail[8213]: n34404Z8008213: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34404fP008217 Message accepted for delivery)
|
|
Apr 3 21:00:05 splunk3 sendmail[8218]: n34404fP008217: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:00:12 splunk3 sendmail[8257]: n3440Cfj008257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:00:17 splunk3 sendmail[8276]: n3440Hhm008276: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040400.n3440H0U029047@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:00:17 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53220
|
|
Apr 3 21:00:17 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:00:17 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 21:00:17 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 21:00:17 splunk3 sendmail[8277]: n3440Hhm008276: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:00:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:00:24 splunk3 sendmail[8313]: n3440ODL008313: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904040400.n3440ODL008313@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 21:00:24 splunk3 sendmail[8315]: n3440ODL008313: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 21:00:24 splunk3 sendmail[8315]: n3440ODL008313: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 3 21:00:24 splunk3 sendmail[8315]: n3440ODL008313: n3440ODL008315: postmaster notify: User unknown
|
|
Apr 3 21:00:26 splunk3 sendmail[8315]: n3440ODL008315: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:00:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:00:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:01:12 splunk3 sendmail[8540]: n3441Cuv008540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:01:16 splunk3 sendmail[8501]: n34411TY008501: from=root, size=443, class=0, nrcpts=1, msgid=<200904040401.n34411TY008501@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 21:01:16 splunk3 sendmail[8560]: n3441GXE008560: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040401.n34411TY008501@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 21:01:16 splunk3 sendmail[8501]: n34411TY008501: to=root, ctladdr=root (0/0), delay=00:00:15, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3441GXE008560 Message accepted for delivery)
|
|
Apr 3 21:01:18 splunk3 sendmail[8562]: n3441GXE008560: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:02:12 splunk3 sendmail[8783]: n3442Cds008783: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:03:12 splunk3 sendmail[9021]: n3443C99009021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:04:12 splunk3 sendmail[9253]: n3444CBx009253: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:05:12 splunk3 sendmail[9492]: n3445C6M009492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:05:18 splunk3 sendmail[9513]: n3445H43009513: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040405.n3445HHq029735@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:05:18 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53283
|
|
Apr 3 21:05:18 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:05:18 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 21:05:18 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 21:05:18 splunk3 sendmail[9514]: n3445H43009513: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:05:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:05:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:05:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:06:12 splunk3 sendmail[9758]: n3446CIY009758: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:07:12 splunk3 sendmail[9998]: n3447ChQ009998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:08:12 splunk3 sendmail[10238]: n3448CnM010238: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:09:12 splunk3 sendmail[10477]: n3449C16010477: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:10:02 splunk3 sendmail[10775]: n344A2JD010775: from=root, size=292, class=0, nrcpts=1, msgid=<200904040410.n344A2JD010775@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 21:10:03 splunk3 sendmail[10780]: n344A2uF010780: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040410.n344A2JD010775@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 21:10:03 splunk3 sendmail[10775]: n344A2JD010775: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n344A2uF010780 Message accepted for delivery)
|
|
Apr 3 21:10:04 splunk3 sendmail[10781]: n344A2uF010780: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:10:12 splunk3 sendmail[10823]: n344AC50010823: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:10:18 splunk3 sendmail[10843]: n344AIiZ010843: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040410.n344AIXL030347@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:10:18 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53340
|
|
Apr 3 21:10:18 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:10:18 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:10:18 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:10:18 splunk3 spamd[5597]: spamd: processing message <200904040410.n344AIXL030347@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:10:20 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 21:10:20 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53340,mid=<200904040410.n344AIXL030347@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 21:10:20 splunk3 sendmail[10844]: n344AIiZ010843: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:10:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:10:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:10:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:11:12 splunk3 sendmail[11085]: n344BCEi011085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 21:12:12 splunk3 sendmail[11322]: n344CCtW011322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:13:12 splunk3 sendmail[11565]: n344DCap011565: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:14:12 splunk3 sendmail[11800]: n344ECqf011800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:15:12 splunk3 sendmail[12039]: n344FCYl012039: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:15:19 splunk3 sendmail[12059]: n344FIlG012059: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040415.n344FIf4031139@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:15:19 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53396
|
|
Apr 3 21:15:19 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:15:19 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:15:19 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:15:19 splunk3 spamd[5597]: spamd: processing message <200904040415.n344FIf4031139@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:15:21 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 21:15:21 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53396,mid=<200904040415.n344FIf4031139@virt2.int.splunk.com>,bayes=0.111772135202874,autolearn=no
|
|
Apr 3 21:15:21 splunk3 sendmail[12060]: n344FIlG012059: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:15:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:15:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:15:46 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:16:12 splunk3 sendmail[12297]: n344GCGY012297: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:17:12 splunk3 sendmail[12537]: n344HCla012537: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:18:12 splunk3 sendmail[12770]: n344ICnq012770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:18:13 splunk3 sendmail[12769]: n344ICkr012769: from=<3hN_WSRQKBoQowwotmitmz10-vwzmxt6owwotm.kwu0xiuum0xt2vsq1.kwu@alerts.bounces.google.com>, size=5131, class=0, nrcpts=1, msgid=<0016e64642621aa1510466b2f484@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.184]
|
|
Apr 3 21:18:13 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53432
|
|
Apr 3 21:18:13 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:18:13 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:18:13 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:18:13 splunk3 spamd[5597]: spamd: processing message <0016e64642621aa1510466b2f484@google.com> for spamme:501
|
|
Apr 3 21:18:17 splunk3 spamd[5597]: spamd: clean message (-2.3/5.0) for spamme:501 in 4.3 seconds, 5561 bytes.
|
|
Apr 3 21:18:17 splunk3 spamd[5597]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=4.3,size=5561,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53432,mid=<0016e64642621aa1510466b2f484@google.com>,bayes=1.11022302462516e-16,autolearn=ham
|
|
Apr 3 21:18:17 splunk3 sendmail[12771]: n344ICkr012769: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:04, mailer=local, pri=35342, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:18:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:19:12 splunk3 sendmail[13012]: n344JCZF013012: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:20:12 splunk3 sendmail[13258]: n344KCiW013258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:20:19 splunk3 sendmail[13280]: n344KJV7013280: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040420.n344KJdt031774@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:20:19 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53453
|
|
Apr 3 21:20:19 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:20:19 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:20:19 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:20:19 splunk3 spamd[5597]: spamd: processing message <200904040420.n344KJdt031774@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:20:21 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 21:20:21 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53453,mid=<200904040420.n344KJdt031774@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 21:20:21 splunk3 sendmail[13281]: n344KJV7013280: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:20:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:20:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:20:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:21:12 splunk3 sendmail[13552]: n344LCGe013552: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:22:12 splunk3 sendmail[13788]: n344MCQH013788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:23:12 splunk3 sendmail[14032]: n344NC0l014032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:24:12 splunk3 sendmail[14267]: n344OCFr014267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:25:12 splunk3 sendmail[14506]: n344PCNE014506: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:25:20 splunk3 sendmail[14543]: n344PJY1014543: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040425.n344PJnh032379@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:25:20 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53508
|
|
Apr 3 21:25:20 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:25:20 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:25:20 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:25:20 splunk3 spamd[5597]: spamd: processing message <200904040425.n344PJnh032379@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:25:22 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 3 21:25:22 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53508,mid=<200904040425.n344PJnh032379@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 21:25:22 splunk3 sendmail[14544]: n344PJY1014543: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:25:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:25:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:25:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:26:12 splunk3 sendmail[14765]: n344QCtm014765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 21:27:12 splunk3 sendmail[15005]: n344RCIF015005: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:28:12 splunk3 sendmail[15238]: n344SCk1015238: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:29:12 splunk3 sendmail[15479]: n344TCm2015479: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:30:12 splunk3 sendmail[15720]: n344UC8B015720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:30:20 splunk3 sendmail[15756]: n344UK4Z015756: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904040430.n344UKF0000537@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:30:20 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53565
|
|
Apr 3 21:30:20 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:30:20 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:30:20 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:30:20 splunk3 spamd[5597]: spamd: processing message <200904040430.n344UKF0000537@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:30:22 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1302 bytes.
|
|
Apr 3 21:30:22 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53565,mid=<200904040430.n344UKF0000537@virt2.int.splunk.com>,bayes=0.0658984635323997,autolearn=no
|
|
Apr 3 21:30:22 splunk3 sendmail[15757]: n344UK4Z015756: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:30:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:30:27 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:30:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:31:12 splunk3 sendmail[15982]: n344VCVS015982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:32:12 splunk3 sendmail[16218]: n344WChP016218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:33:12 splunk3 sendmail[16456]: n344XCpY016456: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:34:12 splunk3 sendmail[16690]: n344YCDZ016690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:35:12 splunk3 sendmail[16927]: n344ZCYI016927: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:35:21 splunk3 sendmail[16966]: n344ZLa9016966: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040435.n344ZKZD001290@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:35:21 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53620
|
|
Apr 3 21:35:21 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:35:21 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:35:21 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:35:21 splunk3 spamd[5597]: spamd: processing message <200904040435.n344ZKZD001290@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:35:23 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1305 bytes.
|
|
Apr 3 21:35:23 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53620,mid=<200904040435.n344ZKZD001290@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 21:35:23 splunk3 sendmail[16967]: n344ZLa9016966: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:35:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:35:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:36:12 splunk3 sendmail[17184]: n344aCSJ017184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:37:12 splunk3 sendmail[17425]: n344bCTo017425: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:38:12 splunk3 sendmail[17663]: n344cCwr017663: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:39:12 splunk3 sendmail[17900]: n344dC6q017900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:40:12 splunk3 sendmail[18141]: n344eCoT018141: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:40:21 splunk3 sendmail[18178]: n344eLk9018178: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040440.n344eLp6001957@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:40:21 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53676
|
|
Apr 3 21:40:21 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:40:21 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:40:21 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:40:21 splunk3 spamd[5597]: spamd: processing message <200904040440.n344eLp6001957@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:40:23 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 3 21:40:23 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53676,mid=<200904040440.n344eLp6001957@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 21:40:23 splunk3 sendmail[18179]: n344eLk9018178: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:40:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:40:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:40:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:41:12 splunk3 sendmail[18402]: n344fCNR018402: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 21:42:12 splunk3 sendmail[18637]: n344gCc5018637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:43:12 splunk3 sendmail[18879]: n344hCIs018879: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:44:12 splunk3 sendmail[19114]: n344iCDJ019114: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:45:12 splunk3 sendmail[19353]: n344jCxD019353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:45:22 splunk3 sendmail[19389]: n344jMnI019389: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040445.n344jMHl002580@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:45:22 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53732
|
|
Apr 3 21:45:22 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:45:22 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:45:22 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:45:22 splunk3 spamd[5597]: spamd: processing message <200904040445.n344jMHl002580@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:45:24 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 3 21:45:24 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53732,mid=<200904040445.n344jMHl002580@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 21:45:24 splunk3 sendmail[19390]: n344jMnI019389: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:45:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:45:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:45:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:46:12 splunk3 sendmail[19611]: n344kCUI019611: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:47:12 splunk3 sendmail[19852]: n344lCFr019852: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:48:12 splunk3 sendmail[20085]: n344mCFZ020085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:49:12 splunk3 sendmail[20325]: n344nCV5020325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:50:12 splunk3 sendmail[20566]: n344oCHd020566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:50:23 splunk3 sendmail[20604]: n344oNOg020604: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040450.n344oMDh003193@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:50:23 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53788
|
|
Apr 3 21:50:23 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:50:23 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:50:23 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:50:23 splunk3 spamd[5597]: spamd: processing message <200904040450.n344oMDh003193@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:50:25 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 3 21:50:25 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53788,mid=<200904040450.n344oMDh003193@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 21:50:25 splunk3 sendmail[20605]: n344oNOg020604: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:50:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:50:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:51:13 splunk3 sendmail[20826]: n344pCox020826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:52:13 splunk3 sendmail[21063]: n344qDxJ021063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:53:13 splunk3 sendmail[21304]: n344rDSn021304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:54:13 splunk3 sendmail[21539]: n344sDb0021539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:55:13 splunk3 sendmail[21776]: n344tDlL021776: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:55:23 splunk3 sendmail[21815]: n344tNb0021815: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040455.n344tN8w003794@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 21:55:23 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53844
|
|
Apr 3 21:55:23 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 21:55:23 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 21:55:23 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 21:55:23 splunk3 spamd[5597]: spamd: processing message <200904040455.n344tN8w003794@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 21:55:25 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.0 seconds, 1305 bytes.
|
|
Apr 3 21:55:25 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.0,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=53844,mid=<200904040455.n344tN8w003794@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 21:55:25 splunk3 sendmail[21816]: n344tNb0021815: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 21:55:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 21:55:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 21:55:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 21:56:13 splunk3 sendmail[22035]: n344uDRR022035: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 21:57:13 splunk3 sendmail[22277]: n344vD4f022277: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:58:13 splunk3 sendmail[22512]: n344wDKQ022512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 21:59:13 splunk3 sendmail[22751]: n344xDJ1022751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:00:04 splunk3 sendmail[23033]: n34504pM023033: from=root, size=291, class=0, nrcpts=1, msgid=<200904040500.n34504pM023033@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 22:00:04 splunk3 sendmail[23037]: n3450448023037: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040500.n34504pM023033@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 22:00:04 splunk3 sendmail[23033]: n34504pM023033: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3450448023037 Message accepted for delivery)
|
|
Apr 3 22:00:06 splunk3 sendmail[23038]: n3450448023037: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:00:13 splunk3 sendmail[23063]: n3450Dea023063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:00:24 splunk3 sendmail[23100]: n3450Nf3023100: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040500.n3450NmK004437@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:00:24 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53901
|
|
Apr 3 22:00:24 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:00:24 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 22:00:24 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 22:00:24 splunk3 sendmail[23101]: n3450Nf3023100: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:00:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:00:30 splunk3 sendmail[23163]: n3450UIK023163: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904040500.n3450UIK023163@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 22:00:30 splunk3 sendmail[23165]: n3450UIK023163: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 22:00:30 splunk3 sendmail[23165]: n3450UIK023163: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 3 22:00:30 splunk3 sendmail[23165]: n3450UIK023163: n3450UIK023165: postmaster notify: User unknown
|
|
Apr 3 22:00:31 splunk3 sendmail[23165]: n3450UIK023165: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:00:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:01:07 splunk3 sendmail[23310]: n34512uT023310: from=root, size=443, class=0, nrcpts=1, msgid=<200904040501.n34512uT023310@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 22:01:07 splunk3 sendmail[23330]: n34517AQ023330: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040501.n34512uT023310@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 22:01:07 splunk3 sendmail[23310]: n34512uT023310: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34517AQ023330 Message accepted for delivery)
|
|
Apr 3 22:01:08 splunk3 sendmail[23331]: n34517AQ023330: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:01:13 splunk3 sendmail[23356]: n3451DPm023356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:02:13 splunk3 sendmail[23590]: n3452DPC023590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:03:13 splunk3 sendmail[23829]: n3453D0t023829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:04:13 splunk3 sendmail[24066]: n3454Dvn024066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:05:13 splunk3 sendmail[24312]: n3455DYV024312: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:05:24 splunk3 sendmail[24376]: n3455OOq024376: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040505.n3455OUj005115@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:05:24 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 53974
|
|
Apr 3 22:05:24 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:05:24 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 22:05:24 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 22:05:24 splunk3 sendmail[24378]: n3455OOq024376: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:05:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:05:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:05:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:06:13 splunk3 sendmail[24560]: n3456D2Z024560: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:07:13 splunk3 sendmail[24800]: n3457DXg024800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:08:13 splunk3 sendmail[25037]: n3458DO5025037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:09:13 splunk3 sendmail[25272]: n3459Dps025272: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:10:02 splunk3 sendmail[25580]: n345A2mO025580: from=root, size=292, class=0, nrcpts=1, msgid=<200904040510.n345A2mO025580@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 22:10:02 splunk3 sendmail[25585]: n345A240025585: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040510.n345A2mO025580@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 22:10:02 splunk3 sendmail[25580]: n345A2mO025580: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n345A240025585 Message accepted for delivery)
|
|
Apr 3 22:10:03 splunk3 sendmail[25586]: n345A240025585: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:10:13 splunk3 sendmail[25627]: n345ADPp025627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:10:25 splunk3 sendmail[25692]: n345APrL025692: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040510.n345AP21005734@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:10:25 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54030
|
|
Apr 3 22:10:25 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:10:25 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:10:25 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:10:25 splunk3 spamd[5597]: spamd: processing message <200904040510.n345AP21005734@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:10:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:10:27 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 3 22:10:27 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54030,mid=<200904040510.n345AP21005734@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 22:10:27 splunk3 sendmail[25693]: n345APrL025692: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:10:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:11:13 splunk3 sendmail[25880]: n345BDKw025880: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 22:12:13 splunk3 sendmail[26116]: n345CDhU026116: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:13:13 splunk3 sendmail[26356]: n345DD3t026356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:14:13 splunk3 sendmail[26591]: n345EDBv026591: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:15:13 splunk3 sendmail[26838]: n345FDgn026838: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:15:25 splunk3 sendmail[26902]: n345FPWj026902: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040515.n345FPhQ006520@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:15:25 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54087
|
|
Apr 3 22:15:25 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:15:25 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:15:25 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:15:25 splunk3 spamd[5597]: spamd: processing message <200904040515.n345FPhQ006520@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:15:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:15:28 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 3 22:15:28 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54087,mid=<200904040515.n345FPhQ006520@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 22:15:28 splunk3 sendmail[26903]: n345FPWj026902: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:15:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:16:13 splunk3 sendmail[27086]: n345GDYn027086: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:17:13 splunk3 sendmail[27326]: n345HDG2027326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:18:13 splunk3 sendmail[27563]: n345IDtb027563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:19:13 splunk3 sendmail[27802]: n345JD2G027802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:20:13 splunk3 sendmail[28052]: n345KD6Z028052: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:20:26 splunk3 sendmail[28116]: n345KQ1t028116: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040520.n345KQbP007161@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:20:26 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54142
|
|
Apr 3 22:20:26 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:20:26 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:20:26 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:20:26 splunk3 spamd[5597]: spamd: processing message <200904040520.n345KQbP007161@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:20:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:20:28 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 22:20:28 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54142,mid=<200904040520.n345KQbP007161@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 22:20:28 splunk3 sendmail[28117]: n345KQ1t028116: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:20:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:20:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:21:13 splunk3 sendmail[28305]: n345LD7A028305: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:22:13 splunk3 sendmail[28540]: n345MDAh028540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:23:13 splunk3 sendmail[28779]: n345NDgV028779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:24:13 splunk3 sendmail[29013]: n345ODY5029013: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:25:13 splunk3 sendmail[29260]: n345PDEt029260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:25:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:25:26 splunk3 sendmail[29325]: n345PQqv029325: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040525.n345PQ92007768@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:25:26 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54198
|
|
Apr 3 22:25:26 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:25:26 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:25:26 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:25:26 splunk3 spamd[5597]: spamd: processing message <200904040525.n345PQ92007768@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:25:28 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 3 22:25:28 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54198,mid=<200904040525.n345PQ92007768@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 22:25:29 splunk3 sendmail[29326]: n345PQqv029325: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:25:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:26:13 splunk3 sendmail[29508]: n345QDxr029508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 22:27:13 splunk3 sendmail[29749]: n345RDe8029749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:28:13 splunk3 sendmail[29984]: n345SDrq029984: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:29:13 splunk3 sendmail[30221]: n345TDhY030221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:30:13 splunk3 sendmail[30469]: n345UDEd030469: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:30:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:30:27 splunk3 sendmail[30536]: n345URIj030536: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040530.n345UR7q008389@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:30:27 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54254
|
|
Apr 3 22:30:27 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:30:27 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:30:27 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:30:27 splunk3 spamd[5597]: spamd: processing message <200904040530.n345UR7q008389@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:30:29 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 3 22:30:29 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54254,mid=<200904040530.n345UR7q008389@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 22:30:29 splunk3 sendmail[30537]: n345URIj030536: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:30:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:30:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:31:13 splunk3 sendmail[30723]: n345VDk9030723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:32:13 splunk3 sendmail[30959]: n345WDmM030959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:33:13 splunk3 sendmail[31198]: n345XDSg031198: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:34:13 splunk3 sendmail[31434]: n345YDNt031434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:35:13 splunk3 sendmail[31682]: n345ZDcE031682: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:35:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:35:28 splunk3 sendmail[31746]: n345ZSsX031746: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040535.n345ZRgY009162@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:35:28 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54310
|
|
Apr 3 22:35:28 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:35:28 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:35:28 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:35:28 splunk3 spamd[5597]: spamd: processing message <200904040535.n345ZRgY009162@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:35:30 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 3 22:35:30 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54310,mid=<200904040535.n345ZRgY009162@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 22:35:30 splunk3 sendmail[31747]: n345ZSsX031746: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:35:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:36:13 splunk3 sendmail[31931]: n345aDHH031931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:37:13 splunk3 sendmail[32171]: n345bDj4032171: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:38:13 splunk3 sendmail[32410]: n345cDc3032410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:39:13 splunk3 sendmail[32648]: n345dDLC032648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:40:13 splunk3 sendmail[430]: n345eDgr000430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:40:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:40:28 splunk3 sendmail[495]: n345eS6i000495: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040540.n345eS82009771@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:40:28 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54366
|
|
Apr 3 22:40:28 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:40:28 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:40:28 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:40:28 splunk3 spamd[5597]: spamd: processing message <200904040540.n345eS82009771@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:40:30 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 3 22:40:30 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54366,mid=<200904040540.n345eS82009771@virt2.int.splunk.com>,bayes=0.168660322188605,autolearn=no
|
|
Apr 3 22:40:30 splunk3 sendmail[496]: n345eS6i000495: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:40:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:40:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:41:13 splunk3 sendmail[682]: n345fDdn000682: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 22:42:13 splunk3 sendmail[919]: n345gD3Y000919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:43:13 splunk3 sendmail[1159]: n345hDMk001159: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:44:13 splunk3 sendmail[1394]: n345iDLJ001394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:45:13 splunk3 sendmail[1642]: n345jD5p001642: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:45:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:45:28 splunk3 sendmail[1725]: n345jSTL001725: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040545.n345jSNk010404@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:45:28 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54422
|
|
Apr 3 22:45:28 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:45:28 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:45:28 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:45:28 splunk3 spamd[5597]: spamd: processing message <200904040545.n345jSNk010404@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:45:30 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 22:45:30 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54422,mid=<200904040545.n345jSNk010404@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 22:45:30 splunk3 sendmail[1727]: n345jSTL001725: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:45:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:45:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:46:13 splunk3 sendmail[1892]: n345kDNE001892: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:47:13 splunk3 sendmail[2134]: n345lDwr002134: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:48:13 splunk3 sendmail[2369]: n345mDPv002369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:49:13 splunk3 sendmail[2613]: n345nD5k002613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:50:13 splunk3 sendmail[2873]: n345oDWw002873: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:50:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:50:29 splunk3 sendmail[2958]: n345oTeq002958: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040550.n345oTKj010997@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:50:29 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54478
|
|
Apr 3 22:50:29 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:50:29 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:50:29 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:50:29 splunk3 spamd[5597]: spamd: processing message <200904040550.n345oTKj010997@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:50:31 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 3 22:50:31 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54478,mid=<200904040550.n345oTKj010997@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 22:50:31 splunk3 sendmail[2959]: n345oTeq002958: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:50:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:50:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:51:13 splunk3 sendmail[3135]: n345pDiZ003135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:52:13 splunk3 sendmail[3374]: n345qDIh003374: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:53:13 splunk3 sendmail[3637]: n345rD6q003637: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:54:13 splunk3 sendmail[3880]: n345sDOK003880: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:55:13 splunk3 sendmail[4144]: n345tD2H004144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:55:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 22:55:29 splunk3 sendmail[4229]: n345tTLW004229: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040555.n345tTRG011625@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 22:55:29 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54533
|
|
Apr 3 22:55:29 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 22:55:29 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 22:55:29 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 22:55:29 splunk3 spamd[5597]: spamd: processing message <200904040555.n345tTRG011625@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 22:55:31 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 3 22:55:31 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54533,mid=<200904040555.n345tTRG011625@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 22:55:31 splunk3 sendmail[4230]: n345tTLW004229: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 22:55:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 22:55:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 22:56:13 splunk3 sendmail[4408]: n345uDSv004408: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 22:57:13 splunk3 sendmail[4648]: n345vDYI004648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:58:13 splunk3 sendmail[4886]: n345wDtk004886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 22:59:13 splunk3 sendmail[5166]: n345xDvd005166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:00:00 splunk3 sendmail[5363]: n34600wE005363: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040600.n34600VP012143@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:00:00 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54577
|
|
Apr 3 23:00:00 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:00:00 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:00:00 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:00:00 splunk3 spamd[5597]: spamd: processing message <200904040600.n34600VP012143@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:00:02 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 3 23:00:02 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54577,mid=<200904040600.n34600VP012143@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:00:02 splunk3 sendmail[5364]: n34600wE005363: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:00:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:00:04 splunk3 sendmail[5452]: n34604CY005452: from=root, size=291, class=0, nrcpts=1, msgid=<200904040600.n34604CY005452@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 23:00:04 splunk3 sendmail[5456]: n34604Jq005456: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040600.n34604CY005452@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 23:00:04 splunk3 sendmail[5452]: n34604CY005452: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34604Jq005456 Message accepted for delivery)
|
|
Apr 3 23:00:05 splunk3 sendmail[5475]: n34605qD005475: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904040600.n34605qD005475@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 23:00:05 splunk3 sendmail[5477]: n34605qD005475: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 3 23:00:05 splunk3 sendmail[5477]: n34605qD005475: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 3 23:00:05 splunk3 sendmail[5477]: n34605qD005475: n34605qD005477: postmaster notify: User unknown
|
|
Apr 3 23:00:06 splunk3 sendmail[5457]: n34604Jq005456: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:00:13 splunk3 sendmail[5507]: n3460DFV005507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:00:15 splunk3 sendmail[5477]: n34605qD005477: to=root, delay=00:00:10, xdelay=00:00:09, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:00:26 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:00:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:01:13 splunk3 sendmail[5765]: n3461Don005765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:01:15 splunk3 sendmail[5722]: n34611iK005722: from=root, size=443, class=0, nrcpts=1, msgid=<200904040601.n34611iK005722@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 23:01:15 splunk3 sendmail[5783]: n3461FG8005783: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040601.n34611iK005722@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 23:01:15 splunk3 sendmail[5722]: n34611iK005722: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3461FG8005783 Message accepted for delivery)
|
|
Apr 3 23:01:16 splunk3 sendmail[5785]: n3461FG8005783: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:02:13 splunk3 sendmail[6007]: n3462DMZ006007: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:03:13 splunk3 sendmail[6246]: n3463DXg006246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:04:13 splunk3 sendmail[6481]: n3464D8j006481: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:05:00 splunk3 sendmail[6678]: n34650mH006678: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040605.n34650hd012850@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:05:00 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54642
|
|
Apr 3 23:05:00 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:05:00 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 3 23:05:00 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 3 23:05:00 splunk3 sendmail[6679]: n34650mH006678: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:05:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:05:13 splunk3 sendmail[6748]: n3465DbH006748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:05:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:05:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:06:13 splunk3 sendmail[6991]: n3466DHN006991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:07:13 splunk3 sendmail[7232]: n3467D9a007232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:08:13 splunk3 sendmail[7470]: n3468DT0007470: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:09:13 splunk3 sendmail[7719]: n3469DWb007719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:10:01 splunk3 sendmail[7994]: n346A1Wo007994: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040610.n346A1ng013464@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:10:01 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54697
|
|
Apr 3 23:10:01 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:10:01 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:10:01 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:10:01 splunk3 spamd[5597]: spamd: processing message <200904040610.n346A1ng013464@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:10:02 splunk3 sendmail[8003]: n346A25G008003: from=root, size=292, class=0, nrcpts=1, msgid=<200904040610.n346A25G008003@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 3 23:10:02 splunk3 sendmail[8008]: n346A2Dj008008: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040610.n346A25G008003@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 3 23:10:02 splunk3 sendmail[8003]: n346A25G008003: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n346A2Dj008008 Message accepted for delivery)
|
|
Apr 3 23:10:03 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 3 23:10:03 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54697,mid=<200904040610.n346A1ng013464@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:10:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:10:03 splunk3 sendmail[7995]: n346A1Wo007994: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:10:03 splunk3 sendmail[8009]: n346A2Dj008008: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:10:13 splunk3 sendmail[8081]: n346ADwY008081: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:10:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:10:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:11:13 splunk3 sendmail[8327]: n346BDOS008327: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 23:12:13 splunk3 sendmail[8562]: n346CDWZ008562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:13:13 splunk3 sendmail[8802]: n346DDdQ008802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:14:13 splunk3 sendmail[9035]: n346ED94009035: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:15:02 splunk3 sendmail[9216]: n346F2pI009216: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040615.n346F2vc014295@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:15:02 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54755
|
|
Apr 3 23:15:02 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:15:02 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:15:02 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:15:02 splunk3 spamd[5597]: spamd: processing message <200904040615.n346F2vc014295@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:15:05 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 23:15:05 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54755,mid=<200904040615.n346F2vc014295@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:15:05 splunk3 sendmail[9217]: n346F2pI009216: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:15:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:15:13 splunk3 sendmail[9287]: n346FDWB009287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:15:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:15:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:16:13 splunk3 sendmail[9536]: n346GDJG009536: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:17:13 splunk3 sendmail[9784]: n346HDdR009784: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:18:13 splunk3 sendmail[10018]: n346IDdZ010018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:19:13 splunk3 sendmail[10257]: n346JDmD010257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:20:03 splunk3 sendmail[10458]: n346K3Dj010458: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040620.n346K2Sx014927@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:20:03 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54810
|
|
Apr 3 23:20:03 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:20:03 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:20:03 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:20:03 splunk3 spamd[5597]: spamd: processing message <200904040620.n346K2Sx014927@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:20:05 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 23:20:05 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54810,mid=<200904040620.n346K2Sx014927@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:20:05 splunk3 sendmail[10459]: n346K3Dj010458: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:20:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:20:13 splunk3 sendmail[10513]: n346KDZL010513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:20:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:20:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:21:13 splunk3 sendmail[10759]: n346LDjq010759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:22:13 splunk3 sendmail[10995]: n346MDvp010995: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:23:13 splunk3 sendmail[11239]: n346NDf5011239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:24:13 splunk3 sendmail[11474]: n346ODNv011474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:25:03 splunk3 sendmail[11672]: n346P3DM011672: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040625.n346P38m015534@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:25:03 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54866
|
|
Apr 3 23:25:03 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:25:03 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:25:03 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:25:03 splunk3 spamd[5597]: spamd: processing message <200904040625.n346P38m015534@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:25:06 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 23:25:06 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54866,mid=<200904040625.n346P38m015534@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:25:06 splunk3 sendmail[11673]: n346P3DM011672: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:25:13 splunk3 sendmail[11728]: n346PDVs011728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:25:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:25:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:26:13 splunk3 sendmail[11971]: n346QDPw011971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 23:27:13 splunk3 sendmail[12211]: n346RDLo012211: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:28:13 splunk3 sendmail[12446]: n346SDpT012446: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:29:13 splunk3 sendmail[12683]: n346TDYh012683: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:30:04 splunk3 sendmail[12883]: n346U4tx012883: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040630.n346U4RH016154@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:30:04 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54922
|
|
Apr 3 23:30:04 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:30:04 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:30:04 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:30:04 splunk3 spamd[5597]: spamd: processing message <200904040630.n346U4RH016154@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:30:06 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 23:30:06 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54922,mid=<200904040630.n346U4RH016154@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:30:06 splunk3 sendmail[12884]: n346U4tx012883: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:30:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:30:13 splunk3 sendmail[12937]: n346UDEc012937: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:30:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:30:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:31:13 splunk3 sendmail[13185]: n346VDbw013185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:32:13 splunk3 sendmail[13458]: n346WD5Z013458: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:33:13 splunk3 sendmail[13696]: n346XDTU013696: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:34:13 splunk3 sendmail[13930]: n346YDAZ013930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:35:05 splunk3 sendmail[14128]: n346Z5OH014128: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040635.n346Z4TU016901@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:35:05 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 54978
|
|
Apr 3 23:35:05 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:35:05 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:35:05 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:35:05 splunk3 spamd[5597]: spamd: processing message <200904040635.n346Z4TU016901@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:35:07 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 3 23:35:07 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54978,mid=<200904040635.n346Z4TU016901@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:35:07 splunk3 sendmail[14129]: n346Z5OH014128: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:35:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:35:13 splunk3 sendmail[14181]: n346ZDhF014181: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:35:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:35:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:36:13 splunk3 sendmail[14423]: n346aD99014423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:37:13 splunk3 sendmail[14664]: n346bDYc014664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:38:13 splunk3 sendmail[14904]: n346cDFo014904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:39:13 splunk3 sendmail[15142]: n346dDYS015142: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:40:05 splunk3 sendmail[15342]: n346e5TY015342: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040640.n346e5CW017532@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:40:05 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55033
|
|
Apr 3 23:40:05 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:40:05 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:40:05 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:40:05 splunk3 spamd[5597]: spamd: processing message <200904040640.n346e5CW017532@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:40:07 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 23:40:07 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55033,mid=<200904040640.n346e5CW017532@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:40:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:40:07 splunk3 sendmail[15343]: n346e5TY015342: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:40:13 splunk3 sendmail[15398]: n346eDr0015398: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:40:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:40:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:41:13 splunk3 sendmail[15646]: n346fDmo015646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 23:42:13 splunk3 sendmail[15882]: n346gDWR015882: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:43:13 splunk3 sendmail[16121]: n346hDkE016121: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:44:13 splunk3 sendmail[16355]: n346iDb3016355: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:45:06 splunk3 sendmail[16555]: n346j6W4016555: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040645.n346j5kU018152@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:45:06 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55090
|
|
Apr 3 23:45:06 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:45:06 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:45:06 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:45:06 splunk3 spamd[5597]: spamd: processing message <200904040645.n346j5kU018152@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:45:10 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Apr 3 23:45:10 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55090,mid=<200904040645.n346j5kU018152@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:45:10 splunk3 sendmail[16556]: n346j6W4016555: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:45:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:45:13 splunk3 sendmail[16609]: n346jD7R016609: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:45:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:45:45 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:46:13 splunk3 sendmail[16851]: n346kD8l016851: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:47:13 splunk3 sendmail[17090]: n346lDTu017090: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:48:13 splunk3 sendmail[17326]: n346mDYO017326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:49:13 splunk3 sendmail[17565]: n346nDIb017565: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:50:06 splunk3 sendmail[17767]: n346o6TA017767: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040650.n346o6uQ018769@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:50:06 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55146
|
|
Apr 3 23:50:06 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:50:06 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:50:06 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:50:06 splunk3 spamd[5597]: spamd: processing message <200904040650.n346o6uQ018769@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:50:08 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 3 23:50:08 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55146,mid=<200904040650.n346o6uQ018769@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:50:08 splunk3 sendmail[17768]: n346o6TA017767: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:50:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:50:13 splunk3 sendmail[17820]: n346oD6J017820: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:50:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:50:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:51:13 splunk3 sendmail[18067]: n346pDiZ018067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:52:13 splunk3 sendmail[18305]: n346qDaq018305: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:53:13 splunk3 sendmail[18554]: n346rDhe018554: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:54:13 splunk3 sendmail[18788]: n346sD5A018788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:55:07 splunk3 sendmail[18988]: n346t7Wp018988: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040655.n346t7cJ019376@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 3 23:55:07 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55201
|
|
Apr 3 23:55:07 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 3 23:55:07 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 3 23:55:07 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 3 23:55:07 splunk3 spamd[5597]: spamd: processing message <200904040655.n346t7cJ019376@virt2.int.splunk.com> for spamme:501
|
|
Apr 3 23:55:09 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 3 23:55:09 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55201,mid=<200904040655.n346t7cJ019376@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 3 23:55:09 splunk3 sendmail[18989]: n346t7Wp018988: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 3 23:55:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 3 23:55:13 splunk3 sendmail[19043]: n346tDwI019043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:55:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 3 23:55:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 3 23:56:13 splunk3 sendmail[19286]: n346uDh8019286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 3 23:57:13 splunk3 sendmail[19526]: n346vDOI019526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:58:13 splunk3 sendmail[19762]: n346wDRm019762: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 3 23:59:13 splunk3 sendmail[20002]: n346xDri020002: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:00:04 splunk3 sendmail[20263]: n34704eV020263: from=root, size=291, class=0, nrcpts=1, msgid=<200904040700.n34704eV020263@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 00:00:04 splunk3 sendmail[20267]: n34704YS020267: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040700.n34704eV020263@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 00:00:04 splunk3 sendmail[20263]: n34704eV020263: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34704YS020267 Message accepted for delivery)
|
|
Apr 4 00:00:05 splunk3 sendmail[20268]: n34704YS020267: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:00:07 splunk3 sendmail[20289]: n34707ut020289: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040700.n34707M5020021@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:00:07 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55259
|
|
Apr 4 00:00:07 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:00:07 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 00:00:07 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 00:00:07 splunk3 sendmail[20290]: n34707ut020289: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:00:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:00:11 splunk3 sendmail[20308]: n3470Bmj020308: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904040700.n3470Bmj020308@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 00:00:11 splunk3 sendmail[20310]: n3470Bmj020308: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 00:00:11 splunk3 sendmail[20310]: n3470Bmj020308: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 00:00:11 splunk3 sendmail[20310]: n3470Bmj020308: n3470Bmj020310: postmaster notify: User unknown
|
|
Apr 4 00:00:12 splunk3 sendmail[20310]: n3470Bmj020310: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:00:13 splunk3 sendmail[20341]: n3470D96020341: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:00:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:00:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:01:11 splunk3 sendmail[20535]: n34711Qo020535: from=root, size=443, class=0, nrcpts=1, msgid=<200904040701.n34711Qo020535@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 00:01:11 splunk3 sendmail[20574]: n3471BCj020574: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040701.n34711Qo020535@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 00:01:11 splunk3 sendmail[20535]: n34711Qo020535: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3471BCj020574 Message accepted for delivery)
|
|
Apr 4 00:01:13 splunk3 sendmail[20575]: n3471BCj020574: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:01:13 splunk3 sendmail[20601]: n3471D95020601: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:02:13 splunk3 sendmail[20835]: n3472DOW020835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:03:13 splunk3 sendmail[21074]: n3473D5j021074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:04:14 splunk3 sendmail[21307]: n3474D1a021307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:05:08 splunk3 sendmail[21524]: n34758DM021524: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040705.n34758BQ020705@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:05:08 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55322
|
|
Apr 4 00:05:08 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:05:08 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 00:05:08 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 00:05:08 splunk3 sendmail[21525]: n34758DM021524: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:05:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:05:14 splunk3 sendmail[21559]: n3475EO4021559: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:05:25 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:05:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:06:14 splunk3 sendmail[21802]: n3476EXg021802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:07:14 splunk3 sendmail[22043]: n3477EaH022043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:08:14 splunk3 sendmail[22282]: n3478Eg0022282: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:09:14 splunk3 sendmail[22520]: n3479Ef9022520: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:10:02 splunk3 sendmail[22816]: n347A2I5022816: from=root, size=292, class=0, nrcpts=1, msgid=<200904040710.n347A2I5022816@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 00:10:02 splunk3 sendmail[22821]: n347A2j4022821: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040710.n347A2I5022816@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 00:10:02 splunk3 sendmail[22816]: n347A2I5022816: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n347A2j4022821 Message accepted for delivery)
|
|
Apr 4 00:10:04 splunk3 sendmail[22822]: n347A2j4022821: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:10:09 splunk3 sendmail[22844]: n347A9Bu022844: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040710.n347A8DW021314@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:10:09 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55379
|
|
Apr 4 00:10:09 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:10:09 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:10:09 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:10:09 splunk3 spamd[5597]: spamd: processing message <200904040710.n347A8DW021314@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:10:11 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 00:10:11 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55379,mid=<200904040710.n347A8DW021314@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 4 00:10:11 splunk3 sendmail[22845]: n347A9Bu022844: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:10:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:10:14 splunk3 sendmail[22882]: n347AEFY022882: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:10:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:10:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:11:14 splunk3 sendmail[23128]: n347BE3f023128: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 00:12:14 splunk3 sendmail[23365]: n347CEQx023365: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:13:14 splunk3 sendmail[23605]: n347DE7j023605: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:14:14 splunk3 sendmail[23840]: n347EEY8023840: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:15:09 splunk3 sendmail[24057]: n347F93p024057: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040715.n347F9DB022107@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:15:09 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55435
|
|
Apr 4 00:15:09 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:15:09 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:15:09 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:15:09 splunk3 spamd[5597]: spamd: processing message <200904040715.n347F9DB022107@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:15:11 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Apr 4 00:15:11 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55435,mid=<200904040715.n347F9DB022107@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 4 00:15:11 splunk3 sendmail[24058]: n347F93p024057: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:15:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:15:14 splunk3 sendmail[24094]: n347FEpP024094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:15:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:15:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:16:14 splunk3 sendmail[24336]: n347GEPA024336: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:17:14 splunk3 sendmail[24575]: n347HEMZ024575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:18:14 splunk3 sendmail[24809]: n347IEZZ024809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:19:14 splunk3 sendmail[25047]: n347JE8J025047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:20:10 splunk3 sendmail[25266]: n347KAkr025266: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040720.n347KATD022742@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:20:10 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55491
|
|
Apr 4 00:20:10 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:20:10 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:20:10 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:20:10 splunk3 spamd[5597]: spamd: processing message <200904040720.n347KATD022742@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:20:12 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 4 00:20:12 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55491,mid=<200904040720.n347KATD022742@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 4 00:20:12 splunk3 sendmail[25268]: n347KAkr025266: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:20:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:20:14 splunk3 sendmail[25302]: n347KEnF025302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:20:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:20:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:21:14 splunk3 sendmail[25549]: n347LElt025549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:22:14 splunk3 sendmail[25786]: n347ME7D025786: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:23:14 splunk3 sendmail[26028]: n347NEkA026028: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:24:14 splunk3 sendmail[26263]: n347OEMW026263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:25:10 splunk3 sendmail[26479]: n347PAGJ026479: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040725.n347PARF023359@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:25:10 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55546
|
|
Apr 4 00:25:10 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:25:10 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:25:10 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:25:10 splunk3 spamd[5597]: spamd: processing message <200904040725.n347PARF023359@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:25:12 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 00:25:12 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55546,mid=<200904040725.n347PARF023359@virt2.int.splunk.com>,bayes=0.111804176338358,autolearn=no
|
|
Apr 4 00:25:12 splunk3 sendmail[26480]: n347PAGJ026479: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:25:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:25:14 splunk3 sendmail[26515]: n347PEil026515: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:25:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:25:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:26:05 splunk3 sendmail[26718]: n347Q3HU026718: from=<spamme@splunkit.com>, size=2714, class=0, nrcpts=1, msgid=<200904040726.n347Q3HU026718@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=iei2.internetdsl.tpnet.pl [79.189.112.2]
|
|
Apr 4 00:26:05 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55563
|
|
Apr 4 00:26:05 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:26:05 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:26:05 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:26:05 splunk3 spamd[5597]: spamd: processing message <200904040726.n347Q3HU026718@splunk3.splunkit.com> for spamme:501
|
|
Apr 4 00:26:07 splunk3 spamd[5597]: spamd: identified spam (32.0/5.0) for spamme:501 in 2.0 seconds, 3115 bytes.
|
|
Apr 4 00:26:07 splunk3 spamd[5597]: spamd: result: Y 32 - BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.0,size=3115,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55563,mid=<200904040726.n347Q3HU026718@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 4 00:26:07 splunk3 sendmail[26721]: n347Q3HU026718: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33037, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:26:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:26:14 splunk3 sendmail[26764]: n347QEep026764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 00:27:14 splunk3 sendmail[27005]: n347REoW027005: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:28:14 splunk3 sendmail[27241]: n347SEJ6027241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:29:14 splunk3 sendmail[27480]: n347TEe5027480: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:30:11 splunk3 sendmail[27699]: n347UB0S027699: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040730.n347UAM9024008@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:30:11 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55604
|
|
Apr 4 00:30:11 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:30:11 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:30:11 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:30:11 splunk3 spamd[5597]: spamd: processing message <200904040730.n347UAM9024008@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:30:13 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 00:30:13 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55604,mid=<200904040730.n347UAM9024008@virt2.int.splunk.com>,bayes=0.111796751467225,autolearn=no
|
|
Apr 4 00:30:13 splunk3 sendmail[27700]: n347UB0S027699: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:30:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:30:14 splunk3 sendmail[27732]: n347UEqn027732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:30:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:30:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:31:14 splunk3 sendmail[27979]: n347VE2E027979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:32:14 splunk3 sendmail[28213]: n347WEgS028213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:33:14 splunk3 sendmail[28452]: n347XEJo028452: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:34:14 splunk3 sendmail[28686]: n347YEXB028686: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:35:11 splunk3 sendmail[28907]: n347ZBeH028907: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040735.n347ZBHY024756@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:35:11 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55660
|
|
Apr 4 00:35:11 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:35:11 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:35:11 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:35:11 splunk3 spamd[5597]: spamd: processing message <200904040735.n347ZBHY024756@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:35:13 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Apr 4 00:35:13 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55660,mid=<200904040735.n347ZBHY024756@virt2.int.splunk.com>,bayes=0.111796751467225,autolearn=no
|
|
Apr 4 00:35:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:35:13 splunk3 sendmail[28908]: n347ZBeH028907: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:35:14 splunk3 sendmail[28931]: n347ZELG028931: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:35:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:35:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:36:14 splunk3 sendmail[29182]: n347aEMi029182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:37:14 splunk3 sendmail[29420]: n347bE7G029420: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:38:14 splunk3 sendmail[29659]: n347cET1029659: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:39:14 splunk3 sendmail[29895]: n347dEur029895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:40:12 splunk3 sendmail[30119]: n347eCux030119: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040740.n347eBhq025398@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:40:12 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55715
|
|
Apr 4 00:40:12 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:40:12 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:40:12 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:40:12 splunk3 spamd[5597]: spamd: processing message <200904040740.n347eBhq025398@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:40:14 splunk3 sendmail[30142]: n347eE6I030142: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:40:14 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 00:40:14 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55715,mid=<200904040740.n347eBhq025398@virt2.int.splunk.com>,bayes=0.111796751467225,autolearn=no
|
|
Apr 4 00:40:14 splunk3 sendmail[30120]: n347eCux030119: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:40:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:40:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:40:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:41:14 splunk3 sendmail[30398]: n347fEM3030398: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 00:42:14 splunk3 sendmail[30634]: n347gEJY030634: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:43:13 splunk3 sendmail[15522]: n346ej6d015522: timeout waiting for input from planetlab-1a.ics.uci.edu during server cmd read
|
|
Apr 4 00:43:13 splunk3 sendmail[15522]: n346ej6d015522: planetlab-1a.ics.uci.edu [128.195.54.161] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:43:14 splunk3 sendmail[30874]: n347hERj030874: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:44:14 splunk3 sendmail[31110]: n347iEqK031110: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:45:12 splunk3 sendmail[31347]: n347jCH0031347: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040745.n347jCA3026004@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:45:12 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55772
|
|
Apr 4 00:45:12 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:45:12 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:45:12 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:45:12 splunk3 spamd[5597]: spamd: processing message <200904040745.n347jCA3026004@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:45:14 splunk3 sendmail[31354]: n347jEo1031354: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:45:14 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 00:45:14 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55772,mid=<200904040745.n347jCA3026004@virt2.int.splunk.com>,bayes=0.111796751467225,autolearn=no
|
|
Apr 4 00:45:14 splunk3 sendmail[31348]: n347jCH0031347: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:45:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:45:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:45:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:46:14 splunk3 sendmail[31606]: n347kExX031606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:47:14 splunk3 sendmail[31846]: n347lEn2031846: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:48:14 splunk3 sendmail[32082]: n347mECY032082: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:49:14 splunk3 sendmail[32321]: n347nE1j032321: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:50:13 splunk3 sendmail[32561]: n347oCXn032561: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040750.n347oCkq026618@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:50:13 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55827
|
|
Apr 4 00:50:13 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:50:13 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:50:13 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:50:13 splunk3 spamd[5597]: spamd: processing message <200904040750.n347oCkq026618@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:50:14 splunk3 sendmail[32568]: n347oEU4032568: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:50:15 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 00:50:15 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55827,mid=<200904040750.n347oCkq026618@virt2.int.splunk.com>,bayes=0.111796751467225,autolearn=no
|
|
Apr 4 00:50:15 splunk3 sendmail[32562]: n347oCXn032561: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:50:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:50:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:50:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:51:14 splunk3 sendmail[356]: n347pESS000356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:52:14 splunk3 sendmail[592]: n347qEAD000592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:53:14 splunk3 sendmail[834]: n347rEZ2000834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:54:14 splunk3 sendmail[1068]: n347sEsQ001068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:55:13 splunk3 sendmail[1308]: n347tDAf001308: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040755.n347tDLH027222@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 00:55:13 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55883
|
|
Apr 4 00:55:13 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 00:55:13 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 00:55:13 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 00:55:13 splunk3 spamd[5597]: spamd: processing message <200904040755.n347tDLH027222@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 00:55:14 splunk3 sendmail[1314]: n347tERp001314: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:55:15 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 00:55:15 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=55883,mid=<200904040755.n347tDLH027222@virt2.int.splunk.com>,bayes=0.111796751467225,autolearn=no
|
|
Apr 4 00:55:15 splunk3 sendmail[1309]: n347tDAf001308: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 00:55:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 00:55:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 00:55:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 00:56:14 splunk3 sendmail[1565]: n347uEue001565: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 00:57:14 splunk3 sendmail[1806]: n347vErA001806: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:58:14 splunk3 sendmail[2045]: n347wEXY002045: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 00:59:14 splunk3 sendmail[2283]: n347xETp002283: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:00:04 splunk3 sendmail[2550]: n34804si002550: from=root, size=291, class=0, nrcpts=1, msgid=<200904040800.n34804si002550@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 01:00:04 splunk3 sendmail[2553]: n34804JJ002553: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040800.n34804si002550@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 01:00:04 splunk3 sendmail[2550]: n34804si002550: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34804JJ002553 Message accepted for delivery)
|
|
Apr 4 01:00:06 splunk3 sendmail[2554]: n34804JJ002553: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:00:14 splunk3 sendmail[2597]: n3480Eso002597: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040800.n3480DJ5027854@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:00:14 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 55940
|
|
Apr 4 01:00:14 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:00:14 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 01:00:14 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 01:00:14 splunk3 sendmail[2598]: n3480Eso002597: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:00:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:00:14 splunk3 sendmail[2602]: n3480Eqa002602: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:00:16 splunk3 sendmail[2616]: n3480GQZ002616: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904040800.n3480GQZ002616@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 01:00:16 splunk3 sendmail[2619]: n3480GQZ002616: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 01:00:16 splunk3 sendmail[2619]: n3480GQZ002616: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 4 01:00:16 splunk3 sendmail[2619]: n3480GQZ002616: n3480GQZ002619: postmaster notify: User unknown
|
|
Apr 4 01:00:18 splunk3 sendmail[2619]: n3480GQZ002619: to=root, delay=00:00:02, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:00:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:00:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:01:14 splunk3 sendmail[2895]: n3481ENq002895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:01:16 splunk3 sendmail[2836]: n348117V002836: from=root, size=443, class=0, nrcpts=1, msgid=<200904040801.n348117V002836@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 01:01:16 splunk3 sendmail[2896]: n3481GZL002896: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040801.n348117V002836@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 01:01:16 splunk3 sendmail[2836]: n348117V002836: to=root, ctladdr=root (0/0), delay=00:00:15, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3481GZL002896 Message accepted for delivery)
|
|
Apr 4 01:01:18 splunk3 sendmail[2897]: n3481GZL002896: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:02:14 splunk3 sendmail[3143]: n3482E9Q003143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:03:14 splunk3 sendmail[3384]: n3483EG2003384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:04:14 splunk3 sendmail[3640]: n3484EvO003640: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:05:14 splunk3 sendmail[3887]: n3485ET1003887: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:05:15 splunk3 sendmail[3889]: n3485Fhm003889: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040805.n3485Eea028537@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:05:15 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56004
|
|
Apr 4 01:05:15 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:05:15 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 01:05:15 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 01:05:15 splunk3 sendmail[3890]: n3485Fhm003889: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:05:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:05:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:05:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:06:14 splunk3 sendmail[4158]: n3486ExV004158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:06:52 splunk3 sendmail[30993]: n347hhGE030993: [77.64.38.84] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:07:14 splunk3 sendmail[4413]: n3487E7D004413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:08:14 splunk3 sendmail[4654]: n3488Eke004654: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:09:14 splunk3 sendmail[4895]: n3489EnW004895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:10:02 splunk3 sendmail[5233]: n348A2aT005233: from=root, size=292, class=0, nrcpts=1, msgid=<200904040810.n348A2aT005233@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 01:10:02 splunk3 sendmail[5238]: n348A2qc005238: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040810.n348A2aT005233@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 01:10:02 splunk3 sendmail[5233]: n348A2aT005233: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n348A2qc005238 Message accepted for delivery)
|
|
Apr 4 01:10:03 splunk3 sendmail[5239]: n348A2qc005238: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:10:14 splunk3 sendmail[5282]: n348AEZh005282: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:10:15 splunk3 sendmail[5284]: n348AFlw005284: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040810.n348AFni029148@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:10:15 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56060
|
|
Apr 4 01:10:15 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:10:15 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:10:15 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:10:15 splunk3 spamd[5597]: spamd: processing message <200904040810.n348AFni029148@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:10:17 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 01:10:17 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56060,mid=<200904040810.n348AFni029148@virt2.int.splunk.com>,bayes=0.111796751467225,autolearn=no
|
|
Apr 4 01:10:17 splunk3 sendmail[5285]: n348AFlw005284: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:10:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:10:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:10:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:11:14 splunk3 sendmail[5547]: n348BEsN005547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 01:12:14 splunk3 sendmail[5785]: n348CEtO005785: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:13:14 splunk3 sendmail[6024]: n348DE3s006024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:14:14 splunk3 sendmail[6259]: n348EEMq006259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:15:14 splunk3 sendmail[6499]: n348FE5c006499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:15:16 splunk3 sendmail[6500]: n348FGcv006500: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040815.n348FFR7029944@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:15:16 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56117
|
|
Apr 4 01:15:16 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:15:16 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:15:16 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:15:16 splunk3 spamd[5597]: spamd: processing message <200904040815.n348FFR7029944@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:15:18 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 4 01:15:18 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56117,mid=<200904040815.n348FFR7029944@virt2.int.splunk.com>,bayes=0.111796751467225,autolearn=no
|
|
Apr 4 01:15:18 splunk3 sendmail[6501]: n348FGcv006500: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:15:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:15:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:15:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:16:14 splunk3 sendmail[6757]: n348GEHI006757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:17:14 splunk3 sendmail[6995]: n348HEGJ006995: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:18:14 splunk3 sendmail[7231]: n348IEqe007231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:19:14 splunk3 sendmail[7472]: n348JExo007472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:20:14 splunk3 sendmail[7720]: n348KEtL007720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:20:17 splunk3 sendmail[7739]: n348KHQE007739: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040820.n348KG4M030573@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:20:17 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56173
|
|
Apr 4 01:20:17 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:20:17 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:20:17 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:20:17 splunk3 spamd[5597]: spamd: processing message <200904040820.n348KG4M030573@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:20:19 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 4 01:20:19 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56173,mid=<200904040820.n348KG4M030573@virt2.int.splunk.com>,bayes=0.111796751467225,autolearn=no
|
|
Apr 4 01:20:19 splunk3 sendmail[7740]: n348KHQE007739: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:20:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:20:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:20:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:20:59 splunk3 sendmail[7928]: n348KxTg007928: from=<3axjXSRQKBqQKSSKPIEPIVXW-RSVITPcKSSKPI.GSQWTEQQIWTPYROMX.GSQ@alerts.bounces.google.com>, size=2526, class=0, nrcpts=1, msgid=<0016361e880659e47d0466b658ff@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 4 01:20:59 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56188
|
|
Apr 4 01:20:59 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:20:59 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:20:59 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:20:59 splunk3 spamd[5597]: spamd: processing message <0016361e880659e47d0466b658ff@google.com> for spamme:501
|
|
Apr 4 01:21:02 splunk3 spamd[5597]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.2 seconds, 2960 bytes.
|
|
Apr 4 01:21:02 splunk3 spamd[5597]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.2,size=2960,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56188,mid=<0016361e880659e47d0466b658ff@google.com>,bayes=0,autolearn=ham
|
|
Apr 4 01:21:02 splunk3 sendmail[7929]: n348KxTg007928: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=32741, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:21:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:21:14 splunk3 sendmail[7988]: n348LEEe007988: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:22:14 splunk3 sendmail[8224]: n348MEL5008224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:23:14 splunk3 sendmail[8467]: n348NE8A008467: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:24:14 splunk3 sendmail[8701]: n348OER7008701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:25:14 splunk3 sendmail[8940]: n348PEUn008940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:25:17 splunk3 sendmail[8958]: n348PHhV008958: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040825.n348PHAT031187@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:25:17 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56229
|
|
Apr 4 01:25:17 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:25:17 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:25:17 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:25:17 splunk3 spamd[5597]: spamd: processing message <200904040825.n348PHAT031187@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:25:19 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 01:25:19 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56229,mid=<200904040825.n348PHAT031187@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 01:25:19 splunk3 sendmail[8959]: n348PHhV008958: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:25:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:25:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:25:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:26:14 splunk3 sendmail[9199]: n348QEMQ009199: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 01:27:14 splunk3 sendmail[9437]: n348REWh009437: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:28:14 splunk3 sendmail[9684]: n348SEet009684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:29:14 splunk3 sendmail[9922]: n348TEbJ009922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:30:14 splunk3 sendmail[10161]: n348UEGV010161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:30:18 splunk3 sendmail[10180]: n348UIQI010180: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040830.n348UHeG031805@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:30:18 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56286
|
|
Apr 4 01:30:18 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:30:18 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:30:18 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:30:18 splunk3 spamd[5597]: spamd: processing message <200904040830.n348UHeG031805@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:30:20 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 01:30:20 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56286,mid=<200904040830.n348UHeG031805@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 01:30:20 splunk3 sendmail[10181]: n348UIQI010180: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:30:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:30:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:30:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:31:14 splunk3 sendmail[10423]: n348VEiW010423: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:32:14 splunk3 sendmail[10658]: n348WEn4010658: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:33:14 splunk3 sendmail[10898]: n348XE1h010898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:34:14 splunk3 sendmail[11134]: n348YEbA011134: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:35:14 splunk3 sendmail[11373]: n348ZEAd011373: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:35:18 splunk3 sendmail[11392]: n348ZInf011392: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040835.n348ZILd032554@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:35:18 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56341
|
|
Apr 4 01:35:18 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:35:18 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:35:18 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:35:18 splunk3 spamd[5597]: spamd: processing message <200904040835.n348ZILd032554@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:35:20 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 01:35:20 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56341,mid=<200904040835.n348ZILd032554@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 01:35:20 splunk3 sendmail[11393]: n348ZInf011392: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:35:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:35:24 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:35:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:36:14 splunk3 sendmail[11631]: n348aEVY011631: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:37:14 splunk3 sendmail[11869]: n348bE63011869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:38:14 splunk3 sendmail[12108]: n348cEdS012108: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:39:14 splunk3 sendmail[12345]: n348dEeI012345: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:40:14 splunk3 sendmail[12584]: n348eEBf012584: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:40:19 splunk3 sendmail[12604]: n348eJIP012604: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904040840.n348eJs8000723@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:40:19 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56397
|
|
Apr 4 01:40:19 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:40:19 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:40:19 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:40:19 splunk3 spamd[5597]: spamd: processing message <200904040840.n348eJs8000723@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:40:22 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1302 bytes.
|
|
Apr 4 01:40:22 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56397,mid=<200904040840.n348eJs8000723@virt2.int.splunk.com>,bayes=0.0659147392537274,autolearn=no
|
|
Apr 4 01:40:22 splunk3 sendmail[12605]: n348eJIP012604: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:40:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:40:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:40:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:41:14 splunk3 sendmail[12845]: n348fEhS012845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 01:42:14 splunk3 sendmail[13080]: n348gEDr013080: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:43:14 splunk3 sendmail[13352]: n348hEuv013352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:44:14 splunk3 sendmail[13590]: n348iEhI013590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:45:14 splunk3 sendmail[13827]: n348jE9E013827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:45:20 splunk3 sendmail[13848]: n348jJ94013848: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040845.n348jJTw001346@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:45:20 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56453
|
|
Apr 4 01:45:20 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:45:20 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:45:20 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:45:20 splunk3 spamd[5597]: spamd: processing message <200904040845.n348jJTw001346@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:45:22 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 01:45:22 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56453,mid=<200904040845.n348jJTw001346@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 01:45:22 splunk3 sendmail[13849]: n348jJ94013848: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:45:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:45:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:45:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:46:14 splunk3 sendmail[14085]: n348kEwq014085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:47:14 splunk3 sendmail[14325]: n348lE9l014325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:48:14 splunk3 sendmail[14559]: n348mEU9014559: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:49:14 splunk3 sendmail[14799]: n348nE72014799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:50:14 splunk3 sendmail[15040]: n348oEMk015040: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:50:20 splunk3 sendmail[15058]: n348oKko015058: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040850.n348oK59001987@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:50:20 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56509
|
|
Apr 4 01:50:20 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:50:20 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:50:20 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:50:20 splunk3 spamd[5597]: spamd: processing message <200904040850.n348oK59001987@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:50:22 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 01:50:22 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56509,mid=<200904040850.n348oK59001987@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 01:50:22 splunk3 sendmail[15059]: n348oKko015058: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:50:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:50:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:50:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:51:14 splunk3 sendmail[15302]: n348pEoX015302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:52:14 splunk3 sendmail[15537]: n348qEjC015537: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:53:14 splunk3 sendmail[15781]: n348rEJX015781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:54:14 splunk3 sendmail[16016]: n348sEHL016016: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:55:14 splunk3 sendmail[16253]: n348tEMV016253: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:55:21 splunk3 sendmail[16273]: n348tLLv016273: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040855.n348tKN7002605@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 01:55:21 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56564
|
|
Apr 4 01:55:21 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 01:55:21 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 01:55:21 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 01:55:21 splunk3 spamd[5597]: spamd: processing message <200904040855.n348tKN7002605@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 01:55:23 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 01:55:23 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56564,mid=<200904040855.n348tKN7002605@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 01:55:23 splunk3 sendmail[16274]: n348tLLv016273: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 01:55:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 01:55:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 01:55:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 01:56:14 splunk3 sendmail[16511]: n348uEhd016511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 01:57:14 splunk3 sendmail[16750]: n348vEqt016750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:58:14 splunk3 sendmail[16986]: n348wEB1016986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 01:59:14 splunk3 sendmail[17223]: n348xEjM017223: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:00:04 splunk3 sendmail[17486]: n349048A017486: from=root, size=291, class=0, nrcpts=1, msgid=<200904040900.n349048A017486@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 02:00:04 splunk3 sendmail[17490]: n34904U6017490: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904040900.n349048A017486@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 02:00:04 splunk3 sendmail[17486]: n349048A017486: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34904U6017490 Message accepted for delivery)
|
|
Apr 4 02:00:05 splunk3 sendmail[17491]: n34904U6017490: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:00:14 splunk3 sendmail[17532]: n3490E7W017532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:00:21 splunk3 sendmail[17578]: n3490LKu017578: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040900.n3490LOc003250@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:00:21 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56623
|
|
Apr 4 02:00:21 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:00:21 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 02:00:21 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 02:00:21 splunk3 sendmail[17580]: n3490LKu017578: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:00:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:00:22 splunk3 sendmail[17596]: n3490MlW017596: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904040900.n3490MlW017596@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 02:00:22 splunk3 sendmail[17598]: n3490MlW017596: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 02:00:22 splunk3 sendmail[17598]: n3490MlW017596: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 02:00:22 splunk3 sendmail[17598]: n3490MlW017596: n3490MlW017598: postmaster notify: User unknown
|
|
Apr 4 02:00:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:00:24 splunk3 sendmail[17598]: n3490MlW017598: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:00:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:01:12 splunk3 sendmail[17757]: n34911Ww017757: from=root, size=443, class=0, nrcpts=1, msgid=<200904040901.n34911Ww017757@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 02:01:12 splunk3 sendmail[17815]: n3491CDZ017815: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904040901.n34911Ww017757@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 02:01:12 splunk3 sendmail[17757]: n34911Ww017757: to=root, ctladdr=root (0/0), delay=00:00:11, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3491CDZ017815 Message accepted for delivery)
|
|
Apr 4 02:01:14 splunk3 sendmail[17816]: n3491CDZ017815: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:01:14 splunk3 sendmail[17823]: n3491E0O017823: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:02:14 splunk3 sendmail[18056]: n3492EDg018056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:03:14 splunk3 sendmail[18296]: n3493EB9018296: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:04:14 splunk3 sendmail[18532]: n3494E4f018532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:05:14 splunk3 sendmail[18770]: n3495Eh2018770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:05:22 splunk3 sendmail[18815]: n3495LP2018815: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040905.n3495LIJ003934@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:05:22 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56687
|
|
Apr 4 02:05:22 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:05:22 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 02:05:22 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 02:05:22 splunk3 sendmail[18816]: n3495LP2018815: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:05:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:05:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:05:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:06:15 splunk3 sendmail[19026]: n3496ElU019026: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:07:15 splunk3 sendmail[19266]: n3497FCC019266: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:08:15 splunk3 sendmail[19507]: n3498FK8019507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:09:15 splunk3 sendmail[19744]: n3499FuY019744: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:10:03 splunk3 sendmail[20042]: n349A3SX020042: from=root, size=292, class=0, nrcpts=1, msgid=<200904040910.n349A3SX020042@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 02:10:03 splunk3 sendmail[20047]: n349A3B5020047: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904040910.n349A3SX020042@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 02:10:03 splunk3 sendmail[20042]: n349A3SX020042: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n349A3B5020047 Message accepted for delivery)
|
|
Apr 4 02:10:04 splunk3 sendmail[20048]: n349A3B5020047: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:10:15 splunk3 sendmail[20091]: n349AFFl020091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:10:22 splunk3 sendmail[20137]: n349AMCZ020137: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040910.n349AMcT004549@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:10:22 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56743
|
|
Apr 4 02:10:22 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:10:22 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:10:22 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:10:22 splunk3 spamd[5597]: spamd: processing message <200904040910.n349AMcT004549@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:10:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:10:24 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 4 02:10:24 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56743,mid=<200904040910.n349AMcT004549@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 02:10:24 splunk3 sendmail[20138]: n349AMCZ020137: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:10:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:10:44 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:11:15 splunk3 sendmail[20353]: n349BFI7020353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 02:12:15 splunk3 sendmail[20588]: n349CFcY020588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:13:15 splunk3 sendmail[20828]: n349DFxP020828: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:14:15 splunk3 sendmail[21063]: n349EFsX021063: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:15:15 splunk3 sendmail[21301]: n349FF9c021301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:15:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:15:23 splunk3 sendmail[21345]: n349FNIx021345: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040915.n349FNbA005341@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:15:23 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56800
|
|
Apr 4 02:15:23 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:15:23 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:15:23 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:15:23 splunk3 spamd[5597]: spamd: processing message <200904040915.n349FNbA005341@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:15:25 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 02:15:25 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56800,mid=<200904040915.n349FNbA005341@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 02:15:25 splunk3 sendmail[21346]: n349FNIx021345: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:15:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:15:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:16:15 splunk3 sendmail[21557]: n349GFvk021557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:17:15 splunk3 sendmail[21795]: n349HFI2021795: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:18:15 splunk3 sendmail[22032]: n349IFeu022032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:19:15 splunk3 sendmail[22273]: n349JFfP022273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:20:15 splunk3 sendmail[22511]: n349KFAv022511: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:20:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:20:24 splunk3 sendmail[22558]: n349KObn022558: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040920.n349KN4n005981@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:20:24 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56860
|
|
Apr 4 02:20:24 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:20:24 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:20:24 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:20:24 splunk3 spamd[5597]: spamd: processing message <200904040920.n349KN4n005981@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:20:27 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 4 02:20:27 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56860,mid=<200904040920.n349KN4n005981@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 02:20:27 splunk3 sendmail[22564]: n349KObn022558: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:20:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:20:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:21:15 splunk3 sendmail[22773]: n349LFCe022773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:22:15 splunk3 sendmail[23010]: n349MFQt023010: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:23:15 splunk3 sendmail[23252]: n349NFjL023252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:24:15 splunk3 sendmail[23487]: n349OFJS023487: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:25:15 splunk3 sendmail[23727]: n349PF0J023727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:25:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:25:25 splunk3 sendmail[23774]: n349POim023774: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040925.n349POYt006584@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:25:25 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56919
|
|
Apr 4 02:25:25 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:25:25 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:25:25 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:25:25 splunk3 spamd[5597]: spamd: processing message <200904040925.n349POYt006584@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:25:27 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 4 02:25:27 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56919,mid=<200904040925.n349POYt006584@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 02:25:27 splunk3 sendmail[23783]: n349POim023774: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:25:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:25:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:26:15 splunk3 sendmail[23986]: n349QFJq023986: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 02:27:15 splunk3 sendmail[24225]: n349RFE1024225: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:28:15 splunk3 sendmail[24461]: n349SFtv024461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:29:15 splunk3 sendmail[24701]: n349TFAP024701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:30:15 splunk3 sendmail[24938]: n349UFgt024938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:30:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:30:25 splunk3 sendmail[24986]: n349UP6p024986: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040930.n349UPFT007211@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:30:25 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 56975
|
|
Apr 4 02:30:25 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:30:25 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:30:25 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:30:25 splunk3 spamd[5597]: spamd: processing message <200904040930.n349UPFT007211@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:30:28 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 4 02:30:28 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56975,mid=<200904040930.n349UPFT007211@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 02:30:28 splunk3 sendmail[24998]: n349UP6p024986: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:30:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:30:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:31:15 splunk3 sendmail[25201]: n349VFvt025201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:32:15 splunk3 sendmail[25435]: n349WFt8025435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:33:15 splunk3 sendmail[25674]: n349XFR0025674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:34:15 splunk3 sendmail[25910]: n349YFeM025910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:35:15 splunk3 sendmail[26149]: n349ZF6D026149: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:35:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:35:26 splunk3 sendmail[26223]: n349ZPgl026223: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040935.n349ZPCl007956@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:35:26 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57031
|
|
Apr 4 02:35:26 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:35:26 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:35:26 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:35:26 splunk3 spamd[5597]: spamd: processing message <200904040935.n349ZPCl007956@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:35:28 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1305 bytes.
|
|
Apr 4 02:35:28 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57031,mid=<200904040935.n349ZPCl007956@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 02:35:28 splunk3 sendmail[26225]: n349ZPgl026223: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:35:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:35:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:36:15 splunk3 sendmail[26408]: n349aFqv026408: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:37:15 splunk3 sendmail[26646]: n349bFAC026646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:38:15 splunk3 sendmail[26886]: n349cF7D026886: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:39:15 splunk3 sendmail[27125]: n349dFqN027125: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:40:15 splunk3 sendmail[27367]: n349eFob027367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:40:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:40:26 splunk3 sendmail[27443]: n349eQGq027443: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040940.n349eQWE008597@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:40:26 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57087
|
|
Apr 4 02:40:26 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:40:26 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:40:26 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:40:26 splunk3 spamd[5597]: spamd: processing message <200904040940.n349eQWE008597@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:40:28 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 02:40:28 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57087,mid=<200904040940.n349eQWE008597@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 02:40:28 splunk3 sendmail[27444]: n349eQGq027443: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:40:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:41:15 splunk3 sendmail[27627]: n349fFvE027627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 02:42:15 splunk3 sendmail[27862]: n349gFmN027862: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:43:15 splunk3 sendmail[28104]: n349hFKk028104: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:44:15 splunk3 sendmail[28338]: n349iFcA028338: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:45:15 splunk3 sendmail[28576]: n349jFFf028576: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:45:23 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:45:27 splunk3 sendmail[28651]: n349jRVh028651: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040945.n349jQEs009208@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:45:27 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57143
|
|
Apr 4 02:45:27 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:45:27 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:45:27 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:45:27 splunk3 spamd[5597]: spamd: processing message <200904040945.n349jQEs009208@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:45:29 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 4 02:45:29 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57143,mid=<200904040945.n349jQEs009208@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 02:45:29 splunk3 sendmail[28652]: n349jRVh028651: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:45:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:46:15 splunk3 sendmail[28835]: n349kF1p028835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:47:15 splunk3 sendmail[29071]: n349lFED029071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:48:15 splunk3 sendmail[29304]: n349mFiV029304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:49:15 splunk3 sendmail[29543]: n349nFX4029543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:50:15 splunk3 sendmail[29783]: n349oFXf029783: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:50:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:50:27 splunk3 sendmail[29860]: n349oRio029860: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904040950.n349oRPw009829@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:50:27 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57199
|
|
Apr 4 02:50:27 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:50:27 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:50:27 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:50:27 splunk3 spamd[5597]: spamd: processing message <200904040950.n349oRPw009829@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:50:29 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 02:50:29 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57199,mid=<200904040950.n349oRPw009829@virt2.int.splunk.com>,bayes=0.168689333821006,autolearn=no
|
|
Apr 4 02:50:29 splunk3 sendmail[29861]: n349oRio029860: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:50:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:50:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:51:15 splunk3 sendmail[30045]: n349pF3i030045: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:52:15 splunk3 sendmail[30281]: n349qFdP030281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:53:15 splunk3 sendmail[30524]: n349rFii030524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:54:15 splunk3 sendmail[30759]: n349sFxg030759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:55:13 splunk3 sendmail[30978]: n349tCno030978: ruleset=check_rcpt, arg1=<sanjinn001@yahoo.com.tw>, relay=61-231-68-166.dynamic.hinet.net [61.231.68.166], reject=550 5.7.1 <sanjinn001@yahoo.com.tw>... Relaying denied
|
|
Apr 4 02:55:15 splunk3 sendmail[30999]: n349tFRd030999: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:55:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 02:55:28 splunk3 sendmail[31075]: n349tS6X031075: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904040955.n349tRlJ010457@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 02:55:28 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57254
|
|
Apr 4 02:55:28 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 02:55:28 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 02:55:28 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 02:55:28 splunk3 spamd[5597]: spamd: processing message <200904040955.n349tRlJ010457@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 02:55:30 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 02:55:30 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57254,mid=<200904040955.n349tRlJ010457@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 02:55:30 splunk3 sendmail[31076]: n349tS6X031075: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 02:55:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 02:55:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 02:56:15 splunk3 sendmail[31256]: n349uFXb031256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 02:57:15 splunk3 sendmail[31496]: n349vF8d031496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:58:15 splunk3 sendmail[31733]: n349wFJP031733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 02:59:15 splunk3 sendmail[31972]: n349xFDx031972: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:00:04 splunk3 sendmail[32235]: n34A04cx032235: from=root, size=291, class=0, nrcpts=1, msgid=<200904041000.n34A04cx032235@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 03:00:04 splunk3 sendmail[32239]: n34A040i032239: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041000.n34A04cx032235@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 03:00:04 splunk3 sendmail[32235]: n34A04cx032235: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34A040i032239 Message accepted for delivery)
|
|
Apr 4 03:00:06 splunk3 sendmail[32241]: n34A040i032239: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:00:15 splunk3 sendmail[32282]: n34A0F2D032282: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:00:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:00:28 splunk3 sendmail[32360]: n34A0S6v032360: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904041000.n34A0S6v032360@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 03:00:28 splunk3 sendmail[32362]: n34A0S6v032360: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 03:00:28 splunk3 sendmail[32362]: n34A0S6v032360: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 03:00:28 splunk3 sendmail[32362]: n34A0S6v032360: n34A0S6v032362: postmaster notify: User unknown
|
|
Apr 4 03:00:28 splunk3 sendmail[32374]: n34A0SAv032374: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041000.n34A0SS1011070@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:00:28 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57319
|
|
Apr 4 03:00:28 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:00:28 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 03:00:28 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 03:00:28 splunk3 sendmail[32376]: n34A0SAv032374: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:00:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:00:29 splunk3 sendmail[32362]: n34A0S6v032362: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:00:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:01:14 splunk3 sendmail[32524]: n34A11uU032524: from=root, size=443, class=0, nrcpts=1, msgid=<200904041001.n34A11uU032524@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 03:01:14 splunk3 sendmail[32565]: n34A1E9Q032565: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041001.n34A11uU032524@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 03:01:14 splunk3 sendmail[32524]: n34A11uU032524: to=root, ctladdr=root (0/0), delay=00:00:13, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34A1E9Q032565 Message accepted for delivery)
|
|
Apr 4 03:01:15 splunk3 sendmail[32570]: n34A1FjC032570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:01:15 splunk3 sendmail[32566]: n34A1E9Q032565: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:02:15 splunk3 sendmail[340]: n34A2FlQ000340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:03:15 splunk3 sendmail[595]: n34A3FCA000595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:03:41 splunk3 sendmail[661]: n34A3ZgQ000661: from=<spamme@splunkit.com>, size=2763, class=0, nrcpts=1, msgid=<200904041003.n34A3ZgQ000661@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=ppp-124-122-234-83.revip2.asianet.co.th [124.122.234.83]
|
|
Apr 4 03:03:41 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57351
|
|
Apr 4 03:03:41 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:03:41 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 03:03:41 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 03:03:41 splunk3 sendmail[696]: n34A3ZgQ000661: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:01, xdelay=00:00:00, mailer=local, pri=33116, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:03:41 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:04:15 splunk3 sendmail[835]: n34A4FZo000835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:05:15 splunk3 sendmail[1073]: n34A5FWu001073: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:05:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:05:29 splunk3 sendmail[1134]: n34A5T6S001134: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041005.n34A5SY0011778@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:05:29 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57376
|
|
Apr 4 03:05:29 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:05:29 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 03:05:29 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 03:05:29 splunk3 sendmail[1135]: n34A5T6S001134: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:05:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:05:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:06:15 splunk3 sendmail[1332]: n34A6FpV001332: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:07:15 splunk3 sendmail[1570]: n34A7FoW001570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:08:15 splunk3 sendmail[1808]: n34A8F8J001808: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:09:15 splunk3 sendmail[2050]: n34A9F5i002050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:10:02 splunk3 sendmail[2331]: n34AA2KQ002331: from=root, size=292, class=0, nrcpts=1, msgid=<200904041010.n34AA2KQ002331@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 03:10:02 splunk3 sendmail[2336]: n34AA2Z3002336: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041010.n34AA2KQ002331@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 03:10:02 splunk3 sendmail[2331]: n34AA2KQ002331: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34AA2Z3002336 Message accepted for delivery)
|
|
Apr 4 03:10:03 splunk3 sendmail[2338]: n34AA2Z3002336: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:10:15 splunk3 sendmail[2396]: n34AAFRF002396: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:10:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:10:29 splunk3 sendmail[2457]: n34AATPH002457: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041010.n34AAToj012373@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:10:29 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57433
|
|
Apr 4 03:10:29 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:10:29 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:10:29 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:10:29 splunk3 spamd[5597]: spamd: processing message <200904041010.n34AAToj012373@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:10:31 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 03:10:31 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57433,mid=<200904041010.n34AAToj012373@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:10:31 splunk3 sendmail[2458]: n34AATPH002457: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:10:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:10:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:11:15 splunk3 sendmail[2664]: n34ABF5j002664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 03:12:15 splunk3 sendmail[2924]: n34ACFUx002924: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:13:15 splunk3 sendmail[3181]: n34ADF4g003181: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:14:15 splunk3 sendmail[3415]: n34AEFaL003415: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:15:15 splunk3 sendmail[3674]: n34AFFGX003674: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:15:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:15:30 splunk3 sendmail[3761]: n34AFUeO003761: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041015.n34AFUBs013186@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:15:30 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57489
|
|
Apr 4 03:15:30 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:15:30 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:15:30 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:15:30 splunk3 spamd[5597]: spamd: processing message <200904041015.n34AFUBs013186@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:15:32 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 03:15:32 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57489,mid=<200904041015.n34AFUBs013186@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:15:32 splunk3 sendmail[3762]: n34AFUeO003761: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:15:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:15:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:16:15 splunk3 sendmail[3943]: n34AGFnr003943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:17:15 splunk3 sendmail[4200]: n34AHF8x004200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:18:15 splunk3 sendmail[4446]: n34AIFxr004446: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:19:15 splunk3 sendmail[4688]: n34AJFwW004688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:20:01 splunk3 sendmail[4883]: n34AK1SO004883: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041020.n34AK0Tt013706@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:20:01 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57540
|
|
Apr 4 03:20:01 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:20:01 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:20:01 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:20:01 splunk3 spamd[5597]: spamd: processing message <200904041020.n34AK0Tt013706@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:20:03 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 4 03:20:03 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57540,mid=<200904041020.n34AK0Tt013706@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:20:03 splunk3 sendmail[4885]: n34AK1SO004883: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:20:15 splunk3 sendmail[4958]: n34AKFxj004958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:20:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:20:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:21:15 splunk3 sendmail[5241]: n34ALFxH005241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:22:15 splunk3 sendmail[5478]: n34AMFGT005478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:23:15 splunk3 sendmail[5722]: n34ANFqY005722: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:24:15 splunk3 sendmail[5959]: n34AOFu6005959: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:25:02 splunk3 sendmail[6149]: n34AP2Bm006149: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041025.n34AP1bc014341@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:25:02 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57596
|
|
Apr 4 03:25:02 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:25:02 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:25:02 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:25:02 splunk3 spamd[5597]: spamd: processing message <200904041025.n34AP1bc014341@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:25:03 splunk3 sendmail[6156]: n34AP3bk006156: from=<3fzXXSRQKBtU7FF7C51C5IKJ-EFI5GCP7FF7C5.3FDJG1DD5JGCLEB9K.3FD@alerts.bounces.google.com>, size=7041, class=0, nrcpts=1, msgid=<0016361e7cc60e9eaa0466b81477@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 4 03:25:04 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 03:25:04 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57596,mid=<200904041025.n34AP1bc014341@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:25:04 splunk3 sendmail[6150]: n34AP2Bm006149: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:25:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:25:12 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57598
|
|
Apr 4 03:25:12 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:25:12 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:25:12 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:25:12 splunk3 spamd[5597]: spamd: processing message <0016361e7cc60e9eaa0466b81477@google.com> for spamme:501
|
|
Apr 4 03:25:14 splunk3 spamd[5597]: spamd: clean message (-1.3/5.0) for spamme:501 in 2.5 seconds, 7475 bytes.
|
|
Apr 4 03:25:14 splunk3 spamd[5597]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=2.5,size=7475,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57598,mid=<0016361e7cc60e9eaa0466b81477@google.com>,bayes=0,autolearn=no
|
|
Apr 4 03:25:14 splunk3 sendmail[6157]: n34AP3bk006156: to=<spamme@splunkit.com>, delay=00:00:11, xdelay=00:00:10, mailer=local, pri=37256, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:25:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:25:15 splunk3 sendmail[6218]: n34APFhW006218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:25:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:25:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:26:15 splunk3 sendmail[6461]: n34AQF9o006461: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 03:27:15 splunk3 sendmail[6700]: n34ARFKC006700: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:28:15 splunk3 sendmail[6937]: n34ASFJM006937: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:29:15 splunk3 sendmail[7174]: n34ATFgl007174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:30:02 splunk3 sendmail[7370]: n34AU2CW007370: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041030.n34AU2XB014995@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:30:02 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57652
|
|
Apr 4 03:30:02 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:30:02 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:30:02 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:30:02 splunk3 spamd[5597]: spamd: processing message <200904041030.n34AU2XB014995@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:30:04 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 4 03:30:04 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57652,mid=<200904041030.n34AU2XB014995@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:30:04 splunk3 sendmail[7371]: n34AU2CW007370: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:30:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:30:15 splunk3 sendmail[7430]: n34AUFuj007430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:30:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:30:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:31:15 splunk3 sendmail[7688]: n34AVFJB007688: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:32:15 splunk3 sendmail[7922]: n34AWF6h007922: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:33:15 splunk3 sendmail[8162]: n34AXFmL008162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:34:15 splunk3 sendmail[8397]: n34AYFe6008397: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:35:03 splunk3 sendmail[8590]: n34AZ3Xw008590: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041035.n34AZ3n0015739@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:35:03 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57708
|
|
Apr 4 03:35:03 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:35:03 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:35:03 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:35:03 splunk3 spamd[5597]: spamd: processing message <200904041035.n34AZ3n0015739@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:35:05 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 03:35:05 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57708,mid=<200904041035.n34AZ3n0015739@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:35:05 splunk3 sendmail[8591]: n34AZ3Xw008590: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:35:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:35:15 splunk3 sendmail[8650]: n34AZFDc008650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:35:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:35:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:36:15 splunk3 sendmail[8891]: n34AaFjp008891: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:37:15 splunk3 sendmail[9131]: n34AbFon009131: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:38:15 splunk3 sendmail[9371]: n34AcFIK009371: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:39:15 splunk3 sendmail[9621]: n34AdFMD009621: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:40:04 splunk3 sendmail[9816]: n34Ae37N009816: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041040.n34Ae3IE016378@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:40:04 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57764
|
|
Apr 4 03:40:04 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:40:04 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:40:04 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:40:04 splunk3 spamd[5597]: spamd: processing message <200904041040.n34Ae3IE016378@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:40:06 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 03:40:06 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57764,mid=<200904041040.n34Ae3IE016378@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:40:06 splunk3 sendmail[9817]: n34Ae37N009816: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:40:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:40:15 splunk3 sendmail[9878]: n34AeFia009878: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:40:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:40:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:41:15 splunk3 sendmail[10124]: n34AfFvw010124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 03:42:15 splunk3 sendmail[10360]: n34AgF2E010360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:43:15 splunk3 sendmail[10600]: n34AhFiU010600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:44:15 splunk3 sendmail[10835]: n34AiFuU010835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:45:04 splunk3 sendmail[11029]: n34Aj4Uc011029: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041045.n34Aj48l016993@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:45:04 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57820
|
|
Apr 4 03:45:04 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:45:04 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:45:04 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:45:04 splunk3 spamd[5597]: spamd: processing message <200904041045.n34Aj48l016993@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:45:06 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 4 03:45:06 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57820,mid=<200904041045.n34Aj48l016993@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:45:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:45:06 splunk3 sendmail[11030]: n34Aj4Uc011029: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:45:15 splunk3 sendmail[11090]: n34AjFiF011090: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:45:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:45:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:46:15 splunk3 sendmail[11333]: n34AkFtl011333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:47:15 splunk3 sendmail[11572]: n34AlFX0011572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:48:15 splunk3 sendmail[11808]: n34AmFan011808: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:49:15 splunk3 sendmail[12046]: n34AnFbj012046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:50:04 splunk3 sendmail[12241]: n34Ao4im012241: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041050.n34Ao420017608@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:50:04 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57876
|
|
Apr 4 03:50:04 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:50:04 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:50:04 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:50:04 splunk3 spamd[5597]: spamd: processing message <200904041050.n34Ao420017608@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:50:06 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 4 03:50:06 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57876,mid=<200904041050.n34Ao420017608@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:50:06 splunk3 sendmail[12242]: n34Ao4im012241: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:50:15 splunk3 sendmail[12299]: n34AoF0R012299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:50:22 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:50:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:51:15 splunk3 sendmail[12546]: n34ApFLI012546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:52:15 splunk3 sendmail[12784]: n34AqFeU012784: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:53:15 splunk3 sendmail[13027]: n34ArFKd013027: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:54:15 splunk3 sendmail[13268]: n34AsFQW013268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:55:05 splunk3 sendmail[13512]: n34At5NH013512: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041055.n34At48T018220@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 03:55:05 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57931
|
|
Apr 4 03:55:05 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 03:55:05 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 03:55:05 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 03:55:05 splunk3 spamd[5597]: spamd: processing message <200904041055.n34At48T018220@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 03:55:07 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 03:55:07 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57931,mid=<200904041055.n34At48T018220@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 03:55:07 splunk3 sendmail[13513]: n34At5NH013512: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 03:55:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 03:55:13 splunk3 sendmail[30978]: n349tCno030978: timeout waiting for input from 61-231-68-166.dynamic.hinet.net during server cmd read
|
|
Apr 4 03:55:13 splunk3 sendmail[30978]: n349tCno030978: lost input channel from 61-231-68-166.dynamic.hinet.net [61.231.68.166] to MTA after rcpt
|
|
Apr 4 03:55:13 splunk3 sendmail[30978]: n349tCno030978: from=<0403pc@163.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=61-231-68-166.dynamic.hinet.net [61.231.68.166]
|
|
Apr 4 03:55:15 splunk3 sendmail[13557]: n34AtFXB013557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:55:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 03:55:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 03:56:15 splunk3 sendmail[13799]: n34AuFNI013799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 03:57:15 splunk3 sendmail[14037]: n34AvFSK014037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:58:16 splunk3 sendmail[14274]: n34AwFds014274: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 03:59:16 splunk3 sendmail[14514]: n34AxGBd014514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:00:04 splunk3 sendmail[14761]: n34B038Q014761: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904041100.n34B038Q014761@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 04:00:04 splunk3 sendmail[14763]: n34B038Q014761: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 04:00:04 splunk3 sendmail[14763]: n34B038Q014761: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 04:00:04 splunk3 sendmail[14763]: n34B038Q014761: n34B048Q014763: postmaster notify: User unknown
|
|
Apr 4 04:00:04 splunk3 sendmail[14795]: n34B048N014795: from=root, size=291, class=0, nrcpts=1, msgid=<200904041100.n34B048N014795@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 04:00:04 splunk3 sendmail[14805]: n34B04xi014805: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041100.n34B048N014795@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 04:00:04 splunk3 sendmail[14795]: n34B048N014795: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34B04xi014805 Message accepted for delivery)
|
|
Apr 4 04:00:05 splunk3 sendmail[14763]: n34B048Q014763: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:00:05 splunk3 sendmail[14809]: n34B05PI014809: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041100.n34B05JG018856@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:00:05 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 57996
|
|
Apr 4 04:00:05 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:00:05 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 04:00:05 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 04:00:05 splunk3 sendmail[14810]: n34B05PI014809: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:00:13 splunk3 sendmail[14806]: n34B04xi014805: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:09, xdelay=00:00:09, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:00:16 splunk3 sendmail[14853]: n34B0GsI014853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:00:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:00:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:01:11 splunk3 sendmail[15048]: n34B11BO015048: from=root, size=443, class=0, nrcpts=1, msgid=<200904041101.n34B11BO015048@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 04:01:11 splunk3 sendmail[15090]: n34B1BoX015090: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041101.n34B11BO015048@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 04:01:11 splunk3 sendmail[15048]: n34B11BO015048: to=root, ctladdr=root (0/0), delay=00:00:10, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34B1BoX015090 Message accepted for delivery)
|
|
Apr 4 04:01:13 splunk3 sendmail[15091]: n34B1BoX015090: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:01:16 splunk3 sendmail[15114]: n34B1GTU015114: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:02:05 splunk3 sendmail[15624]: n34B24Z8015624: from=root, size=1962, class=0, nrcpts=1, msgid=<200904041102.n34B24Z8015624@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 04:02:05 splunk3 sendmail[15626]: n34B252N015626: from=<root@splunk3.splunkit.com>, size=2262, class=0, nrcpts=1, msgid=<200904041102.n34B24Z8015624@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 04:02:05 splunk3 sendmail[15624]: n34B24Z8015624: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=31962, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34B252N015626 Message accepted for delivery)
|
|
Apr 4 04:02:07 splunk3 sendmail[15627]: n34B252N015626: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32495, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:02:16 splunk3 sendmail[15811]: n34B2Ghm015811: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:03:16 splunk3 sendmail[16050]: n34B3Gxx016050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:04:16 splunk3 sendmail[16283]: n34B4G0L016283: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:05:06 splunk3 sendmail[16496]: n34B56k2016496: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041105.n34B56xG020039@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:05:06 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58053
|
|
Apr 4 04:05:06 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:05:06 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 04:05:06 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 04:05:06 splunk3 sendmail[16497]: n34B56k2016496: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:05:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:05:16 splunk3 sendmail[16537]: n34B5GiT016537: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:05:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:05:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:06:16 splunk3 sendmail[16780]: n34B6Ggh016780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:07:16 splunk3 sendmail[17017]: n34B7G2X017017: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:08:16 splunk3 sendmail[17258]: n34B8GEa017258: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:09:16 splunk3 sendmail[17497]: n34B9GON017497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:10:02 splunk3 sendmail[17773]: n34BA2Vd017773: from=root, size=292, class=0, nrcpts=1, msgid=<200904041110.n34BA2Vd017773@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 04:10:02 splunk3 sendmail[17778]: n34BA2ZX017778: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041110.n34BA2Vd017773@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 04:10:02 splunk3 sendmail[17773]: n34BA2Vd017773: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34BA2ZX017778 Message accepted for delivery)
|
|
Apr 4 04:10:04 splunk3 sendmail[17779]: n34BA2ZX017778: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:10:06 splunk3 sendmail[17813]: n34BA6bH017813: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041110.n34BA6w6020650@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:10:06 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58110
|
|
Apr 4 04:10:06 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:10:06 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:10:06 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:10:06 splunk3 spamd[5597]: spamd: processing message <200904041110.n34BA6w6020650@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:10:10 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 3.5 seconds, 1308 bytes.
|
|
Apr 4 04:10:10 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=3.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58110,mid=<200904041110.n34BA6w6020650@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:10:10 splunk3 sendmail[17814]: n34BA6bH017813: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:10:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:10:16 splunk3 sendmail[17869]: n34BAG28017869: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:10:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:10:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:11:16 splunk3 sendmail[18113]: n34BBG6D018113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 04:12:16 splunk3 sendmail[18350]: n34BCGbi018350: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:13:16 splunk3 sendmail[18592]: n34BDGNQ018592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:14:16 splunk3 sendmail[18825]: n34BEGkh018825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:15:07 splunk3 sendmail[19035]: n34BF7iF019035: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041115.n34BF6ZI021436@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:15:07 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58166
|
|
Apr 4 04:15:07 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:15:07 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:15:07 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:15:07 splunk3 spamd[5597]: spamd: processing message <200904041115.n34BF6ZI021436@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:15:09 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 04:15:09 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58166,mid=<200904041115.n34BF6ZI021436@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:15:09 splunk3 sendmail[19037]: n34BF7iF019035: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:15:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:15:16 splunk3 sendmail[19080]: n34BFGnx019080: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:15:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:15:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:16:16 splunk3 sendmail[19324]: n34BGGtr019324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:17:16 splunk3 sendmail[19562]: n34BHG3I019562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:18:16 splunk3 sendmail[19795]: n34BIGx9019795: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:19:16 splunk3 sendmail[20036]: n34BJGOD020036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:20:07 splunk3 sendmail[20250]: n34BK7T4020250: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041120.n34BK78G022069@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:20:07 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58222
|
|
Apr 4 04:20:07 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:20:07 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:20:07 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:20:07 splunk3 spamd[5597]: spamd: processing message <200904041120.n34BK78G022069@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:20:09 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 4 04:20:09 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58222,mid=<200904041120.n34BK78G022069@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:20:09 splunk3 sendmail[20251]: n34BK7T4020250: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:20:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:20:16 splunk3 sendmail[20293]: n34BKGue020293: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:20:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:20:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:21:16 splunk3 sendmail[20538]: n34BLGWe020538: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:22:16 splunk3 sendmail[20775]: n34BMGEe020775: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:23:16 splunk3 sendmail[21019]: n34BNG7o021019: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:24:16 splunk3 sendmail[21251]: n34BOGCo021251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:25:08 splunk3 sendmail[21460]: n34BP85D021460: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041125.n34BP7Mi022676@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:25:08 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58277
|
|
Apr 4 04:25:08 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:25:08 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:25:08 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:25:08 splunk3 spamd[5597]: spamd: processing message <200904041125.n34BP7Mi022676@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:25:10 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 4 04:25:10 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58277,mid=<200904041125.n34BP7Mi022676@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:25:10 splunk3 sendmail[21461]: n34BP85D021460: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:25:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:25:16 splunk3 sendmail[21502]: n34BPGbL021502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:25:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:25:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:26:16 splunk3 sendmail[21746]: n34BQG15021746: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 04:27:16 splunk3 sendmail[21987]: n34BRGYs021987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:28:16 splunk3 sendmail[22222]: n34BSGbK022222: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:29:16 splunk3 sendmail[22463]: n34BTG1Q022463: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:30:08 splunk3 sendmail[22675]: n34BU8Ku022675: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041130.n34BU8rb023294@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:30:08 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58334
|
|
Apr 4 04:30:08 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:30:08 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:30:08 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:30:08 splunk3 spamd[5597]: spamd: processing message <200904041130.n34BU8rb023294@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:30:10 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 04:30:10 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58334,mid=<200904041130.n34BU8rb023294@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:30:10 splunk3 sendmail[22676]: n34BU8Ku022675: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:30:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:30:16 splunk3 sendmail[22720]: n34BUG7f022720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:30:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:30:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:31:16 splunk3 sendmail[22968]: n34BVGi9022968: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:32:16 splunk3 sendmail[23200]: n34BWG9L023200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:33:16 splunk3 sendmail[23440]: n34BXG89023440: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:34:16 splunk3 sendmail[23677]: n34BYG8W023677: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:35:09 splunk3 sendmail[23889]: n34BZ9is023889: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041135.n34BZ8kj024072@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:35:09 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58390
|
|
Apr 4 04:35:09 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:35:09 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:35:09 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:35:09 splunk3 spamd[5597]: spamd: processing message <200904041135.n34BZ8kj024072@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:35:11 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 04:35:11 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58390,mid=<200904041135.n34BZ8kj024072@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:35:11 splunk3 sendmail[23906]: n34BZ9is023889: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:35:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:35:16 splunk3 sendmail[23929]: n34BZGjQ023929: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:35:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:35:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:36:16 splunk3 sendmail[24172]: n34BaGuX024172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:37:16 splunk3 sendmail[24413]: n34BbGax024413: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:38:16 splunk3 sendmail[24653]: n34BcG92024653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:39:16 splunk3 sendmail[24887]: n34BdGJx024887: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:40:09 splunk3 sendmail[25116]: n34Be99Z025116: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041140.n34Be9jk024707@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:40:09 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58445
|
|
Apr 4 04:40:09 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:40:09 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:40:09 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:40:09 splunk3 spamd[5597]: spamd: processing message <200904041140.n34Be9jk024707@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:40:11 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 04:40:11 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58445,mid=<200904041140.n34Be9jk024707@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:40:11 splunk3 sendmail[25117]: n34Be99Z025116: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:40:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:40:16 splunk3 sendmail[25143]: n34BeGd9025143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:40:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:40:43 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:41:16 splunk3 sendmail[25391]: n34BfGto025391: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 04:42:16 splunk3 sendmail[25624]: n34BgG5S025624: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:43:16 splunk3 sendmail[25865]: n34BhGgR025865: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:44:16 splunk3 sendmail[26100]: n34BiGep026100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:45:10 splunk3 sendmail[26327]: n34Bj9FX026327: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041145.n34Bj9iI025319@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:45:10 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58502
|
|
Apr 4 04:45:10 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:45:10 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:45:10 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:45:10 splunk3 spamd[5597]: spamd: processing message <200904041145.n34Bj9iI025319@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:45:12 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 4 04:45:12 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58502,mid=<200904041145.n34Bj9iI025319@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:45:12 splunk3 sendmail[26328]: n34Bj9FX026327: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:45:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:45:16 splunk3 sendmail[26353]: n34BjGvN026353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:45:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:45:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:46:16 splunk3 sendmail[26595]: n34BkGbW026595: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:47:16 splunk3 sendmail[26834]: n34BlGY5026834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:48:16 splunk3 sendmail[27071]: n34BmGC3027071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:49:16 splunk3 sendmail[27309]: n34BnGjM027309: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:50:11 splunk3 sendmail[27540]: n34BoBkt027540: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041150.n34BoA7X025930@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:50:11 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58557
|
|
Apr 4 04:50:11 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:50:11 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:50:11 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:50:11 splunk3 spamd[5597]: spamd: processing message <200904041150.n34BoA7X025930@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:50:13 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 04:50:13 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58557,mid=<200904041150.n34BoA7X025930@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:50:13 splunk3 sendmail[27541]: n34BoBkt027540: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:50:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:50:16 splunk3 sendmail[27564]: n34BoG38027564: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:50:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:50:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:51:16 splunk3 sendmail[27812]: n34BpG8Z027812: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:52:16 splunk3 sendmail[28047]: n34BqGm0028047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:53:16 splunk3 sendmail[28287]: n34BrGc2028287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:54:16 splunk3 sendmail[28524]: n34BsGVl028524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:55:12 splunk3 sendmail[28754]: n34BtCZI028754: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041155.n34BtBl7026539@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 04:55:12 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58613
|
|
Apr 4 04:55:12 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 04:55:12 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 04:55:12 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 04:55:12 splunk3 spamd[5597]: spamd: processing message <200904041155.n34BtBl7026539@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 04:55:15 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 04:55:15 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58613,mid=<200904041155.n34BtBl7026539@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 04:55:15 splunk3 sendmail[28755]: n34BtCZI028754: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 04:55:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 04:55:16 splunk3 sendmail[28780]: n34BtGip028780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:55:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 04:55:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 04:56:16 splunk3 sendmail[29020]: n34BuGPK029020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 04:57:16 splunk3 sendmail[29259]: n34BvG5K029259: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:58:16 splunk3 sendmail[29496]: n34BwGe4029496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 04:59:16 splunk3 sendmail[29732]: n34BxGXT029732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:00:04 splunk3 sendmail[29992]: n34C04iD029992: from=root, size=291, class=0, nrcpts=1, msgid=<200904041200.n34C04iD029992@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 05:00:04 splunk3 sendmail[29996]: n34C04xi029996: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041200.n34C04iD029992@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 05:00:04 splunk3 sendmail[29992]: n34C04iD029992: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34C04xi029996 Message accepted for delivery)
|
|
Apr 4 05:00:06 splunk3 sendmail[29997]: n34C04xi029996: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:00:09 splunk3 sendmail[30031]: n34C09Ap030031: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904041200.n34C09Ap030031@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 05:00:09 splunk3 sendmail[30033]: n34C09Ap030031: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 05:00:09 splunk3 sendmail[30033]: n34C09Ap030031: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 05:00:09 splunk3 sendmail[30033]: n34C09Ap030031: n34C09Ap030033: postmaster notify: User unknown
|
|
Apr 4 05:00:11 splunk3 sendmail[30033]: n34C09Ap030033: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:00:13 splunk3 sendmail[30048]: n34C0C4l030048: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041200.n34C0Cv5027177@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:00:13 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58677
|
|
Apr 4 05:00:13 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:00:13 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 05:00:13 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 05:00:13 splunk3 sendmail[30049]: n34C0C4l030048: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:00:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:00:16 splunk3 sendmail[30069]: n34C0GuH030069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:00:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:00:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:01:08 splunk3 sendmail[30265]: n34C11u8030265: from=root, size=443, class=0, nrcpts=1, msgid=<200904041201.n34C11u8030265@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 05:01:08 splunk3 sendmail[30286]: n34C18lo030286: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041201.n34C11u8030265@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 05:01:08 splunk3 sendmail[30265]: n34C11u8030265: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34C18lo030286 Message accepted for delivery)
|
|
Apr 4 05:01:10 splunk3 sendmail[30287]: n34C18lo030286: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:01:16 splunk3 sendmail[30331]: n34C1GDn030331: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:02:16 splunk3 sendmail[30566]: n34C2G29030566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:03:16 splunk3 sendmail[30804]: n34C3GhH030804: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:04:16 splunk3 sendmail[31040]: n34C4Gco031040: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:05:13 splunk3 sendmail[31269]: n34C5Dhp031269: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041205.n34C5Ddl027864@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:05:13 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58734
|
|
Apr 4 05:05:13 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:05:13 splunk3 spamd[5597]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 05:05:13 splunk3 spamd[5597]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 05:05:13 splunk3 sendmail[31270]: n34C5Dhp031269: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:05:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:05:16 splunk3 sendmail[31293]: n34C5Gmj031293: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:05:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:05:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:06:16 splunk3 sendmail[31534]: n34C6GLH031534: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:07:16 splunk3 sendmail[31773]: n34C7GOh031773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:08:16 splunk3 sendmail[32015]: n34C8GoB032015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:09:16 splunk3 sendmail[32255]: n34C9G4W032255: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:10:02 splunk3 sendmail[32531]: n34CA2ra032531: from=root, size=292, class=0, nrcpts=1, msgid=<200904041210.n34CA2ra032531@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 05:10:03 splunk3 sendmail[32536]: n34CA2m7032536: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041210.n34CA2ra032531@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 05:10:03 splunk3 sendmail[32531]: n34CA2ra032531: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34CA2m7032536 Message accepted for delivery)
|
|
Apr 4 05:10:04 splunk3 sendmail[32537]: n34CA2m7032536: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:10:13 splunk3 sendmail[32605]: n34CADOG032605: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041210.n34CAD21028475@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:10:13 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58790
|
|
Apr 4 05:10:13 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:10:13 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:10:13 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:10:13 splunk3 spamd[5597]: spamd: processing message <200904041210.n34CAD21028475@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:10:15 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 4 05:10:15 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58790,mid=<200904041210.n34CAD21028475@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 05:10:15 splunk3 sendmail[32609]: n34CADOG032605: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:10:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:10:16 splunk3 sendmail[32615]: n34CAGGZ032615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:10:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:10:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:11:16 splunk3 sendmail[394]: n34CBGXT000394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 05:12:16 splunk3 sendmail[630]: n34CCGv4000630: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:13:16 splunk3 sendmail[868]: n34CDG5a000868: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:14:16 splunk3 sendmail[1102]: n34CEGg5001102: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:15:15 splunk3 sendmail[1350]: n34CFFUu001350: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041215.n34CFE8u029275@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:15:15 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58847
|
|
Apr 4 05:15:15 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:15:15 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:15:15 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:15:15 splunk3 spamd[5597]: spamd: processing message <200904041215.n34CFE8u029275@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:15:16 splunk3 sendmail[1356]: n34CFGTU001356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:15:17 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 4 05:15:17 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58847,mid=<200904041215.n34CFE8u029275@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 05:15:17 splunk3 sendmail[1351]: n34CFFUu001350: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:15:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:15:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:15:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:16:16 splunk3 sendmail[1600]: n34CGGxi001600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:17:16 splunk3 sendmail[1836]: n34CHGq7001836: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:18:16 splunk3 sendmail[2074]: n34CIG0D002074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:19:16 splunk3 sendmail[2314]: n34CJGP5002314: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:20:15 splunk3 sendmail[2565]: n34CKFvR002565: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041220.n34CKFR6029903@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:20:15 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58903
|
|
Apr 4 05:20:15 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:20:15 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:20:15 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:20:15 splunk3 spamd[5597]: spamd: processing message <200904041220.n34CKFR6029903@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:20:16 splunk3 sendmail[2573]: n34CKGeI002573: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:20:18 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 05:20:18 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58903,mid=<200904041220.n34CKFR6029903@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 05:20:18 splunk3 sendmail[2566]: n34CKFvR002565: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:20:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:20:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:20:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:21:16 splunk3 sendmail[2831]: n34CLGwY002831: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:22:16 splunk3 sendmail[3079]: n34CMGh3003079: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:23:16 splunk3 sendmail[3326]: n34CNGp9003326: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:24:16 splunk3 sendmail[3578]: n34COGnE003578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:25:16 splunk3 sendmail[3837]: n34CPGdL003837: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041225.n34CPFU3030519@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:25:16 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58959
|
|
Apr 4 05:25:16 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:25:16 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:25:16 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:25:16 splunk3 spamd[5597]: spamd: processing message <200904041225.n34CPFU3030519@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:25:16 splunk3 sendmail[3843]: n34CPGOp003843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:25:18 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 05:25:18 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58959,mid=<200904041225.n34CPFU3030519@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 05:25:18 splunk3 sendmail[3838]: n34CPGdL003837: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:25:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:25:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:25:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:26:16 splunk3 sendmail[4097]: n34CQG33004097: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 05:27:16 splunk3 sendmail[4357]: n34CRGRM004357: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:28:16 splunk3 sendmail[4590]: n34CSG89004590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:29:16 splunk3 sendmail[4831]: n34CTGfs004831: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:30:16 splunk3 sendmail[5092]: n34CUGv5005092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:30:16 splunk3 sendmail[5093]: n34CUGgk005093: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041230.n34CUGSm031135@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:30:16 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59016
|
|
Apr 4 05:30:16 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:30:16 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:30:16 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:30:16 splunk3 spamd[5597]: spamd: processing message <200904041230.n34CUGSm031135@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:30:18 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 4 05:30:18 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59016,mid=<200904041230.n34CUGSm031135@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 05:30:18 splunk3 sendmail[5094]: n34CUGgk005093: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:30:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:30:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:30:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:31:16 splunk3 sendmail[5384]: n34CVGn3005384: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:32:16 splunk3 sendmail[5620]: n34CWGLm005620: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:33:16 splunk3 sendmail[5858]: n34CXGWv005858: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:34:16 splunk3 sendmail[6094]: n34CYGdS006094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:35:16 splunk3 sendmail[6338]: n34CZGtl006338: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:35:17 splunk3 sendmail[6340]: n34CZHh6006340: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041235.n34CZHHq031885@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:35:17 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59071
|
|
Apr 4 05:35:17 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:35:17 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:35:17 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:35:17 splunk3 spamd[5597]: spamd: processing message <200904041235.n34CZHHq031885@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:35:19 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1308 bytes.
|
|
Apr 4 05:35:19 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59071,mid=<200904041235.n34CZHHq031885@virt2.int.splunk.com>,bayes=0.111828791036133,autolearn=no
|
|
Apr 4 05:35:20 splunk3 sendmail[6342]: n34CZHh6006340: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:35:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:35:21 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:35:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:36:16 splunk3 sendmail[6586]: n34CaGu3006586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:36:48 splunk3 sendmail[6703]: n34CakTH006703: from=<spamme@splunkit.com>, size=2767, class=0, nrcpts=1, msgid=<200904041236.n34CakTH006703@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=[218.209.92.128]
|
|
Apr 4 05:36:48 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59087
|
|
Apr 4 05:36:48 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:36:48 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:36:48 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:36:48 splunk3 spamd[5597]: spamd: processing message <200904041236.n34CakTH006703@splunk3.splunkit.com> for spamme:501
|
|
Apr 4 05:36:50 splunk3 spamd[5597]: spamd: identified spam (32.0/5.0) for spamme:501 in 1.9 seconds, 3141 bytes.
|
|
Apr 4 05:36:50 splunk3 spamd[5597]: spamd: result: Y 32 - BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.9,size=3141,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59087,mid=<200904041236.n34CakTH006703@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 4 05:36:50 splunk3 sendmail[6726]: n34CakTH006703: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33063, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:36:50 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:37:16 splunk3 sendmail[6833]: n34CbGQ2006833: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:38:16 splunk3 sendmail[7072]: n34CcGlV007072: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:39:16 splunk3 sendmail[7311]: n34CdGvE007311: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:40:16 splunk3 sendmail[7570]: n34CeGuw007570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:40:18 splunk3 sendmail[7572]: n34CeIH2007572: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041240.n34CeHfv032520@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:40:18 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59128
|
|
Apr 4 05:40:18 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:40:18 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:40:18 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:40:18 splunk3 spamd[5597]: spamd: processing message <200904041240.n34CeHfv032520@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:40:20 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 05:40:20 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59128,mid=<200904041240.n34CeHfv032520@virt2.int.splunk.com>,bayes=0.111821365614734,autolearn=no
|
|
Apr 4 05:40:20 splunk3 sendmail[7573]: n34CeIH2007572: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:40:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:40:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:40:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:41:16 splunk3 sendmail[7824]: n34CfGgo007824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 05:42:16 splunk3 sendmail[8057]: n34CgGYv008057: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:43:16 splunk3 sendmail[8298]: n34ChGHF008298: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:44:16 splunk3 sendmail[8534]: n34CiG7t008534: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:45:16 splunk3 sendmail[8780]: n34CjGIG008780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:45:18 splunk3 sendmail[8808]: n34CjIvX008808: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904041245.n34CjIwh000663@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:45:18 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59184
|
|
Apr 4 05:45:18 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:45:18 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:45:18 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:45:18 splunk3 spamd[5597]: spamd: processing message <200904041245.n34CjIwh000663@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:45:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:45:20 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1302 bytes.
|
|
Apr 4 05:45:20 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59184,mid=<200904041245.n34CjIwh000663@virt2.int.splunk.com>,bayes=0.0659104315965953,autolearn=no
|
|
Apr 4 05:45:21 splunk3 sendmail[8809]: n34CjIvX008808: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:45:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:45:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:46:16 splunk3 sendmail[9030]: n34CkG6U009030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:47:16 splunk3 sendmail[9270]: n34ClG1K009270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:48:16 splunk3 sendmail[9507]: n34CmGYY009507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:48:35 splunk3 sendmail[9594]: n34CmZti009594: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=118-160-237-23.dynamic.hinet.net [118.160.237.23], reject=550 5.7.1 <bibiorm@gmail.com>... Relaying denied
|
|
Apr 4 05:49:16 splunk3 sendmail[9756]: n34CnGQX009756: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:50:16 splunk3 sendmail[10006]: n34CoGxQ010006: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:50:19 splunk3 sendmail[10032]: n34CoJid010032: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041250.n34CoIfM001283@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:50:19 splunk3 spamd[5597]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59240
|
|
Apr 4 05:50:19 splunk3 spamd[5597]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:50:19 splunk3 spamd[5597]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:50:19 splunk3 spamd[5597]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:50:19 splunk3 spamd[5597]: spamd: processing message <200904041250.n34CoIfM001283@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:50:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:50:21 splunk3 spamd[5597]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 05:50:21 splunk3 spamd[5597]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59240,mid=<200904041250.n34CoIfM001283@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 05:50:21 splunk3 sendmail[10033]: n34CoJid010032: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:50:21 splunk3 spamd[3033]: prefork: child states: BI
|
|
Apr 4 05:50:21 splunk3 spamd[3033]: spamd: handled cleanup of child pid 5597 due to SIGCHLD
|
|
Apr 4 05:50:21 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 10040
|
|
Apr 4 05:50:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:50:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:51:16 splunk3 sendmail[10260]: n34CpGrt010260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:52:16 splunk3 sendmail[10496]: n34CqG7Z010496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:53:16 splunk3 sendmail[10739]: n34CrGCP010739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:54:16 splunk3 sendmail[10974]: n34CsGp0010974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:55:16 splunk3 sendmail[11224]: n34CtGaD011224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:55:20 splunk3 sendmail[11251]: n34CtKlL011251: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041255.n34CtJ10001925@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 05:55:20 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59296
|
|
Apr 4 05:55:20 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 05:55:20 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 05:55:20 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 05:55:20 splunk3 spamd[10040]: spamd: processing message <200904041255.n34CtJ10001925@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 05:55:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 05:55:22 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 05:55:22 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59296,mid=<200904041255.n34CtJ10001925@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 05:55:22 splunk3 sendmail[11252]: n34CtKlL011251: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 05:55:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 05:55:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 05:56:16 splunk3 sendmail[11471]: n34CuGwf011471: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 05:57:16 splunk3 sendmail[11712]: n34CvG9B011712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:58:16 splunk3 sendmail[11948]: n34CwGQn011948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 05:59:16 splunk3 sendmail[12187]: n34CxGeK012187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:00:05 splunk3 sendmail[12448]: n34D05QC012448: from=root, size=291, class=0, nrcpts=1, msgid=<200904041300.n34D05QC012448@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 06:00:05 splunk3 sendmail[12452]: n34D05c9012452: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041300.n34D05QC012448@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 06:00:05 splunk3 sendmail[12448]: n34D05QC012448: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34D05c9012452 Message accepted for delivery)
|
|
Apr 4 06:00:06 splunk3 sendmail[12453]: n34D05c9012452: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:00:15 splunk3 sendmail[12506]: n34D0F8i012506: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904041300.n34D0F8i012506@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 06:00:15 splunk3 sendmail[12508]: n34D0F8i012506: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 06:00:15 splunk3 sendmail[12508]: n34D0F8i012506: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 06:00:15 splunk3 sendmail[12508]: n34D0F8i012506: n34D0F8i012508: postmaster notify: User unknown
|
|
Apr 4 06:00:16 splunk3 sendmail[12508]: n34D0F8i012508: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:00:16 splunk3 sendmail[12522]: n34D0GtT012522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:00:20 splunk3 sendmail[12549]: n34D0K4B012549: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041300.n34D0Klh002580@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:00:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:00:20 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59360
|
|
Apr 4 06:00:20 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:00:20 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 06:00:20 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 06:00:20 splunk3 sendmail[12550]: n34D0K4B012549: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:00:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:00:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:01:10 splunk3 sendmail[12721]: n34D11mS012721: from=root, size=443, class=0, nrcpts=1, msgid=<200904041301.n34D11mS012721@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 06:01:10 splunk3 sendmail[12758]: n34D1AuG012758: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041301.n34D11mS012721@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 06:01:10 splunk3 sendmail[12721]: n34D11mS012721: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34D1AuG012758 Message accepted for delivery)
|
|
Apr 4 06:01:11 splunk3 sendmail[12759]: n34D1AuG012758: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:01:16 splunk3 sendmail[12787]: n34D1Gqh012787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:02:16 splunk3 sendmail[13022]: n34D2Gl1013022: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:03:16 splunk3 sendmail[13264]: n34D3GDI013264: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:04:16 splunk3 sendmail[13535]: n34D4GZY013535: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:05:16 splunk3 sendmail[13780]: n34D5GLx013780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:05:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:05:21 splunk3 sendmail[13808]: n34D5KGP013808: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041305.n34D5KjS003258@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:05:21 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59417
|
|
Apr 4 06:05:21 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:05:21 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 06:05:21 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 06:05:21 splunk3 sendmail[13809]: n34D5KGP013808: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:05:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:05:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:06:16 splunk3 sendmail[14027]: n34D6GTL014027: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:07:16 splunk3 sendmail[14266]: n34D7GeF014266: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:08:16 splunk3 sendmail[14505]: n34D8GDx014505: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:09:17 splunk3 sendmail[14742]: n34D9GLh014742: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:10:02 splunk3 sendmail[15022]: n34DA2Uu015022: from=root, size=292, class=0, nrcpts=1, msgid=<200904041310.n34DA2Uu015022@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 06:10:02 splunk3 sendmail[15027]: n34DA2RR015027: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041310.n34DA2Uu015022@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 06:10:02 splunk3 sendmail[15022]: n34DA2Uu015022: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34DA2RR015027 Message accepted for delivery)
|
|
Apr 4 06:10:03 splunk3 sendmail[15028]: n34DA2RR015027: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:10:17 splunk3 sendmail[15098]: n34DAHmX015098: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:10:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:10:21 splunk3 sendmail[15129]: n34DALHR015129: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041310.n34DAL9m003876@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:10:21 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59473
|
|
Apr 4 06:10:21 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:10:21 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:10:21 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:10:21 splunk3 spamd[10040]: spamd: processing message <200904041310.n34DAL9m003876@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:10:23 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 06:10:23 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59473,mid=<200904041310.n34DAL9m003876@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 06:10:23 splunk3 sendmail[15130]: n34DALHR015129: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:10:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:10:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:11:17 splunk3 sendmail[15352]: n34DBHs0015352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 06:12:17 splunk3 sendmail[15587]: n34DCHXp015587: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:13:17 splunk3 sendmail[15828]: n34DDHlx015828: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:14:17 splunk3 sendmail[16064]: n34DEHXl016064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:15:17 splunk3 sendmail[16311]: n34DFHRI016311: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:15:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:15:22 splunk3 sendmail[16340]: n34DFMkG016340: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041315.n34DFLZZ004663@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:15:22 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59530
|
|
Apr 4 06:15:22 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:15:22 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:15:22 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:15:22 splunk3 spamd[10040]: spamd: processing message <200904041315.n34DFLZZ004663@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:15:24 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 06:15:24 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59530,mid=<200904041315.n34DFLZZ004663@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 06:15:24 splunk3 sendmail[16341]: n34DFMkG016340: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:15:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:15:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:16:17 splunk3 sendmail[16560]: n34DGHOm016560: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:17:17 splunk3 sendmail[16799]: n34DHH3W016799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:18:17 splunk3 sendmail[17035]: n34DIHJT017035: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:19:17 splunk3 sendmail[17273]: n34DJH9L017273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:20:17 splunk3 sendmail[17512]: n34DKHwZ017512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:20:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:20:22 splunk3 sendmail[17550]: n34DKMkI017550: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041320.n34DKMrv005300@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:20:22 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59585
|
|
Apr 4 06:20:22 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:20:22 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:20:22 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:20:22 splunk3 spamd[10040]: spamd: processing message <200904041320.n34DKMrv005300@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:20:24 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 4 06:20:24 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59585,mid=<200904041320.n34DKMrv005300@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 06:20:24 splunk3 sendmail[17551]: n34DKMkI017550: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:20:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:20:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:21:17 splunk3 sendmail[17770]: n34DLHnf017770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:22:17 splunk3 sendmail[18003]: n34DMHai018003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:23:17 splunk3 sendmail[18244]: n34DNHet018244: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:24:17 splunk3 sendmail[18479]: n34DOHjB018479: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:25:17 splunk3 sendmail[18720]: n34DPHet018720: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:25:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:25:23 splunk3 sendmail[18776]: n34DPMbB018776: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041325.n34DPMEu005904@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:25:23 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59641
|
|
Apr 4 06:25:23 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:25:23 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:25:23 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:25:23 splunk3 spamd[10040]: spamd: processing message <200904041325.n34DPMEu005904@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:25:25 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 06:25:25 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59641,mid=<200904041325.n34DPMEu005904@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 06:25:25 splunk3 sendmail[18777]: n34DPMbB018776: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:25:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:25:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:26:17 splunk3 sendmail[18979]: n34DQHNk018979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 06:27:17 splunk3 sendmail[19218]: n34DRHDm019218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:28:17 splunk3 sendmail[19453]: n34DSHaL019453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:29:17 splunk3 sendmail[19692]: n34DTHjC019692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:30:17 splunk3 sendmail[19932]: n34DUHLd019932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:30:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:30:23 splunk3 sendmail[19991]: n34DUNqk019991: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041330.n34DUN3h006527@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:30:23 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59697
|
|
Apr 4 06:30:23 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:30:23 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:30:23 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:30:23 splunk3 spamd[10040]: spamd: processing message <200904041330.n34DUN3h006527@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:30:25 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1305 bytes.
|
|
Apr 4 06:30:25 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59697,mid=<200904041330.n34DUN3h006527@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 06:30:25 splunk3 sendmail[19992]: n34DUNqk019991: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:30:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:30:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:31:17 splunk3 sendmail[20195]: n34DVHEY020195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:32:17 splunk3 sendmail[20431]: n34DWH1t020431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:33:17 splunk3 sendmail[20670]: n34DXHqb020670: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:34:17 splunk3 sendmail[20904]: n34DYHaH020904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:35:17 splunk3 sendmail[21142]: n34DZHTM021142: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:35:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:35:24 splunk3 sendmail[21199]: n34DZOR3021199: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041335.n34DZN9w007274@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:35:24 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59753
|
|
Apr 4 06:35:24 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:35:24 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:35:24 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:35:24 splunk3 spamd[10040]: spamd: processing message <200904041335.n34DZN9w007274@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:35:26 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 06:35:26 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59753,mid=<200904041335.n34DZN9w007274@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 06:35:26 splunk3 sendmail[21200]: n34DZOR3021199: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:35:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:35:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:36:17 splunk3 sendmail[21397]: n34DaHdb021397: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:37:17 splunk3 sendmail[21633]: n34DbH9F021633: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:38:17 splunk3 sendmail[21872]: n34DcH0s021872: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:39:17 splunk3 sendmail[22114]: n34DdHDS022114: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:40:17 splunk3 sendmail[22356]: n34DeHh2022356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:40:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:40:24 splunk3 sendmail[22412]: n34DeOSD022412: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041340.n34DeO05007907@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:40:24 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59809
|
|
Apr 4 06:40:24 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:40:24 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:40:24 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:40:24 splunk3 spamd[10040]: spamd: processing message <200904041340.n34DeO05007907@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:40:26 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 06:40:26 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59809,mid=<200904041340.n34DeO05007907@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 06:40:26 splunk3 sendmail[22413]: n34DeOSD022412: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:40:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:40:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:41:17 splunk3 sendmail[22617]: n34DfHxi022617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 06:42:17 splunk3 sendmail[22853]: n34DgH7o022853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:43:17 splunk3 sendmail[23092]: n34DhHHb023092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:44:17 splunk3 sendmail[23328]: n34DiH56023328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:45:17 splunk3 sendmail[23567]: n34DjH33023567: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:45:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:45:25 splunk3 sendmail[23627]: n34DjPGC023627: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041345.n34DjP1n008525@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:45:25 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59865
|
|
Apr 4 06:45:25 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:45:25 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:45:25 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:45:25 splunk3 spamd[10040]: spamd: processing message <200904041345.n34DjP1n008525@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:45:27 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 4 06:45:27 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59865,mid=<200904041345.n34DjP1n008525@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 06:45:27 splunk3 sendmail[23628]: n34DjPGC023627: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:45:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:45:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:46:17 splunk3 sendmail[23827]: n34DkHbG023827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:47:17 splunk3 sendmail[24066]: n34DlHcb024066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:48:17 splunk3 sendmail[24301]: n34DmHqu024301: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:48:35 splunk3 sendmail[9594]: n34CmZti009594: timeout waiting for input from 118-160-237-23.dynamic.hinet.net during server cmd read
|
|
Apr 4 06:48:35 splunk3 sendmail[9594]: n34CmZti009594: lost input channel from 118-160-237-23.dynamic.hinet.net [118.160.237.23] to MTA after rcpt
|
|
Apr 4 06:48:35 splunk3 sendmail[9594]: n34CmZti009594: from=<neal_chen99@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-160-237-23.dynamic.hinet.net [118.160.237.23]
|
|
Apr 4 06:49:17 splunk3 sendmail[24542]: n34DnHIB024542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:50:17 splunk3 sendmail[24782]: n34DoHJh024782: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:50:20 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:50:25 splunk3 sendmail[24840]: n34DoPfE024840: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041350.n34DoPV8009140@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:50:25 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59921
|
|
Apr 4 06:50:25 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:50:25 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:50:25 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:50:26 splunk3 spamd[10040]: spamd: processing message <200904041350.n34DoPV8009140@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:50:28 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 06:50:28 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59921,mid=<200904041350.n34DoPV8009140@virt2.int.splunk.com>,bayes=0.168680517768035,autolearn=no
|
|
Apr 4 06:50:28 splunk3 sendmail[24841]: n34DoPfE024840: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:50:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:50:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:51:11 splunk3 sendmail[24761]: n34Do79e024761: from=<tonyk@wolf-howl.com>, size=5749, class=0, nrcpts=1, msgid=<875e019dc17f$a4606218$0d357d49@wolf-howl.com>, proto=ESMTP, daemon=MTA, relay=[117.192.11.11]
|
|
Apr 4 06:51:11 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59927
|
|
Apr 4 06:51:11 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:51:11 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:51:11 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:51:11 splunk3 spamd[10040]: spamd: processing message <875e019dc17f$a4606218$0d357d49@wolf-howl.com> for spamme:501
|
|
Apr 4 06:51:13 splunk3 spamd[10040]: spamd: identified spam (20.3/5.0) for spamme:501 in 1.8 seconds, 6017 bytes.
|
|
Apr 4 06:51:13 splunk3 spamd[10040]: spamd: result: Y 20 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_SBL scantime=1.8,size=6017,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59927,mid=<875e019dc17f$a4606218$0d357d49@wolf-howl.com>,bayes=1,autolearn=spam
|
|
Apr 4 06:51:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:51:13 splunk3 sendmail[25025]: n34Do79e024761: to=<spamme@splunkit.com>, delay=00:00:07, xdelay=00:00:02, mailer=local, pri=35926, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:51:17 splunk3 sendmail[25047]: n34DpHXQ025047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:52:17 splunk3 sendmail[25284]: n34DqHXV025284: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:53:17 splunk3 sendmail[25525]: n34DrHHZ025525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:54:17 splunk3 sendmail[25760]: n34DsH4V025760: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:55:17 splunk3 sendmail[25998]: n34DtHuE025998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:55:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 06:55:26 splunk3 sendmail[26055]: n34DtQ4v026055: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041355.n34DtQ8L009749@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 06:55:26 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59977
|
|
Apr 4 06:55:26 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:55:26 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:55:26 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:55:26 splunk3 spamd[10040]: spamd: processing message <200904041355.n34DtQ8L009749@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 06:55:28 splunk3 sendmail[25939]: n34DswtB025939: from=<shiahn_wq@aol.com>, size=5776, class=0, nrcpts=1, msgid=<6b9d019db9fa$3af80723$b0b3c799@aol.com>, proto=ESMTP, daemon=MTA, relay=Dynamic-IP-19015875111.cable.net.co [190.158.75.111] (may be forged)
|
|
Apr 4 06:55:28 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 06:55:28 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59977,mid=<200904041355.n34DtQ8L009749@virt2.int.splunk.com>,bayes=0.168675173983559,autolearn=no
|
|
Apr 4 06:55:28 splunk3 sendmail[26056]: n34DtQ4v026055: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:55:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:55:36 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 59979
|
|
Apr 4 06:55:36 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 06:55:36 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 06:55:36 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 06:55:36 splunk3 spamd[10040]: spamd: processing message <6b9d019db9fa$3af80723$b0b3c799@aol.com> for spamme:501
|
|
Apr 4 06:55:38 splunk3 spamd[10040]: spamd: identified spam (35.4/5.0) for spamme:501 in 1.8 seconds, 6119 bytes.
|
|
Apr 4 06:55:38 splunk3 spamd[10040]: spamd: result: Y 35 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=1.8,size=6119,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=59979,mid=<6b9d019db9fa$3af80723$b0b3c799@aol.com>,bayes=1,autolearn=spam
|
|
Apr 4 06:55:38 splunk3 sendmail[26079]: n34DswtB025939: to=<spamme@splunkit.com>, delay=00:00:11, xdelay=00:00:10, mailer=local, pri=36032, dsn=2.0.0, stat=Sent
|
|
Apr 4 06:55:38 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 06:55:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 06:56:17 splunk3 sendmail[26260]: n34DuHgw026260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 06:57:17 splunk3 sendmail[26499]: n34DvHmp026499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:58:17 splunk3 sendmail[26733]: n34DwHR6026733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 06:59:17 splunk3 sendmail[26974]: n34DxHwC026974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:00:04 splunk3 sendmail[27238]: n34E04j6027238: from=root, size=291, class=0, nrcpts=1, msgid=<200904041400.n34E04j6027238@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 07:00:04 splunk3 sendmail[27242]: n34E041k027242: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041400.n34E04j6027238@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 07:00:04 splunk3 sendmail[27238]: n34E04j6027238: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34E041k027242 Message accepted for delivery)
|
|
Apr 4 07:00:05 splunk3 sendmail[27243]: n34E041k027242: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:00:17 splunk3 sendmail[27286]: n34E0H6h027286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:00:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:00:20 splunk3 sendmail[27324]: n34E0K7R027324: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904041400.n34E0K7R027324@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 07:00:20 splunk3 sendmail[27326]: n34E0K7R027324: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 07:00:20 splunk3 sendmail[27326]: n34E0K7R027324: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 07:00:20 splunk3 sendmail[27326]: n34E0K7R027324: n34E0K7R027326: postmaster notify: User unknown
|
|
Apr 4 07:00:22 splunk3 sendmail[27326]: n34E0K7R027326: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:00:26 splunk3 sendmail[27360]: n34E0Q2f027360: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041400.n34E0QOX010393@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:00:26 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60043
|
|
Apr 4 07:00:26 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:00:26 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 07:00:26 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 07:00:26 splunk3 sendmail[27361]: n34E0Q2f027360: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:00:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:00:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:01:08 splunk3 sendmail[27510]: n34E11gu027510: from=root, size=443, class=0, nrcpts=1, msgid=<200904041401.n34E11gu027510@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 07:01:08 splunk3 sendmail[27548]: n34E1863027548: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041401.n34E11gu027510@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 07:01:08 splunk3 sendmail[27510]: n34E11gu027510: to=root, ctladdr=root (0/0), delay=00:00:07, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34E1863027548 Message accepted for delivery)
|
|
Apr 4 07:01:09 splunk3 sendmail[27549]: n34E1863027548: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:01:17 splunk3 sendmail[27580]: n34E1HoU027580: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:02:17 splunk3 sendmail[27825]: n34E2HGk027825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:03:17 splunk3 sendmail[28067]: n34E3Hpe028067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:04:17 splunk3 sendmail[28304]: n34E4HiC028304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:05:17 splunk3 sendmail[28546]: n34E5HKF028546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:05:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:05:27 splunk3 sendmail[28581]: n34E5Ruk028581: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041405.n34E5QAb011069@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:05:27 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60099
|
|
Apr 4 07:05:27 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:05:27 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 07:05:27 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 07:05:27 splunk3 sendmail[28592]: n34E5Ruk028581: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:05:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:05:42 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:06:17 splunk3 sendmail[28800]: n34E6HlG028800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:07:17 splunk3 sendmail[29040]: n34E7HaR029040: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:08:17 splunk3 sendmail[29277]: n34E8HY2029277: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:09:17 splunk3 sendmail[29516]: n34E9HBj029516: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:10:02 splunk3 sendmail[29791]: n34EA2ZW029791: from=root, size=292, class=0, nrcpts=1, msgid=<200904041410.n34EA2ZW029791@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 07:10:02 splunk3 sendmail[29796]: n34EA2TN029796: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041410.n34EA2ZW029791@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 07:10:02 splunk3 sendmail[29791]: n34EA2ZW029791: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34EA2TN029796 Message accepted for delivery)
|
|
Apr 4 07:10:03 splunk3 sendmail[29797]: n34EA2TN029796: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:10:17 splunk3 sendmail[29865]: n34EAHqE029865: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:10:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:10:27 splunk3 sendmail[29915]: n34EARLP029915: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041410.n34EARew011687@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:10:27 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60156
|
|
Apr 4 07:10:27 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:10:27 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:10:27 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:10:27 splunk3 spamd[10040]: spamd: processing message <200904041410.n34EARew011687@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:10:29 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 07:10:29 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60156,mid=<200904041410.n34EARew011687@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:10:29 splunk3 sendmail[29916]: n34EARLP029915: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:10:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:10:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:11:17 splunk3 sendmail[30121]: n34EBHYw030121: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 07:12:17 splunk3 sendmail[30355]: n34ECHJK030355: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:13:17 splunk3 sendmail[30593]: n34EDHeh030593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:14:17 splunk3 sendmail[30830]: n34EEHsL030830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:15:17 splunk3 sendmail[31074]: n34EFHau031074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:15:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:15:28 splunk3 sendmail[31125]: n34EFSV6031125: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041415.n34EFRAJ012501@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:15:28 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60212
|
|
Apr 4 07:15:28 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:15:28 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:15:28 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:15:28 splunk3 spamd[10040]: spamd: processing message <200904041415.n34EFRAJ012501@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:15:30 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 07:15:30 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60212,mid=<200904041415.n34EFRAJ012501@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:15:30 splunk3 sendmail[31126]: n34EFSV6031125: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:15:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:15:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:16:17 splunk3 sendmail[31327]: n34EGHZO031327: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:17:17 splunk3 sendmail[31567]: n34EHHJ2031567: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:18:17 splunk3 sendmail[31801]: n34EIHa3031801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:19:17 splunk3 sendmail[32041]: n34EJHIM032041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:20:17 splunk3 sendmail[32286]: n34EKH7r032286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:20:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:20:28 splunk3 sendmail[32338]: n34EKS3A032338: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041420.n34EKSel013113@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:20:28 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60268
|
|
Apr 4 07:20:28 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:20:28 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:20:28 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:20:28 splunk3 spamd[10040]: spamd: processing message <200904041420.n34EKSel013113@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:20:30 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 4 07:20:30 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60268,mid=<200904041420.n34EKSel013113@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:20:30 splunk3 sendmail[32339]: n34EKS3A032338: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:20:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:20:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:21:17 splunk3 sendmail[32544]: n34ELH2R032544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:22:17 splunk3 sendmail[313]: n34EMHtW000313: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:23:17 splunk3 sendmail[555]: n34ENHtj000555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:24:17 splunk3 sendmail[790]: n34EOH9s000790: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:25:17 splunk3 sendmail[1033]: n34EPHi5001033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:25:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:25:29 splunk3 sendmail[1083]: n34EPSlf001083: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041425.n34EPSmV013743@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:25:29 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60323
|
|
Apr 4 07:25:29 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:25:29 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:25:29 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:25:29 splunk3 spamd[10040]: spamd: processing message <200904041425.n34EPSmV013743@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:25:31 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 07:25:31 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60323,mid=<200904041425.n34EPSmV013743@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:25:31 splunk3 sendmail[1084]: n34EPSlf001083: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:25:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:25:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:26:17 splunk3 sendmail[1286]: n34EQH0O001286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 07:27:17 splunk3 sendmail[1522]: n34ERH0p001522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:28:17 splunk3 sendmail[1760]: n34ESHdL001760: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:29:17 splunk3 sendmail[2003]: n34ETHUT002003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:30:17 splunk3 sendmail[2247]: n34EUHL6002247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:30:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:30:29 splunk3 sendmail[2300]: n34EUTLx002300: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041430.n34EUThJ014343@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:30:29 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60380
|
|
Apr 4 07:30:29 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:30:29 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:30:29 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:30:29 splunk3 spamd[10040]: spamd: processing message <200904041430.n34EUThJ014343@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:30:31 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 07:30:31 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60380,mid=<200904041430.n34EUThJ014343@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:30:31 splunk3 sendmail[2301]: n34EUTLx002300: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:30:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:30:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:31:17 splunk3 sendmail[2505]: n34EVH3b002505: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:32:17 splunk3 sendmail[2750]: n34EWHhP002750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:33:17 splunk3 sendmail[3000]: n34EXHfr003000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:34:17 splunk3 sendmail[3240]: n34EYHFM003240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:35:17 splunk3 sendmail[3485]: n34EZHwe003485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:35:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:35:30 splunk3 sendmail[3536]: n34EZTY7003536: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041435.n34EZTbr015109@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:35:30 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60436
|
|
Apr 4 07:35:30 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:35:30 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:35:30 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:35:30 splunk3 spamd[10040]: spamd: processing message <200904041435.n34EZTbr015109@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:35:32 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 07:35:32 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60436,mid=<200904041435.n34EZTbr015109@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:35:32 splunk3 sendmail[3537]: n34EZTY7003536: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:35:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:35:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:36:17 splunk3 sendmail[3767]: n34EaHal003767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:37:17 splunk3 sendmail[4014]: n34EbHXc004014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:38:16 splunk3 sendmail[4243]: n34EcFdK004243: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=118-169-208-192.dynamic.hinet.net [118.169.208.192], reject=550 5.7.1 <bibiorm@gmail.com>... Relaying denied
|
|
Apr 4 07:38:17 splunk3 sendmail[4265]: n34EcH3M004265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:39:17 splunk3 sendmail[4516]: n34EdHRx004516: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:40:00 splunk3 sendmail[4676]: n34Ee0GG004676: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041440.n34Ee0SI015631@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:40:00 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60478
|
|
Apr 4 07:40:00 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:40:00 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:40:00 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:40:00 splunk3 spamd[10040]: spamd: processing message <200904041440.n34Ee0SI015631@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:40:02 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1308 bytes.
|
|
Apr 4 07:40:02 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60478,mid=<200904041440.n34Ee0SI015631@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:40:02 splunk3 sendmail[4677]: n34Ee0GG004676: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:40:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:40:17 splunk3 sendmail[4770]: n34EeHYT004770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:40:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:40:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:41:17 splunk3 sendmail[5031]: n34EfH3O005031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 07:42:17 splunk3 sendmail[5304]: n34EgHZI005304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:43:17 splunk3 sendmail[5547]: n34EhHuO005547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:44:17 splunk3 sendmail[5781]: n34EiH7c005781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:45:01 splunk3 sendmail[5942]: n34Ej0T3005942: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041445.n34Ej0VC016265@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:45:01 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60535
|
|
Apr 4 07:45:01 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:45:01 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:45:01 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:45:01 splunk3 spamd[10040]: spamd: processing message <200904041445.n34Ej0VC016265@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:45:03 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 4 07:45:03 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60535,mid=<200904041445.n34Ej0VC016265@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:45:03 splunk3 sendmail[5943]: n34Ej0T3005942: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:45:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:45:17 splunk3 sendmail[6030]: n34EjHjQ006030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:45:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:45:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:46:17 splunk3 sendmail[6277]: n34EkHA5006277: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:47:17 splunk3 sendmail[6517]: n34ElHAR006517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:48:17 splunk3 sendmail[6749]: n34EmHR4006749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:49:17 splunk3 sendmail[6991]: n34EnH5q006991: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:50:01 splunk3 sendmail[7155]: n34Eo1sW007155: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041450.n34Eo1Wf016893@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:50:01 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60590
|
|
Apr 4 07:50:01 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:50:01 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:50:01 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:50:01 splunk3 spamd[10040]: spamd: processing message <200904041450.n34Eo1Wf016893@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:50:03 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 07:50:03 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60590,mid=<200904041450.n34Eo1Wf016893@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:50:03 splunk3 sendmail[7156]: n34Eo1sW007155: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:50:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:50:17 splunk3 sendmail[7243]: n34EoHEj007243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:50:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:50:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:51:17 splunk3 sendmail[7494]: n34EpH6G007494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:52:17 splunk3 sendmail[7739]: n34EqHfF007739: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:53:17 splunk3 sendmail[7981]: n34ErHdw007981: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:54:17 splunk3 sendmail[8218]: n34EsHMb008218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:55:02 splunk3 sendmail[8396]: n34Et2mD008396: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041455.n34Et1fH017529@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 07:55:02 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60646
|
|
Apr 4 07:55:02 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 07:55:02 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 07:55:02 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 07:55:02 splunk3 spamd[10040]: spamd: processing message <200904041455.n34Et1fH017529@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 07:55:04 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 07:55:04 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60646,mid=<200904041455.n34Et1fH017529@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 07:55:04 splunk3 sendmail[8397]: n34Et2mD008396: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 07:55:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 07:55:17 splunk3 sendmail[8466]: n34EtH1v008466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:55:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 07:55:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 07:56:17 splunk3 sendmail[8714]: n34EuHQE008714: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 07:57:17 splunk3 sendmail[8954]: n34EvHVc008954: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:58:17 splunk3 sendmail[9187]: n34EwHho009187: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 07:59:17 splunk3 sendmail[9426]: n34ExHfa009426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:00:04 splunk3 sendmail[9680]: n34F04jt009680: from=root, size=291, class=0, nrcpts=1, msgid=<200904041500.n34F04jt009680@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 08:00:04 splunk3 sendmail[9684]: n34F04UI009684: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041500.n34F04jt009680@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 08:00:04 splunk3 sendmail[9680]: n34F04jt009680: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34F04UI009684 Message accepted for delivery)
|
|
Apr 4 08:00:04 splunk3 sendmail[9689]: n34F043o009689: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041500.n34F021F018167@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:00:04 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60704
|
|
Apr 4 08:00:04 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:00:04 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 08:00:04 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 08:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:00:05 splunk3 sendmail[9690]: n34F043o009689: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:00:05 splunk3 sendmail[9685]: n34F04UI009684: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:00:17 splunk3 sendmail[9756]: n34F0H4F009756: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:00:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:00:26 splunk3 sendmail[9790]: n34F0Q3u009790: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904041500.n34F0Q3u009790@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 08:00:26 splunk3 sendmail[9792]: n34F0Q3u009790: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 08:00:26 splunk3 sendmail[9792]: n34F0Q3u009790: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 4 08:00:26 splunk3 sendmail[9792]: n34F0Q3u009790: n34F0Q3u009792: postmaster notify: User unknown
|
|
Apr 4 08:00:27 splunk3 sendmail[9792]: n34F0Q3u009792: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:00:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:01:07 splunk3 sendmail[9951]: n34F11DR009951: from=root, size=443, class=0, nrcpts=1, msgid=<200904041501.n34F11DR009951@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 08:01:07 splunk3 sendmail[9988]: n34F17hA009988: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041501.n34F11DR009951@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 08:01:07 splunk3 sendmail[9951]: n34F11DR009951: to=root, ctladdr=root (0/0), delay=00:00:06, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34F17hA009988 Message accepted for delivery)
|
|
Apr 4 08:01:08 splunk3 sendmail[9990]: n34F17hA009988: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:01:15 splunk3 sendmail[10013]: n34F1FrU010013: from=<3O3bXSRQKBtI4CC492y92FHG-BCF2D9M4CC492.0CAGDyAA2GD9IB86H.0CA@alerts.bounces.google.com>, size=2733, class=0, nrcpts=1, msgid=<00151750db1cd30d5a0466bbef21@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 4 08:01:16 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60731
|
|
Apr 4 08:01:16 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:01:16 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 08:01:16 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 08:01:16 splunk3 sendmail[10015]: n34F1FrU010013: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32948, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:01:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:01:17 splunk3 sendmail[10043]: n34F1HHm010043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:02:17 splunk3 sendmail[10274]: n34F2HjI010274: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:03:17 splunk3 sendmail[10514]: n34F3HRx010514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:04:17 splunk3 sendmail[10751]: n34F4H74010751: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:05:05 splunk3 sendmail[10930]: n34F556S010930: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041505.n34F551T018845@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:05:05 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60768
|
|
Apr 4 08:05:05 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:05:05 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 08:05:05 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 08:05:05 splunk3 sendmail[10931]: n34F556S010930: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:05:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:05:17 splunk3 sendmail[10999]: n34F5HAF010999: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:05:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:05:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:06:17 splunk3 sendmail[11246]: n34F6HEg011246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:07:17 splunk3 sendmail[11485]: n34F7HLN011485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:08:17 splunk3 sendmail[11725]: n34F8HAe011725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:08:18 splunk3 sendmail[11724]: n34F8Itg011724: from=<34XfXSRQKBnoemmejcYjcprq-lmpcnjwemmejc.amkqnYkkcqnjsligr.amk@alerts.bounces.google.com>, size=8901, class=0, nrcpts=1, msgid=<0016e644c766fda4430466bc08ce@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.184]
|
|
Apr 4 08:08:18 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60806
|
|
Apr 4 08:08:18 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:08:18 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 08:08:18 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 08:08:18 splunk3 sendmail[11726]: n34F8Itg011724: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=39112, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:08:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:09:17 splunk3 sendmail[11966]: n34F9HVp011966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:10:02 splunk3 sendmail[12245]: n34FA2NR012245: from=root, size=292, class=0, nrcpts=1, msgid=<200904041510.n34FA2NR012245@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 08:10:02 splunk3 sendmail[12250]: n34FA2Mk012250: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041510.n34FA2NR012245@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 08:10:02 splunk3 sendmail[12245]: n34FA2NR012245: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34FA2Mk012250 Message accepted for delivery)
|
|
Apr 4 08:10:03 splunk3 sendmail[12251]: n34FA2Mk012250: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:10:05 splunk3 sendmail[12255]: n34FA5GW012255: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041510.n34FA5x9019459@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:10:05 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60826
|
|
Apr 4 08:10:05 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:10:05 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:10:05 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:10:06 splunk3 spamd[10040]: spamd: processing message <200904041510.n34FA5x9019459@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:10:08 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 08:10:08 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60826,mid=<200904041510.n34FA5x9019459@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:10:08 splunk3 sendmail[12256]: n34FA5GW012255: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:10:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:10:17 splunk3 sendmail[12325]: n34FAHQN012325: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:10:19 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:10:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:11:18 splunk3 sendmail[12576]: n34FBIbV012576: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 08:12:18 splunk3 sendmail[12810]: n34FCI8e012810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:13:18 splunk3 sendmail[13048]: n34FDI7d013048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:14:18 splunk3 sendmail[13308]: n34FEI3L013308: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:15:06 splunk3 sendmail[13500]: n34FF6VI013500: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041515.n34FF6T4020254@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:15:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60882
|
|
Apr 4 08:15:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:15:06 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:15:06 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:15:06 splunk3 spamd[10040]: spamd: processing message <200904041515.n34FF6T4020254@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:15:08 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1308 bytes.
|
|
Apr 4 08:15:08 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60882,mid=<200904041515.n34FF6T4020254@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:15:08 splunk3 sendmail[13501]: n34FF6VI013500: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:15:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:15:18 splunk3 sendmail[13570]: n34FFItq013570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:15:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:15:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:16:18 splunk3 sendmail[13814]: n34FGI5I013814: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:17:18 splunk3 sendmail[14054]: n34FHIvW014054: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:18:18 splunk3 sendmail[14288]: n34FIIRV014288: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:19:18 splunk3 sendmail[14528]: n34FJIZ0014528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:19:36 splunk3 sendmail[14548]: n34FJOP1014548: from=<spammertjes@bonfrer.com>, size=4012, class=0, nrcpts=1, msgid=<20090404171935.2346.qmail@acer-c06d489556>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=[115.67.191.105]
|
|
Apr 4 08:19:36 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60934
|
|
Apr 4 08:19:36 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:19:36 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:19:36 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:19:36 splunk3 spamd[10040]: spamd: processing message <20090404171935.2346.qmail@acer-c06d489556> for spamme:501
|
|
Apr 4 08:19:38 splunk3 spamd[10040]: spamd: identified spam (18.2/5.0) for spamme:501 in 2.7 seconds, 4284 bytes.
|
|
Apr 4 08:19:38 splunk3 spamd[10040]: spamd: result: Y 18 - ADDRESS_IN_SUBJECT,BAYES_99,DATE_IN_PAST_06_12,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_TAGS,HTML_IMAGE_ONLY_32,HTML_MESSAGE,RCVD_IN_XBL,SUBJ_HAS_UNIQ_ID,URIBL_SBL scantime=2.7,size=4284,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60934,mid=<20090404171935.2346.qmail@acer-c06d489556>,bayes=1,autolearn=no
|
|
Apr 4 08:19:38 splunk3 sendmail[14591]: n34FJOP1014548: to=<spamme@splunkit.com>, delay=00:00:06, xdelay=00:00:02, mailer=local, pri=34194, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:19:38 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:20:06 splunk3 sendmail[14733]: n34FK6hf014733: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041520.n34FK60C020889@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:20:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60939
|
|
Apr 4 08:20:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:20:07 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:20:07 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:20:07 splunk3 spamd[10040]: spamd: processing message <200904041520.n34FK60C020889@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:20:09 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 08:20:09 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60939,mid=<200904041520.n34FK60C020889@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:20:09 splunk3 sendmail[14734]: n34FK6hf014733: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:20:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:20:18 splunk3 sendmail[14786]: n34FKIco014786: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:20:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:20:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:21:18 splunk3 sendmail[15036]: n34FLIF8015036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:22:18 splunk3 sendmail[15272]: n34FMIlc015272: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:23:18 splunk3 sendmail[15513]: n34FNI7q015513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:24:18 splunk3 sendmail[15750]: n34FOI8c015750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:25:07 splunk3 sendmail[15949]: n34FP7pI015949: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041525.n34FP7QN021501@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:25:07 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60995
|
|
Apr 4 08:25:07 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:25:07 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:25:07 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:25:07 splunk3 spamd[10040]: spamd: processing message <200904041525.n34FP7QN021501@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:25:09 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 08:25:09 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60995,mid=<200904041525.n34FP7QN021501@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:25:09 splunk3 sendmail[15950]: n34FP7pI015949: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:25:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:25:18 splunk3 sendmail[16002]: n34FPIrA016002: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:25:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:25:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:26:18 splunk3 sendmail[16248]: n34FQIMT016248: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 08:27:18 splunk3 sendmail[16488]: n34FRIwM016488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:28:18 splunk3 sendmail[16723]: n34FSIxc016723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:29:18 splunk3 sendmail[16962]: n34FTIWj016962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:30:07 splunk3 sendmail[17162]: n34FU7D4017162: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041530.n34FU7Fv022119@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:30:07 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32820
|
|
Apr 4 08:30:07 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:30:07 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:30:07 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:30:07 splunk3 spamd[10040]: spamd: processing message <200904041530.n34FU7Fv022119@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:30:09 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 08:30:09 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32820,mid=<200904041530.n34FU7Fv022119@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:30:09 splunk3 sendmail[17163]: n34FU7D4017162: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:30:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:30:18 splunk3 sendmail[17213]: n34FUI6s017213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:30:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:30:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:31:18 splunk3 sendmail[17466]: n34FVISR017466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:32:18 splunk3 sendmail[17699]: n34FWI9a017699: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:33:18 splunk3 sendmail[17936]: n34FXIcj017936: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:34:18 splunk3 sendmail[18172]: n34FYIb5018172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:35:08 splunk3 sendmail[18369]: n34FZ8Q8018369: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041535.n34FZ7Xl022868@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:35:08 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32876
|
|
Apr 4 08:35:08 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:35:08 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:35:08 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:35:08 splunk3 spamd[10040]: spamd: processing message <200904041535.n34FZ7Xl022868@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:35:10 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 08:35:10 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32876,mid=<200904041535.n34FZ7Xl022868@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:35:10 splunk3 sendmail[18370]: n34FZ8Q8018369: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:35:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:35:18 splunk3 sendmail[18421]: n34FZI58018421: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:35:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:35:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:36:18 splunk3 sendmail[18667]: n34FaI0S018667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:37:18 splunk3 sendmail[18906]: n34FbIYn018906: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:38:16 splunk3 sendmail[4243]: n34EcFdK004243: timeout waiting for input from 118-169-208-192.dynamic.hinet.net during server cmd read
|
|
Apr 4 08:38:16 splunk3 sendmail[4243]: n34EcFdK004243: lost input channel from 118-169-208-192.dynamic.hinet.net [118.169.208.192] to MTA after rcpt
|
|
Apr 4 08:38:16 splunk3 sendmail[4243]: n34EcFdK004243: from=<hitomi1218@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-169-208-192.dynamic.hinet.net [118.169.208.192]
|
|
Apr 4 08:38:18 splunk3 sendmail[19146]: n34FcIwd019146: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:39:18 splunk3 sendmail[19385]: n34FdI3n019385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:40:08 splunk3 sendmail[19596]: n34Fe8px019596: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041540.n34Fe8Bp023526@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:40:08 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32939
|
|
Apr 4 08:40:08 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:40:08 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:40:08 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:40:08 splunk3 spamd[10040]: spamd: processing message <200904041540.n34Fe8Bp023526@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:40:10 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 4 08:40:10 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32939,mid=<200904041540.n34Fe8Bp023526@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:40:10 splunk3 sendmail[19597]: n34Fe8px019596: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:40:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:40:18 splunk3 sendmail[19651]: n34FeIeO019651: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:40:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:40:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:41:18 splunk3 sendmail[19893]: n34FfIsx019893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 08:42:18 splunk3 sendmail[20128]: n34FgInV020128: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:43:18 splunk3 sendmail[20367]: n34FhIrl020367: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:44:18 splunk3 sendmail[20600]: n34FiITx020600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:45:09 splunk3 sendmail[20810]: n34Fj90O020810: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041545.n34Fj8Bb024150@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:45:09 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 32996
|
|
Apr 4 08:45:09 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:45:09 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:45:09 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:45:09 splunk3 spamd[10040]: spamd: processing message <200904041545.n34Fj8Bb024150@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:45:11 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 08:45:11 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=32996,mid=<200904041545.n34Fj8Bb024150@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:45:11 splunk3 sendmail[20811]: n34Fj90O020810: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:45:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:45:18 splunk3 sendmail[20861]: n34FjIbS020861: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:45:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:45:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:46:18 splunk3 sendmail[21099]: n34FkIsg021099: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:47:18 splunk3 sendmail[21337]: n34FlIFX021337: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:48:18 splunk3 sendmail[21570]: n34FmIAw021570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:49:18 splunk3 sendmail[21809]: n34FnI2Y021809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:50:11 splunk3 sendmail[22034]: n34FoBOB022034: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041550.n34Fo9tF024760@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:50:11 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33051
|
|
Apr 4 08:50:11 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:50:11 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:50:11 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:50:11 splunk3 spamd[10040]: spamd: processing message <200904041550.n34Fo9tF024760@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:50:13 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 08:50:13 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33051,mid=<200904041550.n34Fo9tF024760@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:50:13 splunk3 sendmail[22035]: n34FoBOB022034: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:50:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:50:18 splunk3 sendmail[22068]: n34FoI2G022068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:50:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:50:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:51:18 splunk3 sendmail[22308]: n34FpIfb022308: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:52:18 splunk3 sendmail[22547]: n34FqIWX022547: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:53:18 splunk3 sendmail[22789]: n34FrI0c022789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:54:18 splunk3 sendmail[23024]: n34FsIfF023024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:55:12 splunk3 sendmail[23249]: n34FtC5I023249: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041555.n34FtBpf025369@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 08:55:12 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33107
|
|
Apr 4 08:55:12 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 08:55:12 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 08:55:12 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 08:55:12 splunk3 spamd[10040]: spamd: processing message <200904041555.n34FtBpf025369@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 08:55:14 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 08:55:14 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33107,mid=<200904041555.n34FtBpf025369@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 08:55:14 splunk3 sendmail[23250]: n34FtC5I023249: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 08:55:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 08:55:18 splunk3 sendmail[23285]: n34FtIxZ023285: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:55:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 08:55:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 08:56:18 splunk3 sendmail[23522]: n34FuIm9023522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 08:57:18 splunk3 sendmail[23761]: n34FvIJb023761: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:58:18 splunk3 sendmail[23995]: n34FwI9B023995: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 08:59:18 splunk3 sendmail[24237]: n34FxICk024237: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:00:02 splunk3 sendmail[24474]: n34G01gY024474: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904041600.n34G01gY024474@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 09:00:02 splunk3 sendmail[24476]: n34G01gY024474: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 09:00:02 splunk3 sendmail[24476]: n34G01gY024474: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 09:00:02 splunk3 sendmail[24476]: n34G01gY024474: n34G02gY024476: postmaster notify: User unknown
|
|
Apr 4 09:00:03 splunk3 sendmail[24476]: n34G02gY024476: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:00:04 splunk3 sendmail[24502]: n34G04XN024502: from=root, size=291, class=0, nrcpts=1, msgid=<200904041600.n34G04XN024502@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 09:00:04 splunk3 sendmail[24506]: n34G04LC024506: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041600.n34G04XN024502@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 09:00:04 splunk3 sendmail[24502]: n34G04XN024502: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34G04LC024506 Message accepted for delivery)
|
|
Apr 4 09:00:05 splunk3 sendmail[24507]: n34G04LC024506: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:00:12 splunk3 sendmail[24549]: n34G0C3l024549: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041600.n34G0CCP026010@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:00:12 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33172
|
|
Apr 4 09:00:12 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:00:12 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 09:00:12 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 09:00:12 splunk3 sendmail[24550]: n34G0C3l024549: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:00:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:00:18 splunk3 sendmail[24581]: n34G0Ih2024581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:00:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:00:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:01:03 splunk3 sendmail[24764]: n34G1173024764: from=root, size=443, class=0, nrcpts=1, msgid=<200904041601.n34G1173024764@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 09:01:03 splunk3 sendmail[24771]: n34G13u1024771: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041601.n34G1173024764@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 09:01:03 splunk3 sendmail[24764]: n34G1173024764: to=root, ctladdr=root (0/0), delay=00:00:02, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34G13u1024771 Message accepted for delivery)
|
|
Apr 4 09:01:05 splunk3 sendmail[24772]: n34G13u1024771: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:01:18 splunk3 sendmail[24836]: n34G1I2Q024836: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:02:18 splunk3 sendmail[25070]: n34G2IWh025070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:03:18 splunk3 sendmail[25307]: n34G3Im0025307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:04:18 splunk3 sendmail[25543]: n34G4ISg025543: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:05:13 splunk3 sendmail[25767]: n34G5DRg025767: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041605.n34G5Cww026700@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:05:13 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33228
|
|
Apr 4 09:05:13 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:05:13 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 09:05:13 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 09:05:13 splunk3 sendmail[25768]: n34G5DRg025767: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:05:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:05:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:05:18 splunk3 sendmail[25798]: n34G5INN025798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:05:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:05:41 splunk3 sendmail[25875]: n34G5eMT025875: from=<oazaz_1979@STUDENT.GU.SE>, size=1944, class=0, nrcpts=1, msgid=<200904041605.n34G5eMT025875@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=Dynamic-IP-cr697949167.cable.net.co [69.79.49.167] (may be forged)
|
|
Apr 4 09:05:41 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33234
|
|
Apr 4 09:05:41 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:05:41 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 09:05:41 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 09:05:41 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:05:41 splunk3 sendmail[25896]: n34G5eMT025875: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=32303, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:06:18 splunk3 sendmail[26040]: n34G6Ivf026040: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:07:18 splunk3 sendmail[26280]: n34G7I9e026280: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:08:18 splunk3 sendmail[26516]: n34G8Ijo026516: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:09:18 splunk3 sendmail[26757]: n34G9IqN026757: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:10:03 splunk3 sendmail[27035]: n34GA3VX027035: from=root, size=292, class=0, nrcpts=1, msgid=<200904041610.n34GA3VX027035@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 09:10:03 splunk3 sendmail[27046]: n34GA3PD027046: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041610.n34GA3VX027035@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 09:10:03 splunk3 sendmail[27035]: n34GA3VX027035: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34GA3PD027046 Message accepted for delivery)
|
|
Apr 4 09:10:04 splunk3 sendmail[27047]: n34GA3PD027046: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:10:14 splunk3 sendmail[27089]: n34GAEum027089: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041610.n34GADlV027311@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:10:14 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33286
|
|
Apr 4 09:10:14 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:10:14 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:10:14 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:10:14 splunk3 spamd[10040]: spamd: processing message <200904041610.n34GADlV027311@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:10:16 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 09:10:16 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33286,mid=<200904041610.n34GADlV027311@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 09:10:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:10:16 splunk3 sendmail[27090]: n34GAEum027089: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:10:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:10:18 splunk3 sendmail[27124]: n34GAIeo027124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:10:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:11:18 splunk3 sendmail[27366]: n34GBIZG027366: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 09:12:18 splunk3 sendmail[27600]: n34GCIx5027600: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:13:18 splunk3 sendmail[27845]: n34GDIMR027845: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:14:18 splunk3 sendmail[28082]: n34GEI7n028082: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:15:14 splunk3 sendmail[28307]: n34GFEjZ028307: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041615.n34GFECU028107@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:15:15 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33342
|
|
Apr 4 09:15:15 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:15:15 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:15:15 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:15:15 splunk3 spamd[10040]: spamd: processing message <200904041615.n34GFECU028107@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:15:17 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 09:15:17 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33342,mid=<200904041615.n34GFECU028107@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 09:15:17 splunk3 sendmail[28308]: n34GFEjZ028307: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:15:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:15:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:15:18 splunk3 sendmail[28339]: n34GFInY028339: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:15:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:16:18 splunk3 sendmail[28578]: n34GGIwx028578: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:17:18 splunk3 sendmail[28817]: n34GHIV2028817: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:18:18 splunk3 sendmail[29052]: n34GIINa029052: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:19:18 splunk3 sendmail[29291]: n34GJI4S029291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:20:15 splunk3 sendmail[29542]: n34GKFQ6029542: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041620.n34GKF0m028737@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:20:15 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33399
|
|
Apr 4 09:20:15 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:20:15 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:20:15 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:20:15 splunk3 spamd[10040]: spamd: processing message <200904041620.n34GKF0m028737@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:20:17 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 4 09:20:17 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33399,mid=<200904041620.n34GKF0m028737@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 09:20:17 splunk3 sendmail[29543]: n34GKFQ6029542: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:20:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:20:18 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:20:18 splunk3 sendmail[29550]: n34GKIaM029550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:20:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:21:18 splunk3 sendmail[29791]: n34GLIl2029791: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:22:18 splunk3 sendmail[30025]: n34GMIlI030025: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:23:18 splunk3 sendmail[30268]: n34GNIe9030268: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:24:18 splunk3 sendmail[30504]: n34GOIU4030504: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:25:16 splunk3 sendmail[30754]: n34GPGTB030754: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041625.n34GPF4V029347@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:25:16 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33454
|
|
Apr 4 09:25:16 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:25:16 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:25:16 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:25:16 splunk3 spamd[10040]: spamd: processing message <200904041625.n34GPF4V029347@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:25:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:25:18 splunk3 sendmail[30762]: n34GPISS030762: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:25:18 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 09:25:18 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33454,mid=<200904041625.n34GPF4V029347@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 09:25:18 splunk3 sendmail[30755]: n34GPGTB030754: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:25:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:25:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:26:18 splunk3 sendmail[30999]: n34GQI2l030999: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 09:27:18 splunk3 sendmail[31240]: n34GRI33031240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:28:18 splunk3 sendmail[31476]: n34GSIh2031476: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:29:18 splunk3 sendmail[31715]: n34GTIGL031715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:30:16 splunk3 sendmail[31969]: n34GUGQQ031969: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041630.n34GUGKp029968@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:30:16 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33511
|
|
Apr 4 09:30:16 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:30:16 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:30:16 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:30:16 splunk3 spamd[10040]: spamd: processing message <200904041630.n34GUGKp029968@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:30:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:30:18 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 09:30:18 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33511,mid=<200904041630.n34GUGKp029968@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 09:30:18 splunk3 sendmail[31971]: n34GUGQQ031969: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:30:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:30:18 splunk3 sendmail[31976]: n34GUI5W031976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:30:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:31:18 splunk3 sendmail[32219]: n34GVIE3032219: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:32:18 splunk3 sendmail[32453]: n34GWIa6032453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:33:18 splunk3 sendmail[32690]: n34GXIpM032690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:34:18 splunk3 sendmail[460]: n34GYIqI000460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:35:17 splunk3 sendmail[711]: n34GZHlB000711: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041635.n34GZGPL030719@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:35:17 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33567
|
|
Apr 4 09:35:17 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:35:17 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:35:17 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:35:17 splunk3 spamd[10040]: spamd: processing message <200904041635.n34GZGPL030719@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:35:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:35:18 splunk3 sendmail[718]: n34GZIY2000718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:35:19 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 09:35:19 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33567,mid=<200904041635.n34GZGPL030719@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 09:35:19 splunk3 sendmail[712]: n34GZHlB000711: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:35:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:35:41 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:36:18 splunk3 sendmail[955]: n34GaIX8000955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:37:18 splunk3 sendmail[1194]: n34GbIMS001194: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:38:18 splunk3 sendmail[1432]: n34GcIIx001432: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:39:18 splunk3 sendmail[1669]: n34GdIfR001669: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:40:17 splunk3 sendmail[1925]: n34GeHG9001925: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041640.n34GeHF8031350@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:40:17 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33622
|
|
Apr 4 09:40:17 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:40:17 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:40:17 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:40:17 splunk3 spamd[10040]: spamd: processing message <200904041640.n34GeHF8031350@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:40:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:40:18 splunk3 sendmail[1932]: n34GeI4Z001932: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:40:19 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 09:40:19 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33622,mid=<200904041640.n34GeHF8031350@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 09:40:19 splunk3 sendmail[1926]: n34GeHG9001925: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:40:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:40:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:41:18 splunk3 sendmail[2175]: n34GfIV2002175: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 09:42:18 splunk3 sendmail[2411]: n34GgIF9002411: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:43:14 splunk3 sendmail[2631]: n34GhDLT002631: ruleset=check_rcpt, arg1=<s2288@mail2000.com.tw>, relay=118-167-132-229.dynamic.hinet.net [118.167.132.229], reject=550 5.7.1 <s2288@mail2000.com.tw>... Relaying denied
|
|
Apr 4 09:43:18 splunk3 sendmail[2657]: n34GhIsc002657: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:44:18 splunk3 sendmail[2904]: n34GiIJb002904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:45:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:45:18 splunk3 sendmail[3167]: n34GjIlZ003167: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041645.n34GjH1o031965@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:45:18 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33679
|
|
Apr 4 09:45:18 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:45:18 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:45:18 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:45:18 splunk3 spamd[10040]: spamd: processing message <200904041645.n34GjH1o031965@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:45:18 splunk3 sendmail[3174]: n34GjIGq003174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:45:20 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1308 bytes.
|
|
Apr 4 09:45:20 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33679,mid=<200904041645.n34GjH1o031965@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 09:45:20 splunk3 sendmail[3169]: n34GjIlZ003167: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:45:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:45:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:46:18 splunk3 sendmail[3412]: n34GkI6e003412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:47:18 splunk3 sendmail[3673]: n34GlIYr003673: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:47:31 splunk3 sendmail[3735]: n34GlUv2003735: from=<aw-confirm@ebay.com>, size=3398, class=0, nrcpts=1, msgid=<PM27dg9ZD7G3Lbc1AtT00001359@pm2.maxeinercpa.local>, proto=ESMTP, daemon=MTA, relay=maxeinercpa.com [64.122.126.247] (may be forged)
|
|
Apr 4 09:47:31 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33700
|
|
Apr 4 09:47:31 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:47:31 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:47:31 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:47:31 splunk3 spamd[10040]: spamd: processing message <PM27dg9ZD7G3Lbc1AtT00001359@pm2.maxeinercpa.local> for spamme:501
|
|
Apr 4 09:47:33 splunk3 spamd[10040]: spamd: identified spam (20.3/5.0) for spamme:501 in 1.9 seconds, 3669 bytes.
|
|
Apr 4 09:47:33 splunk3 spamd[10040]: spamd: result: Y 20 - BAYES_99,DNS_FROM_RFC_ABUSE,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,FORGED_RCVD_HELO,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,NORMAL_HTTP_TO_IP,NO_REAL_NAME,TO_CC_NONE,URIBL_PH_SURBL scantime=1.9,size=3669,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33700,mid=<PM27dg9ZD7G3Lbc1AtT00001359@pm2.maxeinercpa.local>,bayes=1,autolearn=no
|
|
Apr 4 09:47:33 splunk3 sendmail[3736]: n34GlUv2003735: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33617, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:47:33 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:48:18 splunk3 sendmail[3923]: n34GmIMa003923: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:49:18 splunk3 sendmail[4177]: n34GnI44004177: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:50:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:50:18 splunk3 sendmail[4447]: n34GoIBM004447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:50:19 splunk3 sendmail[4448]: n34GoJBG004448: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041650.n34GoILX032582@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:50:19 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33735
|
|
Apr 4 09:50:19 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:50:19 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:50:19 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:50:19 splunk3 spamd[10040]: spamd: processing message <200904041650.n34GoILX032582@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:50:21 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 4 09:50:21 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33735,mid=<200904041650.n34GoILX032582@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 09:50:21 splunk3 sendmail[4449]: n34GoJBG004448: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:50:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:50:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:51:18 splunk3 sendmail[4696]: n34GpI77004696: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:52:18 splunk3 sendmail[4938]: n34GqIeG004938: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:53:18 splunk3 sendmail[5217]: n34GrIRb005217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:54:18 splunk3 sendmail[5455]: n34GsIJQ005455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:55:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 09:55:18 splunk3 sendmail[5709]: n34GtIjm005709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:55:19 splunk3 sendmail[5710]: n34GtJRW005710: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904041655.n34GtJtt000721@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 09:55:20 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33791
|
|
Apr 4 09:55:20 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 09:55:20 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 09:55:20 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 09:55:20 splunk3 spamd[10040]: spamd: processing message <200904041655.n34GtJtt000721@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 09:55:22 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1302 bytes.
|
|
Apr 4 09:55:22 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33791,mid=<200904041655.n34GtJtt000721@virt2.int.splunk.com>,bayes=0.0659063860811472,autolearn=no
|
|
Apr 4 09:55:22 splunk3 sendmail[5711]: n34GtJRW005710: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 4 09:55:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 09:55:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 09:56:18 splunk3 sendmail[5951]: n34GuIfO005951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 09:57:18 splunk3 sendmail[6190]: n34GvIN2006190: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:58:18 splunk3 sendmail[6426]: n34GwIJp006426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 09:59:18 splunk3 sendmail[6666]: n34GxISa006666: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:00:05 splunk3 sendmail[6910]: n34H05Hr006910: from=root, size=291, class=0, nrcpts=1, msgid=<200904041700.n34H05Hr006910@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 10:00:05 splunk3 sendmail[6925]: n34H05gv006925: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041700.n34H05Hr006910@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 10:00:05 splunk3 sendmail[6910]: n34H05Hr006910: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34H05gv006925 Message accepted for delivery)
|
|
Apr 4 10:00:06 splunk3 sendmail[6926]: n34H05gv006925: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:00:07 splunk3 sendmail[6943]: n34H07cp006943: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904041700.n34H07cp006943@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 10:00:07 splunk3 sendmail[6945]: n34H07cp006943: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 10:00:07 splunk3 sendmail[6945]: n34H07cp006943: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 4 10:00:07 splunk3 sendmail[6945]: n34H07cp006943: n34H07cp006945: postmaster notify: User unknown
|
|
Apr 4 10:00:08 splunk3 sendmail[6945]: n34H07cp006945: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:00:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:00:18 splunk3 sendmail[7005]: n34H0Iau007005: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:00:20 splunk3 sendmail[7023]: n34H0K1u007023: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041700.n34H0KoL001375@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:00:20 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33855
|
|
Apr 4 10:00:20 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:00:20 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 10:00:20 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 10:00:20 splunk3 sendmail[7024]: n34H0K1u007023: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:00:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:00:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:01:06 splunk3 sendmail[7192]: n34H110P007192: from=root, size=443, class=0, nrcpts=1, msgid=<200904041701.n34H110P007192@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 10:01:06 splunk3 sendmail[7214]: n34H16KJ007214: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041701.n34H110P007192@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 10:01:06 splunk3 sendmail[7192]: n34H110P007192: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34H16KJ007214 Message accepted for delivery)
|
|
Apr 4 10:01:09 splunk3 sendmail[7215]: n34H16KJ007214: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:03, xdelay=00:00:03, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:01:18 splunk3 sendmail[7265]: n34H1Ir5007265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:02:18 splunk3 sendmail[7500]: n34H2I6V007500: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:02:59 splunk3 sendmail[7662]: n34H2ubD007662: from=<spamme@splunkit.com>, size=2720, class=0, nrcpts=1, msgid=<200904041702.n34H2ubD007662@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=[88.252.200.26]
|
|
Apr 4 10:02:59 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33881
|
|
Apr 4 10:02:59 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:02:59 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 10:02:59 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 10:02:59 splunk3 sendmail[7669]: n34H2ubD007662: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:02, xdelay=00:00:00, mailer=local, pri=33004, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:02:59 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:03:18 splunk3 sendmail[7753]: n34H3Is6007753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:04:18 splunk3 sendmail[7990]: n34H4IDr007990: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:05:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:05:18 splunk3 sendmail[8243]: n34H5IVp008243: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:05:21 splunk3 sendmail[8261]: n34H5Lxa008261: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041705.n34H5Koi002085@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:05:21 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33913
|
|
Apr 4 10:05:21 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:05:21 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 10:05:21 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 10:05:21 splunk3 sendmail[8262]: n34H5Lxa008261: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:05:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:05:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:06:18 splunk3 sendmail[8486]: n34H6I1S008486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:07:18 splunk3 sendmail[8725]: n34H7Imh008725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:08:18 splunk3 sendmail[8962]: n34H8Iq8008962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:09:18 splunk3 sendmail[9202]: n34H9IaM009202: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:10:02 splunk3 sendmail[9474]: n34HA2LC009474: from=root, size=292, class=0, nrcpts=1, msgid=<200904041710.n34HA2LC009474@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 10:10:02 splunk3 sendmail[9480]: n34HA2Vb009480: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041710.n34HA2LC009474@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 10:10:02 splunk3 sendmail[9474]: n34HA2LC009474: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34HA2Vb009480 Message accepted for delivery)
|
|
Apr 4 10:10:03 splunk3 sendmail[9481]: n34HA2Vb009480: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:10:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:10:18 splunk3 sendmail[9572]: n34HAIEi009572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:10:21 splunk3 sendmail[9591]: n34HALQI009591: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041710.n34HALJe002716@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:10:21 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 33969
|
|
Apr 4 10:10:21 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:10:21 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:10:21 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:10:21 splunk3 spamd[10040]: spamd: processing message <200904041710.n34HALJe002716@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:10:23 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 10:10:23 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=33969,mid=<200904041710.n34HALJe002716@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:10:23 splunk3 sendmail[9592]: n34HALQI009591: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:10:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:10:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:11:18 splunk3 sendmail[9818]: n34HBISp009818: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 10:12:18 splunk3 sendmail[10056]: n34HCIBq010056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:13:19 splunk3 sendmail[10294]: n34HDIJI010294: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:14:19 splunk3 sendmail[10529]: n34HEJ98010529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:15:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:15:19 splunk3 sendmail[10782]: n34HFJPM010782: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:15:23 splunk3 sendmail[10801]: n34HFNci010801: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041715.n34HFL4W003510@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:15:23 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34026
|
|
Apr 4 10:15:23 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:15:23 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:15:23 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:15:23 splunk3 spamd[10040]: spamd: processing message <200904041715.n34HFL4W003510@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:15:25 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 10:15:25 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34026,mid=<200904041715.n34HFL4W003510@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:15:25 splunk3 sendmail[10803]: n34HFNci010801: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:15:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:15:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:16:19 splunk3 sendmail[11027]: n34HGJem011027: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:17:19 splunk3 sendmail[11265]: n34HHJqs011265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:18:19 splunk3 sendmail[11499]: n34HIJK8011499: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:19:19 splunk3 sendmail[11742]: n34HJJnh011742: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:20:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:20:19 splunk3 sendmail[11997]: n34HKJwb011997: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:20:23 splunk3 sendmail[12016]: n34HKNYa012016: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041720.n34HKNLu004155@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:20:23 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34082
|
|
Apr 4 10:20:23 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:20:23 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:20:23 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:20:23 splunk3 spamd[10040]: spamd: processing message <200904041720.n34HKNLu004155@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:20:26 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 10:20:26 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34082,mid=<200904041720.n34HKNLu004155@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:20:26 splunk3 sendmail[12017]: n34HKNYa012016: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:20:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:20:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:21:19 splunk3 sendmail[12244]: n34HLJWe012244: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:22:19 splunk3 sendmail[12479]: n34HMJNL012479: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:23:19 splunk3 sendmail[12723]: n34HNJBW012723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:24:19 splunk3 sendmail[12957]: n34HOJYa012957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:25:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:25:19 splunk3 sendmail[13211]: n34HPJTW013211: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:25:24 splunk3 sendmail[13231]: n34HPOoU013231: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041725.n34HPNqL004756@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:25:24 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34137
|
|
Apr 4 10:25:24 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:25:24 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:25:24 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:25:24 splunk3 spamd[10040]: spamd: processing message <200904041725.n34HPNqL004756@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:25:26 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 10:25:26 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34137,mid=<200904041725.n34HPNqL004756@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:25:26 splunk3 sendmail[13232]: n34HPOoU013231: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:25:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:26:19 splunk3 sendmail[13494]: n34HQJR0013494: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 10:27:19 splunk3 sendmail[13732]: n34HRJ6j013732: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:28:19 splunk3 sendmail[13966]: n34HSJia013966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:29:19 splunk3 sendmail[14205]: n34HTJer014205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:30:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:30:19 splunk3 sendmail[14459]: n34HUJca014459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:30:25 splunk3 sendmail[14495]: n34HUPiC014495: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041730.n34HUPjn005382@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:30:25 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34194
|
|
Apr 4 10:30:25 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:30:25 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:30:25 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:30:25 splunk3 spamd[10040]: spamd: processing message <200904041730.n34HUPjn005382@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:30:27 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 4 10:30:27 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34194,mid=<200904041730.n34HUPjn005382@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:30:27 splunk3 sendmail[14496]: n34HUPiC014495: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:30:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:30:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:31:19 splunk3 sendmail[14707]: n34HVJgL014707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:32:19 splunk3 sendmail[14942]: n34HWJDB014942: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:33:19 splunk3 sendmail[15182]: n34HXJaK015182: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:34:19 splunk3 sendmail[15418]: n34HYJ4Z015418: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:35:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:35:19 splunk3 sendmail[15669]: n34HZJin015669: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:35:26 splunk3 sendmail[15706]: n34HZQav015706: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041735.n34HZP94006122@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:35:26 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34249
|
|
Apr 4 10:35:26 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:35:26 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:35:26 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:35:26 splunk3 spamd[10040]: spamd: processing message <200904041735.n34HZP94006122@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:35:28 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 10:35:28 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34249,mid=<200904041735.n34HZP94006122@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:35:28 splunk3 sendmail[15707]: n34HZQav015706: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:35:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:35:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:36:19 splunk3 sendmail[15912]: n34HaJGk015912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:37:19 splunk3 sendmail[16152]: n34HbJxW016152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:38:19 splunk3 sendmail[16390]: n34HcJmn016390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:39:19 splunk3 sendmail[16631]: n34HdJa4016631: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:40:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:40:19 splunk3 sendmail[16888]: n34HeJ8e016888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:40:26 splunk3 sendmail[16924]: n34HeQ03016924: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041740.n34HeQdg006766@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:40:26 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34305
|
|
Apr 4 10:40:26 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:40:26 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:40:26 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:40:26 splunk3 spamd[10040]: spamd: processing message <200904041740.n34HeQdg006766@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:40:28 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1305 bytes.
|
|
Apr 4 10:40:28 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34305,mid=<200904041740.n34HeQdg006766@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:40:28 splunk3 sendmail[16925]: n34HeQ03016924: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:40:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:41:19 splunk3 sendmail[17135]: n34HfJEm017135: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 10:42:19 splunk3 sendmail[17369]: n34HgJnT017369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:43:14 splunk3 sendmail[2631]: n34GhDLT002631: timeout waiting for input from 118-167-132-229.dynamic.hinet.net during server cmd read
|
|
Apr 4 10:43:14 splunk3 sendmail[2631]: n34GhDLT002631: lost input channel from 118-167-132-229.dynamic.hinet.net [118.167.132.229] to MTA after rcpt
|
|
Apr 4 10:43:14 splunk3 sendmail[2631]: n34GhDLT002631: from=<aaa.xxx@mail2000.com.tw>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=118-167-132-229.dynamic.hinet.net [118.167.132.229]
|
|
Apr 4 10:43:19 splunk3 sendmail[17607]: n34HhJqw017607: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:44:10 splunk3 sendmail[17778]: n34HiAKm017778: ruleset=check_rcpt, arg1=<bibiorm@gmail.com>, relay=[219.85.85.61], reject=450 4.4.0 <bibiorm@gmail.com>... Relaying temporarily denied. Cannot resolve PTR record for 219.85.85.61
|
|
Apr 4 10:44:19 splunk3 sendmail[17844]: n34HiJP4017844: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:45:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:45:19 splunk3 sendmail[18095]: n34HjJbR018095: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:45:27 splunk3 sendmail[18132]: n34HjRfH018132: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041745.n34HjQUo007377@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:45:27 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34362
|
|
Apr 4 10:45:27 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:45:27 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:45:27 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:45:27 splunk3 spamd[10040]: spamd: processing message <200904041745.n34HjQUo007377@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:45:29 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 10:45:29 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34362,mid=<200904041745.n34HjQUo007377@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:45:29 splunk3 sendmail[18133]: n34HjRfH018132: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:45:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:46:19 splunk3 sendmail[18340]: n34HkJvi018340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:47:19 splunk3 sendmail[18579]: n34HlJ0m018579: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:48:19 splunk3 sendmail[18813]: n34HmJqn018813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:49:19 splunk3 sendmail[19052]: n34HnJWK019052: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:50:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:50:19 splunk3 sendmail[19306]: n34HoJUK019306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:50:28 splunk3 sendmail[19346]: n34HoSTB019346: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041750.n34HoSO0007997@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:50:28 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34417
|
|
Apr 4 10:50:28 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:50:28 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:50:28 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:50:28 splunk3 spamd[10040]: spamd: processing message <200904041750.n34HoSO0007997@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:50:31 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 10:50:31 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34417,mid=<200904041750.n34HoSO0007997@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:50:31 splunk3 sendmail[19347]: n34HoSTB019346: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:50:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:50:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:51:19 splunk3 sendmail[19555]: n34HpJjC019555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:52:19 splunk3 sendmail[19789]: n34HqJb5019789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:53:19 splunk3 sendmail[20032]: n34HrJDm020032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:54:19 splunk3 sendmail[20269]: n34HsJQ5020269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:55:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 10:55:19 splunk3 sendmail[20524]: n34HtJ1X020524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:55:29 splunk3 sendmail[20562]: n34HtTw0020562: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041755.n34HtTPk008630@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 10:55:29 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34473
|
|
Apr 4 10:55:29 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 10:55:29 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 10:55:29 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 10:55:29 splunk3 spamd[10040]: spamd: processing message <200904041755.n34HtTPk008630@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 10:55:31 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1305 bytes.
|
|
Apr 4 10:55:31 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34473,mid=<200904041755.n34HtTPk008630@virt2.int.splunk.com>,bayes=0.168669830571835,autolearn=no
|
|
Apr 4 10:55:31 splunk3 sendmail[20568]: n34HtTw0020562: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 10:55:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 10:55:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 10:56:19 splunk3 sendmail[20767]: n34HuJsJ020767: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 10:57:19 splunk3 sendmail[21005]: n34HvJEj021005: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:58:19 splunk3 sendmail[21240]: n34HwJKD021240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 10:59:19 splunk3 sendmail[21478]: n34HxJik021478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:00:04 splunk3 sendmail[21734]: n34I04HS021734: from=root, size=291, class=0, nrcpts=1, msgid=<200904041800.n34I04HS021734@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 11:00:04 splunk3 sendmail[21738]: n34I04jQ021738: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041800.n34I04HS021734@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 11:00:04 splunk3 sendmail[21734]: n34I04HS021734: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34I04jQ021738 Message accepted for delivery)
|
|
Apr 4 11:00:05 splunk3 sendmail[21739]: n34I04jQ021738: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:00:12 splunk3 sendmail[21775]: n34I0CvA021775: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904041800.n34I0CvA021775@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 11:00:12 splunk3 sendmail[21777]: n34I0CvA021775: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 11:00:12 splunk3 sendmail[21777]: n34I0CvA021775: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 11:00:12 splunk3 sendmail[21777]: n34I0CvA021775: n34I0CvA021777: postmaster notify: User unknown
|
|
Apr 4 11:00:14 splunk3 sendmail[21777]: n34I0CvA021777: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:00:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:00:19 splunk3 sendmail[21817]: n34I0J1W021817: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:00:30 splunk3 sendmail[21873]: n34I0Uiw021873: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041800.n34I0Th5009247@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:00:30 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34536
|
|
Apr 4 11:00:30 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:00:30 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 11:00:30 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 11:00:30 splunk3 sendmail[21874]: n34I0Uiw021873: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:00:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:00:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:01:15 splunk3 sendmail[22007]: n34I11kG022007: from=root, size=443, class=0, nrcpts=1, msgid=<200904041801.n34I11kG022007@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 11:01:15 splunk3 sendmail[22071]: n34I1FVp022071: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041801.n34I11kG022007@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 11:01:15 splunk3 sendmail[22007]: n34I11kG022007: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34I1FVp022071 Message accepted for delivery)
|
|
Apr 4 11:01:16 splunk3 sendmail[22072]: n34I1FVp022071: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:01:19 splunk3 sendmail[22079]: n34I1Jba022079: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:02:19 splunk3 sendmail[22313]: n34I2JdV022313: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:03:19 splunk3 sendmail[22550]: n34I3JVt022550: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:04:19 splunk3 sendmail[22782]: n34I4JcG022782: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:05:01 splunk3 sendmail[22958]: n34I51T0022958: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904041805.n34I50dv009851@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:05:01 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34580
|
|
Apr 4 11:05:01 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:05:01 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 11:05:01 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 11:05:01 splunk3 sendmail[22960]: n34I51T0022958: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:05:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:05:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:05:19 splunk3 sendmail[23042]: n34I5JAj023042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:05:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:06:19 splunk3 sendmail[23278]: n34I6Jiv023278: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:07:19 splunk3 sendmail[23522]: n34I7Jdu023522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:08:19 splunk3 sendmail[23774]: n34I8JmC023774: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:09:19 splunk3 sendmail[24014]: n34I9JQE024014: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:10:01 splunk3 sendmail[24168]: n34IA1be024168: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041810.n34IA1jQ010465@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:10:01 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34636
|
|
Apr 4 11:10:01 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:10:01 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 11:10:01 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 11:10:01 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:10:01 splunk3 sendmail[24175]: n34IA1be024168: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:10:02 splunk3 sendmail[24275]: n34IA2ip024275: from=root, size=292, class=0, nrcpts=1, msgid=<200904041810.n34IA2ip024275@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 11:10:02 splunk3 sendmail[24280]: n34IA2Yr024280: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041810.n34IA2ip024275@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 11:10:02 splunk3 sendmail[24275]: n34IA2ip024275: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34IA2Yr024280 Message accepted for delivery)
|
|
Apr 4 11:10:04 splunk3 sendmail[24281]: n34IA2Yr024280: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:10:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:10:19 splunk3 sendmail[24379]: n34IAJ4t024379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:10:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:11:19 splunk3 sendmail[24619]: n34IBJtq024619: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 11:12:19 splunk3 sendmail[24855]: n34ICJ5D024855: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:13:19 splunk3 sendmail[25094]: n34IDJY7025094: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:14:19 splunk3 sendmail[25329]: n34IEJf5025329: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:15:02 splunk3 sendmail[25488]: n34IF2SB025488: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041815.n34IF2em011299@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:15:02 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34692
|
|
Apr 4 11:15:02 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:15:02 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:15:02 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:15:02 splunk3 spamd[10040]: spamd: processing message <200904041815.n34IF2em011299@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 11:15:04 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 4 11:15:04 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34692,mid=<200904041815.n34IF2em011299@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 11:15:04 splunk3 sendmail[25489]: n34IF2SB025488: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:15:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:15:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:15:19 splunk3 sendmail[25588]: n34IFJlt025588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:15:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:16:19 splunk3 sendmail[25826]: n34IGJ7A025826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:17:19 splunk3 sendmail[26065]: n34IHJTi026065: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:18:19 splunk3 sendmail[26299]: n34IIJVl026299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:19:19 splunk3 sendmail[26539]: n34IJJlL026539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:20:03 splunk3 sendmail[26701]: n34IK3UL026701: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041820.n34IK2bQ011934@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:20:03 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34748
|
|
Apr 4 11:20:03 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:20:03 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:20:03 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:20:03 splunk3 spamd[10040]: spamd: processing message <200904041820.n34IK2bQ011934@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 11:20:06 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 11:20:06 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34748,mid=<200904041820.n34IK2bQ011934@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 11:20:06 splunk3 sendmail[26702]: n34IK3UL026701: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:20:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:20:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:20:19 splunk3 sendmail[26800]: n34IKJbq026800: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:20:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:21:19 splunk3 sendmail[27041]: n34ILJW8027041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:22:19 splunk3 sendmail[27278]: n34IMJFl027278: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:23:19 splunk3 sendmail[27519]: n34INJKs027519: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:24:19 splunk3 sendmail[27755]: n34IOJXe027755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:25:04 splunk3 sendmail[27931]: n34IP4kc027931: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041825.n34IP3ef012540@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:25:04 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34804
|
|
Apr 4 11:25:04 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:25:04 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:25:04 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:25:04 splunk3 spamd[10040]: spamd: processing message <200904041825.n34IP3ef012540@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 11:25:06 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 11:25:06 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34804,mid=<200904041825.n34IP3ef012540@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 11:25:06 splunk3 sendmail[27932]: n34IP4kc027931: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:25:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:25:19 splunk3 sendmail[28015]: n34IPJqk028015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:25:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:26:19 splunk3 sendmail[28253]: n34IQJv9028253: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 11:27:19 splunk3 sendmail[28492]: n34IRJAX028492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:28:19 splunk3 sendmail[28728]: n34ISJZP028728: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:29:19 splunk3 sendmail[28969]: n34ITJf1028969: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:30:04 splunk3 sendmail[29146]: n34IU4LI029146: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041830.n34IU4WT013167@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:30:04 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34860
|
|
Apr 4 11:30:04 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:30:04 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:30:04 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:30:04 splunk3 spamd[10040]: spamd: processing message <200904041830.n34IU4WT013167@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 11:30:06 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 11:30:06 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34860,mid=<200904041830.n34IU4WT013167@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 11:30:06 splunk3 sendmail[29147]: n34IU4LI029146: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:30:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:30:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:30:19 splunk3 sendmail[29230]: n34IUJ6E029230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:30:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:31:19 splunk3 sendmail[29472]: n34IVJKv029472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:32:19 splunk3 sendmail[29706]: n34IWJ9U029706: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:33:19 splunk3 sendmail[29943]: n34IXJWS029943: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:34:19 splunk3 sendmail[30176]: n34IYJwb030176: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:35:05 splunk3 sendmail[30353]: n34IZ5iN030353: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041835.n34IZ4nq013910@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:35:05 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34916
|
|
Apr 4 11:35:05 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:35:05 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:35:05 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:35:05 splunk3 spamd[10040]: spamd: processing message <200904041835.n34IZ4nq013910@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 11:35:07 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 11:35:07 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34916,mid=<200904041835.n34IZ4nq013910@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 11:35:07 splunk3 sendmail[30354]: n34IZ5iN030353: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:35:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:35:17 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:35:19 splunk3 sendmail[30434]: n34IZJbO030434: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:35:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:36:19 splunk3 sendmail[30673]: n34IaJsT030673: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:37:19 splunk3 sendmail[30912]: n34IbJZT030912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:38:19 splunk3 sendmail[31151]: n34IcJvN031151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:39:19 splunk3 sendmail[31389]: n34IdJZY031389: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:40:05 splunk3 sendmail[31568]: n34Ie53e031568: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041840.n34Ie5dd014545@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:40:05 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34971
|
|
Apr 4 11:40:05 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:40:05 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:40:05 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:40:05 splunk3 spamd[10040]: spamd: processing message <200904041840.n34Ie5dd014545@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 11:40:07 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 11:40:07 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34971,mid=<200904041840.n34Ie5dd014545@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 11:40:07 splunk3 sendmail[31569]: n34Ie53e031568: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:40:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:40:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:40:19 splunk3 sendmail[31652]: n34IeJjI031652: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:40:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:41:19 splunk3 sendmail[31893]: n34IfJSb031893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 11:42:19 splunk3 sendmail[32129]: n34IgJJG032129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:43:19 splunk3 sendmail[32370]: n34IhJ2v032370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:44:10 splunk3 sendmail[17778]: n34HiAKm017778: timeout waiting for input from [219.85.85.61] during server cmd read
|
|
Apr 4 11:44:10 splunk3 sendmail[17778]: n34HiAKm017778: lost input channel from [219.85.85.61] to MTA after rcpt
|
|
Apr 4 11:44:10 splunk3 sendmail[17778]: n34HiAKm017778: from=<gigi.wu@gmail.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[219.85.85.61]
|
|
Apr 4 11:44:19 splunk3 sendmail[32604]: n34IiJ1o032604: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:45:06 splunk3 sendmail[314]: n34Ij6nc000314: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041845.n34Ij55q015160@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:45:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35028
|
|
Apr 4 11:45:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:45:06 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:45:06 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:45:06 splunk3 spamd[10040]: spamd: processing message <200904041845.n34Ij55q015160@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 11:45:08 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 11:45:08 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35028,mid=<200904041845.n34Ij55q015160@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 11:45:08 splunk3 sendmail[315]: n34Ij6nc000314: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:45:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:45:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:45:19 splunk3 sendmail[395]: n34IjJeo000395: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:45:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:46:19 splunk3 sendmail[634]: n34IkJXw000634: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:47:19 splunk3 sendmail[873]: n34IlJpH000873: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:48:19 splunk3 sendmail[1107]: n34ImJla001107: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:49:19 splunk3 sendmail[1347]: n34InJrV001347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:50:06 splunk3 sendmail[1527]: n34Io6bt001527: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041850.n34Io62M015775@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:50:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35083
|
|
Apr 4 11:50:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:50:06 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:50:06 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:50:06 splunk3 spamd[10040]: spamd: processing message <200904041850.n34Io62M015775@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 11:50:08 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 4 11:50:08 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35083,mid=<200904041850.n34Io62M015775@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 11:50:08 splunk3 sendmail[1529]: n34Io6bt001527: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:50:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:50:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:50:19 splunk3 sendmail[1608]: n34IoJeM001608: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:50:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:51:19 splunk3 sendmail[1849]: n34IpJoe001849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:52:19 splunk3 sendmail[2085]: n34IqJ44002085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:53:03 splunk3 sendmail[2221]: n34Ir0ot002221: from=<spamman798@cs.com>, size=7120, class=0, nrcpts=1, msgid=<20090405172308.30741.qmail@BHADRAPC004>, bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=[59.95.204.1]
|
|
Apr 4 11:53:03 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35119
|
|
Apr 4 11:53:03 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:53:03 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:53:03 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:53:03 splunk3 spamd[10040]: spamd: processing message <20090405172308.30741.qmail@BHADRAPC004> for spamme:501
|
|
Apr 4 11:53:06 splunk3 spamd[10040]: spamd: identified spam (18.9/5.0) for spamme:501 in 2.4 seconds, 7353 bytes.
|
|
Apr 4 11:53:06 splunk3 spamd[10040]: spamd: result: Y 18 - AWL,BAYES_50,DRUGS_ERECTILE,DRUG_ED_CAPS,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,HTML_TAG_BALANCE_HEAD,HTML_TEXT_AFTER_BODY,MIME_HTML_ONLY,NO_REAL_NAME,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_JP_SURBL,URI_NO_WWW_ANY_CGI scantime=2.4,size=7353,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35119,mid=<20090405172308.30741.qmail@BHADRAPC004>,bayes=0.549408811551194,autolearn=no
|
|
Apr 4 11:53:06 splunk3 sendmail[2245]: n34Ir0ot002221: to=<spamme@splunkit.com>, delay=00:00:05, xdelay=00:00:03, mailer=local, pri=37333, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:53:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:53:19 splunk3 sendmail[2334]: n34IrJBv002334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:54:19 splunk3 sendmail[2570]: n34IsJUv002570: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:55:07 splunk3 sendmail[2760]: n34It7CD002760: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041855.n34It6eR016380@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 11:55:07 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35140
|
|
Apr 4 11:55:07 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 11:55:07 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 11:55:07 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 11:55:07 splunk3 spamd[10040]: spamd: processing message <200904041855.n34It6eR016380@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 11:55:09 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 11:55:09 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35140,mid=<200904041855.n34It6eR016380@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 11:55:09 splunk3 sendmail[2761]: n34It7CD002760: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 11:55:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 11:55:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 11:55:19 splunk3 sendmail[2843]: n34ItJIC002843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:55:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 11:56:19 splunk3 sendmail[3091]: n34IuJps003091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 11:57:19 splunk3 sendmail[3334]: n34IvJ7a003334: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:58:19 splunk3 sendmail[3587]: n34IwJoe003587: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 11:59:19 splunk3 sendmail[3835]: n34IxJoV003835: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:00:04 splunk3 sendmail[4088]: n34J04Tj004088: from=root, size=291, class=0, nrcpts=1, msgid=<200904041900.n34J04Tj004088@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 12:00:04 splunk3 sendmail[4092]: n34J04bp004092: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904041900.n34J04Tj004088@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 12:00:04 splunk3 sendmail[4088]: n34J04Tj004088: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34J04bp004092 Message accepted for delivery)
|
|
Apr 4 12:00:06 splunk3 sendmail[4093]: n34J04bp004092: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:00:07 splunk3 sendmail[4102]: n34J07Du004102: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041900.n34J07AN017015@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:00:07 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35197
|
|
Apr 4 12:00:07 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:00:07 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 12:00:07 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 12:00:07 splunk3 sendmail[4103]: n34J07Du004102: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:00:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:00:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:00:18 splunk3 sendmail[4166]: n34J0IUr004166: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904041900.n34J0IUr004166@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 12:00:18 splunk3 sendmail[4168]: n34J0IUr004166: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 12:00:18 splunk3 sendmail[4168]: n34J0IUr004166: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 4 12:00:18 splunk3 sendmail[4168]: n34J0IUr004166: n34J0IUr004168: postmaster notify: User unknown
|
|
Apr 4 12:00:19 splunk3 sendmail[4168]: n34J0IUr004168: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:00:19 splunk3 sendmail[4201]: n34J0JxC004201: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:00:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:01:15 splunk3 sendmail[4380]: n34J11i0004380: from=root, size=443, class=0, nrcpts=1, msgid=<200904041901.n34J11i0004380@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 12:01:15 splunk3 sendmail[4442]: n34J1FBJ004442: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904041901.n34J11i0004380@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 12:01:15 splunk3 sendmail[4380]: n34J11i0004380: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34J1FBJ004442 Message accepted for delivery)
|
|
Apr 4 12:01:16 splunk3 sendmail[4443]: n34J1FBJ004442: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:01:19 splunk3 sendmail[4468]: n34J1JqJ004468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:02:19 splunk3 sendmail[4702]: n34J2Jmi004702: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:03:19 splunk3 sendmail[4952]: n34J3JgT004952: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:04:19 splunk3 sendmail[5226]: n34J4JKu005226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:05:08 splunk3 sendmail[5405]: n34J57rr005405: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041905.n34J5796017701@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:05:08 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35261
|
|
Apr 4 12:05:08 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:05:08 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 12:05:08 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 12:05:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:05:08 splunk3 sendmail[5406]: n34J57rr005405: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:05:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:05:19 splunk3 sendmail[5485]: n34J5JVJ005485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:05:25 splunk3 sendmail[5488]: n34J5NMl005488: from=<spamme@splunkit.com>, size=2741, class=0, nrcpts=1, msgid=<200904041905.n34J5NMl005488@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=[85.138.220.130]
|
|
Apr 4 12:05:25 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35273
|
|
Apr 4 12:05:25 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:05:25 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 12:05:25 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 12:05:25 splunk3 sendmail[5505]: n34J5NMl005488: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:01, xdelay=00:00:00, mailer=local, pri=33025, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:05:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:06:19 splunk3 sendmail[5727]: n34J6JTN005727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:07:19 splunk3 sendmail[5966]: n34J7Jw1005966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:08:19 splunk3 sendmail[6205]: n34J8Jgb006205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:09:19 splunk3 sendmail[6442]: n34J9JKe006442: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:10:02 splunk3 sendmail[6699]: n34JA23S006699: from=root, size=292, class=0, nrcpts=1, msgid=<200904041910.n34JA23S006699@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 12:10:02 splunk3 sendmail[6704]: n34JA2jb006704: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904041910.n34JA23S006699@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 12:10:02 splunk3 sendmail[6699]: n34JA23S006699: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34JA2jb006704 Message accepted for delivery)
|
|
Apr 4 12:10:03 splunk3 sendmail[6705]: n34JA2jb006704: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:10:08 splunk3 sendmail[6728]: n34JA8a8006728: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041910.n34JA8pf018312@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:10:08 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35318
|
|
Apr 4 12:10:08 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:10:08 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:10:08 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:10:08 splunk3 spamd[10040]: spamd: processing message <200904041910.n34JA8pf018312@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:10:10 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 12:10:10 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35318,mid=<200904041910.n34JA8pf018312@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 12:10:10 splunk3 sendmail[6745]: n34JA8a8006728: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:10:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:10:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:10:19 splunk3 sendmail[6809]: n34JAJiS006809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:10:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:11:19 splunk3 sendmail[7052]: n34JBJQ0007052: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 12:12:19 splunk3 sendmail[7287]: n34JCJCe007287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:13:19 splunk3 sendmail[7528]: n34JDJYO007528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:14:19 splunk3 sendmail[7770]: n34JEJ2l007770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:15:09 splunk3 sendmail[7965]: n34JF9Oc007965: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041915.n34JF8BN019111@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:15:09 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35375
|
|
Apr 4 12:15:09 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:15:09 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:15:09 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:15:09 splunk3 spamd[10040]: spamd: processing message <200904041915.n34JF8BN019111@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:15:11 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 12:15:11 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35375,mid=<200904041915.n34JF8BN019111@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 12:15:11 splunk3 sendmail[7966]: n34JF9Oc007965: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:15:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:15:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:15:19 splunk3 sendmail[8030]: n34JFJ5M008030: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:15:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:16:19 splunk3 sendmail[8267]: n34JGJ0r008267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:17:19 splunk3 sendmail[8506]: n34JHJgo008506: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:18:19 splunk3 sendmail[8737]: n34JIJh8008737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:19:19 splunk3 sendmail[8976]: n34JJJsL008976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:20:09 splunk3 sendmail[9176]: n34JK9JW009176: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041920.n34JK9Au019745@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:20:09 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35431
|
|
Apr 4 12:20:09 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:20:09 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:20:09 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:20:09 splunk3 spamd[10040]: spamd: processing message <200904041920.n34JK9Au019745@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:20:11 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 4 12:20:11 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35431,mid=<200904041920.n34JK9Au019745@virt2.int.splunk.com>,bayes=0.111812465075005,autolearn=no
|
|
Apr 4 12:20:11 splunk3 sendmail[9177]: n34JK9JW009176: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:20:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:20:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:20:19 splunk3 sendmail[9228]: n34JKJI4009228: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:20:35 splunk3 sendmail[9096]: n34JJpJM009096: from=<thanasism@mysiterank.info>, size=5737, class=0, nrcpts=1, msgid=<a11c019dc3d8$7326b29b$e077f225@mysiterank.info>, proto=ESMTP, daemon=MTA, relay=[92.85.74.95]
|
|
Apr 4 12:20:35 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35444
|
|
Apr 4 12:20:35 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:20:35 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:20:35 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:20:35 splunk3 spamd[10040]: spamd: processing message <a11c019dc3d8$7326b29b$e077f225@mysiterank.info> for spamme:501
|
|
Apr 4 12:20:39 splunk3 spamd[10040]: spamd: identified spam (37.6/5.0) for spamme:501 in 4.3 seconds, 6015 bytes.
|
|
Apr 4 12:20:39 splunk3 spamd[10040]: spamd: result: Y 37 - BAYES_99,DATE_IN_FUTURE_96_XX,DNS_FROM_RFC_BOGUSMX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,NO_DNS_FOR_FROM,SUBJECT_EXCESS_BASE64,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=4.3,size=6015,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35444,mid=<a11c019dc3d8$7326b29b$e077f225@mysiterank.info>,bayes=1,autolearn=spam
|
|
Apr 4 12:20:39 splunk3 sendmail[9298]: n34JJpJM009096: to=<spamme@splunkit.com>, delay=00:00:06, xdelay=00:00:04, mailer=local, pri=35912, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:20:39 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:20:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:21:19 splunk3 sendmail[9485]: n34JLJJB009485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:22:15 splunk3 sendmail[9711]: n34JMEoP009711: from=<3ZrPXSRQKBjsdlldibXiboqp-klobmivdlldib.ZljpmXjjbpmirkhfq.Zlj@alerts.bounces.google.com>, size=6737, class=0, nrcpts=1, msgid=<0016e644d6ca2fd9af0466bf95cb@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.191]
|
|
Apr 4 12:22:15 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35459
|
|
Apr 4 12:22:15 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:22:15 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:22:15 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:22:15 splunk3 spamd[10040]: spamd: processing message <0016e644d6ca2fd9af0466bf95cb@google.com> for spamme:501
|
|
Apr 4 12:22:17 splunk3 spamd[10040]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.3 seconds, 7167 bytes.
|
|
Apr 4 12:22:17 splunk3 spamd[10040]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.3,size=7167,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35459,mid=<0016e644d6ca2fd9af0466bf95cb@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Apr 4 12:22:17 splunk3 sendmail[9713]: n34JMEoP009711: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=36948, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:22:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:22:19 splunk3 sendmail[9737]: n34JMJHH009737: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:23:19 splunk3 sendmail[9977]: n34JNJUU009977: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:24:19 splunk3 sendmail[10212]: n34JOJgi010212: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:25:10 splunk3 sendmail[10411]: n34JPA61010411: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041925.n34JP9x6020350@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:25:10 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35488
|
|
Apr 4 12:25:10 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:25:10 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:25:10 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:25:10 splunk3 spamd[10040]: spamd: processing message <200904041925.n34JP9x6020350@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:25:12 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 4 12:25:12 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35488,mid=<200904041925.n34JP9x6020350@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 12:25:12 splunk3 sendmail[10412]: n34JPA61010411: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:25:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:25:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:25:19 splunk3 sendmail[10465]: n34JPJwq010465: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:25:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:26:20 splunk3 sendmail[10711]: n34JQKnX010711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:26:23 splunk3 sendmail[28254]: n34IQKQ9028254: SYSERR(root): collect: read timeout on connection from [114.69.253.26], from=<ibrooks@cyberway.com.sg>
|
|
Apr 4 12:26:23 splunk3 sendmail[28254]: n34IQKQ9028254: from=<ibrooks@cyberway.com.sg>, size=0, class=0, nrcpts=1, proto=ESMTP, daemon=MTA, relay=[114.69.253.26]
|
|
Apr 4 12:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 12:27:20 splunk3 sendmail[10948]: n34JRKxs010948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:28:20 splunk3 sendmail[11184]: n34JSKUB011184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:29:20 splunk3 sendmail[11424]: n34JTKwC011424: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:30:11 splunk3 sendmail[11625]: n34JUBTH011625: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041930.n34JUA7J020967@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:30:11 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35545
|
|
Apr 4 12:30:11 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:30:11 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:30:11 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:30:11 splunk3 spamd[10040]: spamd: processing message <200904041930.n34JUA7J020967@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:30:13 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 12:30:13 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35545,mid=<200904041930.n34JUA7J020967@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 12:30:13 splunk3 sendmail[11626]: n34JUBTH011625: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:30:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:30:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:30:20 splunk3 sendmail[11675]: n34JUKE4011675: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:30:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:31:20 splunk3 sendmail[11927]: n34JVKQf011927: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:32:20 splunk3 sendmail[12162]: n34JWKZo012162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:33:20 splunk3 sendmail[12400]: n34JXKxf012400: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:34:20 splunk3 sendmail[12634]: n34JYK2o012634: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:35:11 splunk3 sendmail[12834]: n34JZBKI012834: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041935.n34JZBl9021717@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:35:11 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35600
|
|
Apr 4 12:35:11 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:35:11 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:35:11 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:35:11 splunk3 spamd[10040]: spamd: processing message <200904041935.n34JZBl9021717@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:35:13 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 4 12:35:13 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35600,mid=<200904041935.n34JZBl9021717@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 12:35:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:35:13 splunk3 sendmail[12835]: n34JZBKI012834: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:35:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:35:20 splunk3 sendmail[12885]: n34JZKBX012885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:35:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:36:20 splunk3 sendmail[13133]: n34JaKFU013133: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:37:20 splunk3 sendmail[13408]: n34JbKeY013408: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:38:20 splunk3 sendmail[13646]: n34JcKEL013646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:39:20 splunk3 sendmail[13884]: n34JdKQ0013884: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:40:12 splunk3 sendmail[14085]: n34JeBju014085: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041940.n34JeBZg022351@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:40:12 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35656
|
|
Apr 4 12:40:12 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:40:12 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:40:12 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:40:12 splunk3 spamd[10040]: spamd: processing message <200904041940.n34JeBZg022351@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:40:14 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 12:40:14 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35656,mid=<200904041940.n34JeBZg022351@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 12:40:14 splunk3 sendmail[14086]: n34JeBju014085: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:40:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:40:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:40:20 splunk3 sendmail[14137]: n34JeK16014137: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:40:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:41:20 splunk3 sendmail[14387]: n34JfKsg014387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 12:42:20 splunk3 sendmail[14623]: n34JgKT5014623: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:43:20 splunk3 sendmail[14863]: n34JhKtR014863: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:44:20 splunk3 sendmail[15096]: n34JiKE5015096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:45:12 splunk3 sendmail[15296]: n34JjCmb015296: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041945.n34JjCCp022964@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:45:12 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35712
|
|
Apr 4 12:45:12 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:45:12 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:45:12 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:45:12 splunk3 spamd[10040]: spamd: processing message <200904041945.n34JjCCp022964@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:45:14 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 12:45:14 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35712,mid=<200904041945.n34JjCCp022964@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 12:45:14 splunk3 sendmail[15297]: n34JjCmb015296: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:45:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:45:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:45:20 splunk3 sendmail[15347]: n34JjKDV015347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:45:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:46:20 splunk3 sendmail[15596]: n34JkKJ8015596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:47:20 splunk3 sendmail[15834]: n34JlKOs015834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:48:20 splunk3 sendmail[16067]: n34JmKGe016067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:49:20 splunk3 sendmail[16307]: n34JnKZU016307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:50:12 splunk3 sendmail[16510]: n34JoCrU016510: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041950.n34JoCbX023613@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:50:12 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35768
|
|
Apr 4 12:50:12 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:50:12 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:50:12 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:50:12 splunk3 spamd[10040]: spamd: processing message <200904041950.n34JoCbX023613@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:50:14 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 4 12:50:14 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35768,mid=<200904041950.n34JoCbX023613@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 12:50:14 splunk3 sendmail[16511]: n34JoCrU016510: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:50:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:50:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:50:20 splunk3 sendmail[16561]: n34JoK8Y016561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:50:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:51:20 splunk3 sendmail[16810]: n34JpKYM016810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:52:20 splunk3 sendmail[17046]: n34JqKh3017046: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:53:20 splunk3 sendmail[17290]: n34JrKsK017290: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:54:20 splunk3 sendmail[17524]: n34JsKoP017524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:55:13 splunk3 sendmail[17745]: n34JtDR7017745: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904041955.n34JtDvc024227@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 12:55:13 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35823
|
|
Apr 4 12:55:13 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 12:55:13 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 12:55:13 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 12:55:13 splunk3 spamd[10040]: spamd: processing message <200904041955.n34JtDvc024227@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 12:55:15 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 12:55:15 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=35823,mid=<200904041955.n34JtDvc024227@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 12:55:15 splunk3 sendmail[17746]: n34JtDR7017745: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 12:55:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 12:55:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 12:55:20 splunk3 sendmail[17774]: n34JtKNc017774: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:55:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 12:56:20 splunk3 sendmail[18020]: n34JuK4T018020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 12:57:20 splunk3 sendmail[18260]: n34JvKrn018260: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:58:20 splunk3 sendmail[18492]: n34JwKjK018492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 12:59:20 splunk3 sendmail[18731]: n34JxK4B018731: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:00:04 splunk3 sendmail[18975]: n34K04oT018975: from=root, size=291, class=0, nrcpts=1, msgid=<200904042000.n34K04oT018975@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 13:00:04 splunk3 sendmail[18979]: n34K04gV018979: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904042000.n34K04oT018975@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 13:00:04 splunk3 sendmail[18975]: n34K04oT018975: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34K04gV018979 Message accepted for delivery)
|
|
Apr 4 13:00:05 splunk3 sendmail[18980]: n34K04gV018979: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:00:14 splunk3 sendmail[19029]: n34K0EpU019029: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042000.n34K0Dp5024867@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:00:14 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35882
|
|
Apr 4 13:00:14 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:00:14 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 13:00:14 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 13:00:14 splunk3 sendmail[19030]: n34K0EpU019029: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:00:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:00:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:00:20 splunk3 sendmail[19055]: n34K0K1a019055: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:00:23 splunk3 sendmail[19085]: n34K0Nhr019085: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904042000.n34K0Nhr019085@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 13:00:23 splunk3 sendmail[19087]: n34K0Nhr019085: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 13:00:23 splunk3 sendmail[19087]: n34K0Nhr019085: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 13:00:23 splunk3 sendmail[19087]: n34K0Nhr019085: n34K0Nhr019087: postmaster notify: User unknown
|
|
Apr 4 13:00:25 splunk3 sendmail[19087]: n34K0Nhr019087: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:00:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:01:03 splunk3 sendmail[19248]: n34K11IP019248: from=root, size=443, class=0, nrcpts=1, msgid=<200904042001.n34K11IP019248@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 13:01:03 splunk3 sendmail[19268]: n34K13W4019268: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904042001.n34K11IP019248@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 13:01:04 splunk3 sendmail[19248]: n34K11IP019248: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:01, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34K13W4019268 Message accepted for delivery)
|
|
Apr 4 13:01:05 splunk3 sendmail[19269]: n34K13W4019268: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:01:20 splunk3 sendmail[19333]: n34K1K1n019333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:02:20 splunk3 sendmail[19566]: n34K2K9s019566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:03:20 splunk3 sendmail[19806]: n34K3K3r019806: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:04:20 splunk3 sendmail[20042]: n34K4K2t020042: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:05:14 splunk3 sendmail[20268]: n34K5EoS020268: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042005.n34K5E9E025554@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:05:14 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 35946
|
|
Apr 4 13:05:14 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:05:14 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 13:05:14 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 13:05:14 splunk3 sendmail[20269]: n34K5EoS020268: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:05:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:05:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:05:20 splunk3 sendmail[20290]: n34K5KIo020290: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:05:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:06:20 splunk3 sendmail[20537]: n34K6KiE020537: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:07:20 splunk3 sendmail[20777]: n34K7KoP020777: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:08:20 splunk3 sendmail[21016]: n34K8KrJ021016: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:09:20 splunk3 sendmail[21254]: n34K9Khc021254: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:10:02 splunk3 sendmail[21512]: n34KA2L6021512: from=root, size=292, class=0, nrcpts=1, msgid=<200904042010.n34KA2L6021512@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 13:10:02 splunk3 sendmail[21517]: n34KA29X021517: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904042010.n34KA2L6021512@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 13:10:02 splunk3 sendmail[21512]: n34KA2L6021512: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34KA29X021517 Message accepted for delivery)
|
|
Apr 4 13:10:03 splunk3 sendmail[21518]: n34KA29X021517: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:10:15 splunk3 sendmail[21589]: n34KAFID021589: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042010.n34KAF6g026165@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:10:15 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36002
|
|
Apr 4 13:10:15 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:10:15 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:10:15 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:10:15 splunk3 spamd[10040]: spamd: processing message <200904042010.n34KAF6g026165@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:10:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:10:17 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 13:10:17 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36002,mid=<200904042010.n34KAF6g026165@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 13:10:17 splunk3 sendmail[21590]: n34KAFID021589: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:10:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:10:20 splunk3 sendmail[21613]: n34KAK0I021613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:10:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:11:20 splunk3 sendmail[21864]: n34KBKj4021864: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 13:12:20 splunk3 sendmail[22100]: n34KCKBh022100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:13:20 splunk3 sendmail[22338]: n34KDK8q022338: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:14:20 splunk3 sendmail[22572]: n34KEK5I022572: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:15:15 splunk3 sendmail[22797]: n34KFFed022797: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042015.n34KFFUl026954@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:15:15 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36059
|
|
Apr 4 13:15:15 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:15:15 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:15:15 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:15:15 splunk3 spamd[10040]: spamd: processing message <200904042015.n34KFFUl026954@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:15:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:15:17 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 13:15:17 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36059,mid=<200904042015.n34KFFUl026954@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 13:15:17 splunk3 sendmail[22798]: n34KFFed022797: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:15:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:15:20 splunk3 sendmail[22822]: n34KFK3D022822: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:15:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:16:20 splunk3 sendmail[23069]: n34KGKti023069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:17:20 splunk3 sendmail[23309]: n34KHKrc023309: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:18:20 splunk3 sendmail[23544]: n34KIKCh023544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:19:20 splunk3 sendmail[23783]: n34KJKk5023783: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:20:16 splunk3 sendmail[24012]: n34KKGlR024012: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042020.n34KKFPu027592@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:20:16 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36114
|
|
Apr 4 13:20:16 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:20:16 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:20:16 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:20:16 splunk3 spamd[10040]: spamd: processing message <200904042020.n34KKFPu027592@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:20:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:20:18 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 13:20:18 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36114,mid=<200904042020.n34KKFPu027592@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 13:20:18 splunk3 sendmail[24013]: n34KKGlR024012: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:20:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:20:20 splunk3 sendmail[24035]: n34KKKht024035: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:20:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:21:20 splunk3 sendmail[24286]: n34KLKa8024286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:22:20 splunk3 sendmail[24522]: n34KMKFo024522: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:23:20 splunk3 sendmail[24764]: n34KNKZP024764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:24:20 splunk3 sendmail[24999]: n34KOKbj024999: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:25:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:25:16 splunk3 sendmail[25226]: n34KPGxi025226: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042025.n34KPGGZ028199@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:25:16 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36170
|
|
Apr 4 13:25:16 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:25:16 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:25:16 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:25:16 splunk3 spamd[10040]: spamd: processing message <200904042025.n34KPGGZ028199@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:25:18 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 13:25:18 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36170,mid=<200904042025.n34KPGGZ028199@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 13:25:18 splunk3 sendmail[25227]: n34KPGxi025226: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:25:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:25:20 splunk3 sendmail[25251]: n34KPKrL025251: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:25:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:26:20 splunk3 sendmail[25496]: n34KQKdY025496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 13:27:20 splunk3 sendmail[25735]: n34KRKtU025735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:28:20 splunk3 sendmail[25969]: n34KSKvE025969: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:29:20 splunk3 sendmail[26206]: n34KTKgU026206: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:30:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:30:17 splunk3 sendmail[26436]: n34KUHjw026436: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042030.n34KUHgQ028813@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:30:17 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36226
|
|
Apr 4 13:30:17 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:30:17 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:30:17 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:30:17 splunk3 spamd[10040]: spamd: processing message <200904042030.n34KUHgQ028813@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:30:19 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 4 13:30:19 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36226,mid=<200904042030.n34KUHgQ028813@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 13:30:19 splunk3 sendmail[26437]: n34KUHjw026436: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:30:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:30:20 splunk3 sendmail[26459]: n34KUK1u026459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:30:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:31:20 splunk3 sendmail[26711]: n34KVKCa026711: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:32:20 splunk3 sendmail[26946]: n34KWKaO026946: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:33:20 splunk3 sendmail[27184]: n34KXKtF027184: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:34:20 splunk3 sendmail[27421]: n34KYKuE027421: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:35:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:35:17 splunk3 sendmail[27664]: n34KZHjv027664: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042035.n34KZH91029563@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:35:17 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36282
|
|
Apr 4 13:35:17 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:35:17 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:35:17 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:35:17 splunk3 spamd[10040]: spamd: processing message <200904042035.n34KZH91029563@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:35:19 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1308 bytes.
|
|
Apr 4 13:35:19 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36282,mid=<200904042035.n34KZH91029563@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 13:35:19 splunk3 sendmail[27665]: n34KZHjv027664: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:35:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:35:20 splunk3 sendmail[27672]: n34KZKxK027672: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:35:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:36:20 splunk3 sendmail[27919]: n34KaKuX027919: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:37:20 splunk3 sendmail[28158]: n34KbKGr028158: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:38:20 splunk3 sendmail[28397]: n34KcKuu028397: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:39:20 splunk3 sendmail[28636]: n34KdKpH028636: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:40:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:40:18 splunk3 sendmail[28882]: n34KeIMC028882: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042040.n34KeIuW030194@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:40:18 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36337
|
|
Apr 4 13:40:18 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:40:18 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:40:18 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:40:18 splunk3 spamd[10040]: spamd: processing message <200904042040.n34KeIuW030194@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:40:20 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 13:40:20 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36337,mid=<200904042040.n34KeIuW030194@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 13:40:20 splunk3 sendmail[28883]: n34KeIMC028882: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:40:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:40:20 splunk3 sendmail[28889]: n34KeKNR028889: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:40:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:41:20 splunk3 sendmail[29140]: n34KfKeM029140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 13:42:20 splunk3 sendmail[29376]: n34KgKHu029376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:43:20 splunk3 sendmail[29615]: n34KhKH5029615: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:44:20 splunk3 sendmail[29849]: n34KiKcv029849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:45:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:45:18 splunk3 sendmail[30093]: n34KjI41030093: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042045.n34KjIRq030809@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:45:18 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36394
|
|
Apr 4 13:45:18 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:45:18 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:45:18 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:45:18 splunk3 spamd[10040]: spamd: processing message <200904042045.n34KjIRq030809@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:45:20 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Apr 4 13:45:20 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36394,mid=<200904042045.n34KjIRq030809@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 13:45:20 splunk3 sendmail[30094]: n34KjI41030093: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:45:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:45:20 splunk3 sendmail[30100]: n34KjKoP030100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:45:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:46:20 splunk3 sendmail[30348]: n34KkKMq030348: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:47:20 splunk3 sendmail[30583]: n34KlKeA030583: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:48:20 splunk3 sendmail[30816]: n34KmK6F030816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:49:20 splunk3 sendmail[31056]: n34KnKi9031056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:50:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:50:20 splunk3 sendmail[31301]: n34KoK3l031301: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042050.n34KoJno031432@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:50:20 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36450
|
|
Apr 4 13:50:20 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:50:20 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:50:20 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:50:20 splunk3 spamd[10040]: spamd: processing message <200904042050.n34KoJno031432@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:50:20 splunk3 sendmail[31308]: n34KoKpp031308: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:50:22 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 13:50:22 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36450,mid=<200904042050.n34KoJno031432@virt2.int.splunk.com>,bayes=0.111840050575971,autolearn=no
|
|
Apr 4 13:50:22 splunk3 sendmail[31303]: n34KoK3l031301: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:50:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:50:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:51:20 splunk3 sendmail[31558]: n34KpKbV031558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:52:06 splunk3 sendmail[31736]: n34Kq6hL031736: from=<3dsjXSRQKBmAEMMEJC8JCPRQ-LMPCNJWEMMEJC.AMKQN8KKCQNJSLIGR.AMK@alerts.bounces.google.com>, size=2535, class=0, nrcpts=1, msgid=<0015175746648e07a90466c0d62d@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.162]
|
|
Apr 4 13:52:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36474
|
|
Apr 4 13:52:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:52:06 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:52:06 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:52:06 splunk3 spamd[10040]: spamd: processing message <0015175746648e07a90466c0d62d@google.com> for spamme:501
|
|
Apr 4 13:52:08 splunk3 spamd[10040]: spamd: clean message (-2.2/5.0) for spamme:501 in 1.4 seconds, 2964 bytes.
|
|
Apr 4 13:52:08 splunk3 spamd[10040]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.4,size=2964,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36474,mid=<0015175746648e07a90466c0d62d@google.com>,bayes=1.66533453693773e-16,autolearn=ham
|
|
Apr 4 13:52:08 splunk3 sendmail[31738]: n34Kq6hL031736: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32745, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:52:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:52:20 splunk3 sendmail[31802]: n34KqKlL031802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:53:20 splunk3 sendmail[32045]: n34KrKKb032045: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:54:20 splunk3 sendmail[32278]: n34KsKBh032278: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:55:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 13:55:20 splunk3 sendmail[32524]: n34KtKJC032524: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042055.n34KtKJp032039@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 13:55:20 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36506
|
|
Apr 4 13:55:20 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 13:55:20 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 13:55:20 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 13:55:20 splunk3 spamd[10040]: spamd: processing message <200904042055.n34KtKJp032039@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 13:55:20 splunk3 sendmail[32529]: n34KtK8Q032529: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:55:22 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 13:55:22 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36506,mid=<200904042055.n34KtKJp032039@virt2.int.splunk.com>,bayes=0.111872085602326,autolearn=no
|
|
Apr 4 13:55:22 splunk3 sendmail[32525]: n34KtKJC032524: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 13:55:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 13:55:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 13:56:20 splunk3 sendmail[310]: n34KuKOK000310: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 13:57:20 splunk3 sendmail[549]: n34KvKta000549: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:58:20 splunk3 sendmail[785]: n34KwK3f000785: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 13:59:20 splunk3 sendmail[1024]: n34KxKKY001024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:00:04 splunk3 sendmail[1265]: n34L04qP001265: from=root, size=291, class=0, nrcpts=1, msgid=<200904042100.n34L04qP001265@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 14:00:04 splunk3 sendmail[1269]: n34L04RP001269: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904042100.n34L04qP001265@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 14:00:04 splunk3 sendmail[1265]: n34L04qP001265: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34L04RP001269 Message accepted for delivery)
|
|
Apr 4 14:00:05 splunk3 sendmail[1270]: n34L04RP001269: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:00:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:00:20 splunk3 sendmail[1340]: n34L0Kms001340: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:00:21 splunk3 sendmail[1341]: n34L0L2x001341: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042100.n34L0K8X032681@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:00:21 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36563
|
|
Apr 4 14:00:21 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:00:21 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 14:00:21 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 14:00:21 splunk3 sendmail[1342]: n34L0L2x001341: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:00:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:00:29 splunk3 sendmail[1393]: n34L0TiJ001393: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904042100.n34L0TiJ001393@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 14:00:29 splunk3 sendmail[1395]: n34L0TiJ001393: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 14:00:29 splunk3 sendmail[1395]: n34L0TiJ001393: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 4 14:00:29 splunk3 sendmail[1395]: n34L0TiJ001393: n34L0TiJ001395: postmaster notify: User unknown
|
|
Apr 4 14:00:30 splunk3 sendmail[1395]: n34L0TiJ001395: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:00:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:01:04 splunk3 sendmail[1536]: n34L11k3001536: from=root, size=443, class=0, nrcpts=1, msgid=<200904042101.n34L11k3001536@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 14:01:04 splunk3 sendmail[1558]: n34L14jo001558: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904042101.n34L11k3001536@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 14:01:04 splunk3 sendmail[1536]: n34L11k3001536: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34L14jo001558 Message accepted for delivery)
|
|
Apr 4 14:01:06 splunk3 sendmail[1559]: n34L14jo001558: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:01:20 splunk3 sendmail[1623]: n34L1KsH001623: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:02:20 splunk3 sendmail[1857]: n34L2KqN001857: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:03:20 splunk3 sendmail[2098]: n34L3Kt9002098: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:04:20 splunk3 sendmail[2333]: n34L4KKV002333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:05:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:05:20 splunk3 sendmail[2581]: n34L5KAJ002581: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:05:21 splunk3 sendmail[2582]: n34L5Lw6002582: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904042105.n34L5L8B000891@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:05:21 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36626
|
|
Apr 4 14:05:21 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:05:21 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 14:05:21 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 14:05:21 splunk3 sendmail[2583]: n34L5Lw6002582: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:05:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:05:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:06:20 splunk3 sendmail[2848]: n34L6KxT002848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:07:20 splunk3 sendmail[3100]: n34L7KmV003100: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:07:33 splunk3 sendmail[2988]: n34L6u0C002988: from=<shirint@tdnam.com>, size=5679, class=0, nrcpts=1, msgid=<7762019dc044$46a92286$3c249a45@tdnam.com>, proto=ESMTP, daemon=MTA, relay=200-204-183-67.dsl.telesp.net.br [200.204.183.67]
|
|
Apr 4 14:07:33 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36656
|
|
Apr 4 14:07:33 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:07:33 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 14:07:33 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 14:07:33 splunk3 sendmail[3154]: n34L6u0C002988: to=<spamme@splunkit.com>, delay=00:00:09, xdelay=00:00:00, mailer=local, pri=35913, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:07:33 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:08:20 splunk3 sendmail[3343]: n34L8KML003343: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:09:20 splunk3 sendmail[3601]: n34L9KQE003601: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:10:03 splunk3 sendmail[3896]: n34LA3DD003896: from=root, size=292, class=0, nrcpts=1, msgid=<200904042110.n34LA3DD003896@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 14:10:03 splunk3 sendmail[3901]: n34LA3ed003901: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904042110.n34LA3DD003896@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 14:10:03 splunk3 sendmail[3896]: n34LA3DD003896: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34LA3ed003901 Message accepted for delivery)
|
|
Apr 4 14:10:04 splunk3 sendmail[3902]: n34LA3ed003901: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:10:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:10:20 splunk3 sendmail[3975]: n34LAKqN003975: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:10:22 splunk3 sendmail[3993]: n34LAMU1003993: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042110.n34LAL9h001527@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:10:22 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36692
|
|
Apr 4 14:10:22 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:10:22 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:10:22 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:10:22 splunk3 spamd[10040]: spamd: processing message <200904042110.n34LAL9h001527@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:10:24 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 14:10:24 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36692,mid=<200904042110.n34LAL9h001527@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:10:24 splunk3 sendmail[3998]: n34LAMU1003993: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:10:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:10:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:11:20 splunk3 sendmail[4239]: n34LBKIM004239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 14:12:20 splunk3 sendmail[4487]: n34LCKTs004487: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:13:20 splunk3 sendmail[4727]: n34LDKDN004727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:14:20 splunk3 sendmail[4974]: n34LEKpa004974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:15:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:15:20 splunk3 sendmail[5261]: n34LFKaN005261: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:15:22 splunk3 sendmail[5278]: n34LFMAw005278: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042115.n34LFMY4002326@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:15:22 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36748
|
|
Apr 4 14:15:22 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:15:22 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:15:22 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:15:22 splunk3 spamd[10040]: spamd: processing message <200904042115.n34LFMY4002326@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:15:25 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 14:15:25 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36748,mid=<200904042115.n34LFMY4002326@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:15:25 splunk3 sendmail[5281]: n34LFMAw005278: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:15:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:15:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:16:20 splunk3 sendmail[5510]: n34LGKAm005510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:17:20 splunk3 sendmail[5747]: n34LHKin005747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:18:20 splunk3 sendmail[5980]: n34LIKZI005980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:19:20 splunk3 sendmail[6218]: n34LJKqG006218: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:20:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:20:21 splunk3 sendmail[6474]: n34LKLYN006474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:20:23 splunk3 sendmail[6492]: n34LKNfj006492: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042120.n34LKNE4002963@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:20:23 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36804
|
|
Apr 4 14:20:23 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:20:23 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:20:23 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:20:23 splunk3 spamd[10040]: spamd: processing message <200904042120.n34LKNE4002963@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:20:25 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 4 14:20:25 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36804,mid=<200904042120.n34LKNE4002963@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:20:25 splunk3 sendmail[6493]: n34LKNfj006492: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:20:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:20:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:21:21 splunk3 sendmail[6723]: n34LLLJf006723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:22:21 splunk3 sendmail[6957]: n34LMLNH006957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:23:21 splunk3 sendmail[7200]: n34LNLii007200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:24:21 splunk3 sendmail[7435]: n34LOLnq007435: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:25:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:25:21 splunk3 sendmail[7698]: n34LPLsx007698: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:25:24 splunk3 sendmail[7717]: n34LPOd1007717: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042125.n34LPNvv003569@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:25:24 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36860
|
|
Apr 4 14:25:24 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:25:24 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:25:24 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:25:24 splunk3 spamd[10040]: spamd: processing message <200904042125.n34LPNvv003569@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:25:26 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 14:25:26 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36860,mid=<200904042125.n34LPNvv003569@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:25:26 splunk3 sendmail[7718]: n34LPOd1007717: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:25:39 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:26:21 splunk3 sendmail[7942]: n34LQLgF007942: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 14:27:21 splunk3 sendmail[8181]: n34LRLa0008181: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:28:21 splunk3 sendmail[8419]: n34LSLjP008419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:29:21 splunk3 sendmail[8656]: n34LTLcQ008656: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:30:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:30:21 splunk3 sendmail[8912]: n34LULY6008912: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:30:25 splunk3 sendmail[8930]: n34LUPis008930: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042130.n34LUO0O004194@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:30:25 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36916
|
|
Apr 4 14:30:25 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:30:25 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:30:25 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:30:25 splunk3 spamd[10040]: spamd: processing message <200904042130.n34LUO0O004194@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:30:27 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1305 bytes.
|
|
Apr 4 14:30:27 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36916,mid=<200904042130.n34LUO0O004194@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:30:27 splunk3 sendmail[8931]: n34LUPis008930: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:30:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:30:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:31:21 splunk3 sendmail[9161]: n34LVLOV009161: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:32:21 splunk3 sendmail[9394]: n34LWLMc009394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:33:21 splunk3 sendmail[9643]: n34LXL7F009643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:34:21 splunk3 sendmail[9876]: n34LYLoj009876: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:35:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:35:21 splunk3 sendmail[10132]: n34LZLn9010132: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:35:26 splunk3 sendmail[10151]: n34LZQxc010151: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042135.n34LZPOR004946@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:35:26 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 36972
|
|
Apr 4 14:35:26 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:35:26 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:35:26 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:35:26 splunk3 spamd[10040]: spamd: processing message <200904042135.n34LZPOR004946@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:35:28 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 14:35:28 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=36972,mid=<200904042135.n34LZPOR004946@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:35:28 splunk3 sendmail[10152]: n34LZQxc010151: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:35:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:35:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:36:21 splunk3 sendmail[10376]: n34LaL6d010376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:37:21 splunk3 sendmail[10616]: n34LbL7V010616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:38:21 splunk3 sendmail[10854]: n34LcLFO010854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:39:21 splunk3 sendmail[11092]: n34LdL5s011092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:40:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:40:21 splunk3 sendmail[11349]: n34LeLix011349: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:40:27 splunk3 sendmail[11385]: n34LeQbe011385: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042140.n34LeQ73005580@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:40:27 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37027
|
|
Apr 4 14:40:27 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:40:27 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:40:27 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:40:27 splunk3 spamd[10040]: spamd: processing message <200904042140.n34LeQ73005580@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:40:29 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 4 14:40:29 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37027,mid=<200904042140.n34LeQ73005580@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:40:29 splunk3 sendmail[11386]: n34LeQbe011385: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:40:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:40:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:41:21 splunk3 sendmail[11597]: n34LfLGq011597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 14:42:21 splunk3 sendmail[11832]: n34LgLtl011832: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:43:21 splunk3 sendmail[12071]: n34LhLMT012071: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:44:21 splunk3 sendmail[12306]: n34LiLqB012306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:45:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:45:21 splunk3 sendmail[12561]: n34LjLm3012561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:45:27 splunk3 sendmail[12596]: n34LjRgi012596: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042145.n34LjRq5006206@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:45:27 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37084
|
|
Apr 4 14:45:27 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:45:27 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:45:27 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:45:27 splunk3 spamd[10040]: spamd: processing message <200904042145.n34LjRq5006206@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:45:29 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 4 14:45:29 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37084,mid=<200904042145.n34LjRq5006206@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:45:29 splunk3 sendmail[12597]: n34LjRgi012596: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:45:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:46:21 splunk3 sendmail[12805]: n34LkLXu012805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:47:21 splunk3 sendmail[13043]: n34LlLrb013043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:48:21 splunk3 sendmail[13291]: n34LmL61013291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:49:21 splunk3 sendmail[13553]: n34LnLIe013553: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:50:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:50:21 splunk3 sendmail[13808]: n34LoLTL013808: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:50:28 splunk3 sendmail[13845]: n34LoRkq013845: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042150.n34LoRZp006806@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:50:28 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37139
|
|
Apr 4 14:50:28 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:50:28 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:50:28 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:50:28 splunk3 spamd[10040]: spamd: processing message <200904042150.n34LoRZp006806@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:50:30 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 14:50:30 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37139,mid=<200904042150.n34LoRZp006806@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:50:30 splunk3 sendmail[13846]: n34LoRkq013845: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:50:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:50:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:51:21 splunk3 sendmail[14056]: n34LpLhY014056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:52:21 splunk3 sendmail[14291]: n34LqLvT014291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:53:21 splunk3 sendmail[14531]: n34LrLMq014531: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:54:21 splunk3 sendmail[14765]: n34LsLSx014765: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:55:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 14:55:21 splunk3 sendmail[15020]: n34LtLLl015020: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:55:28 splunk3 sendmail[15056]: n34LtSux015056: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042155.n34LtS3p007437@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 14:55:28 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37195
|
|
Apr 4 14:55:28 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 14:55:28 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 14:55:28 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 14:55:28 splunk3 spamd[10040]: spamd: processing message <200904042155.n34LtS3p007437@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 14:55:30 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 14:55:30 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37195,mid=<200904042155.n34LtS3p007437@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 14:55:30 splunk3 sendmail[15057]: n34LtSux015056: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 14:55:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 14:55:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 14:56:21 splunk3 sendmail[15262]: n34LuLxj015262: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 14:57:21 splunk3 sendmail[15502]: n34LvLkI015502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:58:21 splunk3 sendmail[15738]: n34LwL5T015738: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 14:59:21 splunk3 sendmail[15978]: n34LxLqq015978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:00:04 splunk3 sendmail[16224]: n34M04Mu016224: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904042200.n34M04Mu016224@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 15:00:04 splunk3 sendmail[16226]: n34M04Mu016224: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 15:00:04 splunk3 sendmail[16226]: n34M04Mu016224: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 15:00:04 splunk3 sendmail[16226]: n34M04Mu016224: n34M04Mu016226: postmaster notify: User unknown
|
|
Apr 4 15:00:05 splunk3 sendmail[16243]: n34M05Qn016243: from=root, size=291, class=0, nrcpts=1, msgid=<200904042200.n34M05Qn016243@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 15:00:05 splunk3 sendmail[16247]: n34M05eU016247: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904042200.n34M05Qn016243@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 15:00:05 splunk3 sendmail[16243]: n34M05Qn016243: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34M05eU016247 Message accepted for delivery)
|
|
Apr 4 15:00:06 splunk3 sendmail[16226]: n34M04Mu016226: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:00:14 splunk3 sendmail[16248]: n34M05eU016247: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:09, xdelay=00:00:09, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:00:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:00:21 splunk3 sendmail[16317]: n34M0LcN016317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:00:28 splunk3 sendmail[16355]: n34M0STZ016355: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042200.n34M0Sb3008049@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:00:28 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37259
|
|
Apr 4 15:00:28 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:00:29 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 15:00:29 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 15:00:29 splunk3 sendmail[16356]: n34M0STZ016355: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:00:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:00:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:01:04 splunk3 sendmail[16488]: n34M11QU016488: from=root, size=443, class=0, nrcpts=1, msgid=<200904042201.n34M11QU016488@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 15:01:04 splunk3 sendmail[16508]: n34M14Xr016508: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904042201.n34M11QU016488@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 15:01:04 splunk3 sendmail[16488]: n34M11QU016488: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34M14Xr016508 Message accepted for delivery)
|
|
Apr 4 15:01:05 splunk3 sendmail[16509]: n34M14Xr016508: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:01:21 splunk3 sendmail[16577]: n34M1Lrl016577: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:02:21 splunk3 sendmail[16813]: n34M2LLL016813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:03:21 splunk3 sendmail[17051]: n34M3LIr017051: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:04:21 splunk3 sendmail[17287]: n34M4LVR017287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:05:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:05:21 splunk3 sendmail[17541]: n34M5LcD017541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:05:29 splunk3 sendmail[17578]: n34M5TEe017578: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042205.n34M5TT2008757@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:05:29 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37316
|
|
Apr 4 15:05:29 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:05:29 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 15:05:29 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 15:05:29 splunk3 sendmail[17579]: n34M5TEe017578: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:05:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:05:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:06:21 splunk3 sendmail[17784]: n34M6Ldn017784: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:07:21 splunk3 sendmail[18022]: n34M7LGG018022: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:07:36 splunk3 sendmail[18078]: n34M7Yma018078: from=<odknight1986@7-fjell.net>, size=5477, class=0, nrcpts=1, msgid=<200904042207.n34M7Yma018078@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=pool-173-65-42-107.tampfl.fios.verizon.net [173.65.42.107]
|
|
Apr 4 15:07:36 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37337
|
|
Apr 4 15:07:36 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:07:36 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 15:07:36 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 15:07:36 splunk3 sendmail[18079]: n34M7Yma018078: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=35835, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:07:36 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:08:21 splunk3 sendmail[18263]: n34M8LMX018263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:09:21 splunk3 sendmail[18505]: n34M9LoC018505: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:10:02 splunk3 sendmail[18769]: n34MA2rx018769: from=root, size=292, class=0, nrcpts=1, msgid=<200904042210.n34MA2rx018769@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 15:10:02 splunk3 sendmail[18774]: n34MA2S5018774: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904042210.n34MA2rx018769@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 15:10:02 splunk3 sendmail[18769]: n34MA2rx018769: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34MA2S5018774 Message accepted for delivery)
|
|
Apr 4 15:10:03 splunk3 sendmail[18775]: n34MA2S5018774: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:10:16 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:10:21 splunk3 sendmail[18877]: n34MALER018877: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:10:30 splunk3 sendmail[18899]: n34MATsj018899: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904042210.n34MATar009358@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:10:30 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37374
|
|
Apr 4 15:10:30 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:10:30 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:10:30 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:10:30 splunk3 spamd[10040]: spamd: processing message <200904042210.n34MATar009358@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:10:32 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 4 15:10:32 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37374,mid=<200904042210.n34MATar009358@virt2.int.splunk.com>,bayes=0.168740127309276,autolearn=no
|
|
Apr 4 15:10:32 splunk3 sendmail[18900]: n34MATsj018899: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:10:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:10:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:11:21 splunk3 sendmail[19124]: n34MBLhI019124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 15:12:21 splunk3 sendmail[19361]: n34MCLlB019361: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:13:21 splunk3 sendmail[19606]: n34MDLOB019606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:14:21 splunk3 sendmail[19840]: n34MELQd019840: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:15:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:15:21 splunk3 sendmail[20093]: n34MFLA4020093: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:15:30 splunk3 sendmail[20117]: n34MFUd2020117: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042215.n34MFUCj010168@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:15:30 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37430
|
|
Apr 4 15:15:30 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:15:30 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:15:30 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:15:30 splunk3 spamd[10040]: spamd: processing message <200904042215.n34MFUCj010168@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:15:32 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 15:15:32 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37430,mid=<200904042215.n34MFUCj010168@virt2.int.splunk.com>,bayes=0.111872085602326,autolearn=no
|
|
Apr 4 15:15:32 splunk3 sendmail[20118]: n34MFUd2020117: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:15:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:15:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:16:21 splunk3 sendmail[20339]: n34MGLmR020339: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:17:21 splunk3 sendmail[20577]: n34MHLqt020577: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:18:21 splunk3 sendmail[20810]: n34MILcl020810: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:19:21 splunk3 sendmail[21050]: n34MJLKb021050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:20:01 splunk3 sendmail[21204]: n34MK1iG021204: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042220.n34MK0Rj010682@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:20:01 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37473
|
|
Apr 4 15:20:01 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:20:01 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:20:01 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:20:01 splunk3 spamd[10040]: spamd: processing message <200904042220.n34MK0Rj010682@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:20:03 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 15:20:03 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37473,mid=<200904042220.n34MK0Rj010682@virt2.int.splunk.com>,bayes=0.111872085602326,autolearn=no
|
|
Apr 4 15:20:03 splunk3 sendmail[21205]: n34MK1iG021204: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:20:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:20:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:20:21 splunk3 sendmail[21312]: n34MKLVd021312: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:20:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:21:21 splunk3 sendmail[21554]: n34MLLTP021554: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:22:21 splunk3 sendmail[21787]: n34MMLOk021787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:23:21 splunk3 sendmail[22029]: n34MNLA2022029: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:24:21 splunk3 sendmail[22262]: n34MOLiq022262: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:25:01 splunk3 sendmail[22419]: n34MP1wd022419: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042225.n34MP1EQ011353@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:25:01 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37528
|
|
Apr 4 15:25:01 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:25:01 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:25:01 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:25:01 splunk3 spamd[10040]: spamd: processing message <200904042225.n34MP1EQ011353@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:25:03 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1308 bytes.
|
|
Apr 4 15:25:03 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37528,mid=<200904042225.n34MP1EQ011353@virt2.int.splunk.com>,bayes=0.111872085602326,autolearn=no
|
|
Apr 4 15:25:03 splunk3 sendmail[22421]: n34MP1wd022419: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:25:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:25:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:25:21 splunk3 sendmail[22521]: n34MPLng022521: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:25:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:26:21 splunk3 sendmail[22760]: n34MQL6D022760: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 15:27:21 splunk3 sendmail[22998]: n34MRLHW022998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:28:21 splunk3 sendmail[23232]: n34MSL71023232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:29:21 splunk3 sendmail[23469]: n34MTLiR023469: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:29:58 splunk3 sendmail[23587]: n34MTtI5023587: from=<spamme@splunkit.com>, size=2726, class=0, nrcpts=1, msgid=<200904042229.n34MTtI5023587@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=[124.153.174.67]
|
|
Apr 4 15:29:58 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37584
|
|
Apr 4 15:29:58 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:29:58 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:29:58 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:29:58 splunk3 spamd[10040]: spamd: processing message <200904042229.n34MTtI5023587@splunk3.splunkit.com> for spamme:501
|
|
Apr 4 15:30:00 splunk3 spamd[10040]: spamd: identified spam (32.1/5.0) for spamme:501 in 2.8 seconds, 3093 bytes.
|
|
Apr 4 15:30:00 splunk3 spamd[10040]: spamd: result: Y 32 - AWL,BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=2.8,size=3093,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37584,mid=<200904042229.n34MTtI5023587@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 4 15:30:00 splunk3 sendmail[23607]: n34MTtI5023587: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:04, xdelay=00:00:02, mailer=local, pri=33015, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:30:00 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:30:02 splunk3 sendmail[23635]: n34MU2ko023635: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042230.n34MU1uF011969@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:30:02 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37586
|
|
Apr 4 15:30:02 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:30:02 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:30:02 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:30:02 splunk3 spamd[10040]: spamd: processing message <200904042230.n34MU1uF011969@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:30:04 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 15:30:04 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37586,mid=<200904042230.n34MU1uF011969@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 15:30:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:30:04 splunk3 sendmail[23636]: n34MU2ko023635: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:30:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:30:21 splunk3 sendmail[23738]: n34MUL0h023738: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:30:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:31:21 splunk3 sendmail[23979]: n34MVLqX023979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:32:21 splunk3 sendmail[24213]: n34MWLtG024213: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:33:21 splunk3 sendmail[24453]: n34MXLam024453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:34:21 splunk3 sendmail[24689]: n34MYLKc024689: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:35:02 splunk3 sendmail[24847]: n34MZ29h024847: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042235.n34MZ2Io012717@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:35:02 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37642
|
|
Apr 4 15:35:02 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:35:02 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:35:02 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:35:02 splunk3 spamd[10040]: spamd: processing message <200904042235.n34MZ2Io012717@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:35:04 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 15:35:04 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37642,mid=<200904042235.n34MZ2Io012717@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 15:35:04 splunk3 sendmail[24848]: n34MZ29h024847: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:35:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:35:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:35:21 splunk3 sendmail[24949]: n34MZLHP024949: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:35:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:36:21 splunk3 sendmail[25185]: n34MaLnm025185: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:37:21 splunk3 sendmail[25426]: n34MbLgk025426: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:38:21 splunk3 sendmail[25663]: n34McLfa025663: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:39:21 splunk3 sendmail[25903]: n34MdLGS025903: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:40:03 splunk3 sendmail[26063]: n34Me3qo026063: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042240.n34Me2Nf013351@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:40:03 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37697
|
|
Apr 4 15:40:03 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:40:03 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:40:03 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:40:03 splunk3 spamd[10040]: spamd: processing message <200904042240.n34Me2Nf013351@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:40:05 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 15:40:05 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37697,mid=<200904042240.n34Me2Nf013351@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 15:40:05 splunk3 sendmail[26064]: n34Me3qo026063: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:40:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:40:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:40:21 splunk3 sendmail[26167]: n34MeL6U026167: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:40:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:41:21 splunk3 sendmail[26408]: n34MfLol026408: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 15:42:21 splunk3 sendmail[26643]: n34MgLVb026643: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:43:21 splunk3 sendmail[26880]: n34MhLV9026880: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:44:21 splunk3 sendmail[27115]: n34MiLBO027115: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:45:03 splunk3 sendmail[27273]: n34Mj3Fr027273: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042245.n34Mj32w013967@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:45:03 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37754
|
|
Apr 4 15:45:03 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:45:03 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:45:03 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:45:03 splunk3 spamd[10040]: spamd: processing message <200904042245.n34Mj32w013967@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:45:05 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.3 seconds, 1308 bytes.
|
|
Apr 4 15:45:05 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.3,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37754,mid=<200904042245.n34Mj32w013967@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 15:45:05 splunk3 sendmail[27274]: n34Mj3Fr027273: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:45:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:45:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:45:21 splunk3 sendmail[27374]: n34MjL2m027374: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:45:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:46:21 splunk3 sendmail[27612]: n34MkLQg027612: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:47:21 splunk3 sendmail[27852]: n34MlLQV027852: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:48:21 splunk3 sendmail[28087]: n34MmLwh028087: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:49:21 splunk3 sendmail[28327]: n34MnLBY028327: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:50:04 splunk3 sendmail[28488]: n34Mo4PB028488: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042250.n34Mo4ZU014584@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:50:04 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37809
|
|
Apr 4 15:50:04 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:50:04 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:50:04 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:50:04 splunk3 spamd[10040]: spamd: processing message <200904042250.n34Mo4ZU014584@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:50:06 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1308 bytes.
|
|
Apr 4 15:50:06 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37809,mid=<200904042250.n34Mo4ZU014584@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 15:50:06 splunk3 sendmail[28489]: n34Mo4PB028488: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:50:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:50:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:50:21 splunk3 sendmail[28588]: n34MoLYH028588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:50:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:51:21 splunk3 sendmail[28829]: n34MpL3e028829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:52:21 splunk3 sendmail[29064]: n34MqLSZ029064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:53:21 splunk3 sendmail[29306]: n34MrLfI029306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:54:21 splunk3 sendmail[29542]: n34MsLXx029542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:55:04 splunk3 sendmail[29702]: n34Mt4WW029702: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042255.n34Mt4ZT015191@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 15:55:04 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37865
|
|
Apr 4 15:55:04 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 15:55:04 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 15:55:04 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 15:55:04 splunk3 spamd[10040]: spamd: processing message <200904042255.n34Mt4ZT015191@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 15:55:06 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 4 15:55:06 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37865,mid=<200904042255.n34Mt4ZT015191@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 15:55:06 splunk3 sendmail[29703]: n34Mt4WW029702: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 15:55:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 15:55:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 15:55:21 splunk3 sendmail[29802]: n34MtLE1029802: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:55:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 15:56:21 splunk3 sendmail[30039]: n34MuLYg030039: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 15:57:21 splunk3 sendmail[30278]: n34MvLP5030278: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:58:21 splunk3 sendmail[30513]: n34MwLt9030513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 15:59:21 splunk3 sendmail[30750]: n34MxLvM030750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:00:04 splunk3 sendmail[30972]: n34N04VW030972: from=root, size=291, class=0, nrcpts=1, msgid=<200904042300.n34N04VW030972@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 16:00:04 splunk3 sendmail[30976]: n34N04VZ030976: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904042300.n34N04VW030972@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 16:00:04 splunk3 sendmail[30972]: n34N04VW030972: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34N04VZ030976 Message accepted for delivery)
|
|
Apr 4 16:00:05 splunk3 sendmail[30981]: n34N054q030981: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042300.n34N045P015831@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:00:05 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37922
|
|
Apr 4 16:00:05 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:00:05 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 16:00:05 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 16:00:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:00:05 splunk3 sendmail[30982]: n34N054q030981: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:00:05 splunk3 sendmail[30977]: n34N04VZ030976: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:00:10 splunk3 sendmail[31016]: n34N0AEl031016: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904042300.n34N0AEl031016@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 16:00:10 splunk3 sendmail[31022]: n34N0AEl031016: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 16:00:10 splunk3 sendmail[31022]: n34N0AEl031016: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 16:00:10 splunk3 sendmail[31022]: n34N0AEl031016: n34N0AEl031022: postmaster notify: User unknown
|
|
Apr 4 16:00:11 splunk3 sendmail[31022]: n34N0AEl031022: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:00:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:00:21 splunk3 sendmail[31095]: n34N0L7G031095: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:00:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:01:15 splunk3 sendmail[31261]: n34N114I031261: from=root, size=443, class=0, nrcpts=1, msgid=<200904042301.n34N114I031261@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 16:01:15 splunk3 sendmail[31311]: n34N1FXU031311: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904042301.n34N114I031261@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 16:01:15 splunk3 sendmail[31261]: n34N114I031261: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34N1FXU031311 Message accepted for delivery)
|
|
Apr 4 16:01:16 splunk3 sendmail[31312]: n34N1FXU031311: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:01:21 splunk3 sendmail[31352]: n34N1LgF031352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:02:21 splunk3 sendmail[31587]: n34N2LNi031587: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:03:21 splunk3 sendmail[31825]: n34N3LQL031825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:04:21 splunk3 sendmail[32061]: n34N4Lmj032061: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:05:06 splunk3 sendmail[32237]: n34N55EV032237: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042305.n34N55Hu016516@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:05:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 37986
|
|
Apr 4 16:05:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:05:06 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 16:05:06 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 16:05:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:05:06 splunk3 sendmail[32238]: n34N55EV032237: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:05:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:05:21 splunk3 sendmail[32320]: n34N5Lho032320: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:05:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:06:21 splunk3 sendmail[32557]: n34N6LJs032557: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:07:21 splunk3 sendmail[329]: n34N7LBl000329: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:08:21 splunk3 sendmail[568]: n34N8Lja000568: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:09:21 splunk3 sendmail[807]: n34N9L8Z000807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:10:02 splunk3 sendmail[1061]: n34NA2Ea001061: from=root, size=292, class=0, nrcpts=1, msgid=<200904042310.n34NA2Ea001061@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 16:10:02 splunk3 sendmail[1066]: n34NA2cT001066: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904042310.n34NA2Ea001061@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 16:10:02 splunk3 sendmail[1061]: n34NA2Ea001061: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n34NA2cT001066 Message accepted for delivery)
|
|
Apr 4 16:10:03 splunk3 sendmail[1067]: n34NA2cT001066: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:10:06 splunk3 sendmail[1091]: n34NA6C7001091: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042310.n34NA6iV017128@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:10:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38042
|
|
Apr 4 16:10:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:10:06 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:10:06 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:10:06 splunk3 spamd[10040]: spamd: processing message <200904042310.n34NA6iV017128@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:10:08 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 16:10:08 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38042,mid=<200904042310.n34NA6iV017128@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 16:10:08 splunk3 sendmail[1092]: n34NA6C7001091: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:10:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:10:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:10:21 splunk3 sendmail[1175]: n34NALrA001175: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:10:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:11:21 splunk3 sendmail[1416]: n34NBLZu001416: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 16:12:21 splunk3 sendmail[1650]: n34NCLNA001650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:13:21 splunk3 sendmail[1888]: n34NDLRR001888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:14:21 splunk3 sendmail[2123]: n34NELda002123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:15:07 splunk3 sendmail[2302]: n34NF7bc002302: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042315.n34NF61v017913@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:15:07 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38099
|
|
Apr 4 16:15:07 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:15:07 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:15:07 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:15:07 splunk3 spamd[10040]: spamd: processing message <200904042315.n34NF61v017913@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:15:09 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.8 seconds, 1308 bytes.
|
|
Apr 4 16:15:09 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38099,mid=<200904042315.n34NF61v017913@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 16:15:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:15:09 splunk3 sendmail[2303]: n34NF7bc002302: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:15:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:15:21 splunk3 sendmail[2385]: n34NFLsb002385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:15:30 splunk3 sendmail[2407]: n34NFUDZ002407: from=<3EerXSRQKBh09HH9E73E7KML-GHK7IER9HH9E7.5HFLI3FF7LIENGDBM.5HF@alerts.bounces.google.com>, size=9896, class=0, nrcpts=1, msgid=<0014853493405db5b50466c2d759@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.165]
|
|
Apr 4 16:15:30 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38112
|
|
Apr 4 16:15:30 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:15:30 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:15:30 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:15:30 splunk3 spamd[10040]: spamd: processing message <0014853493405db5b50466c2d759@google.com> for spamme:501
|
|
Apr 4 16:15:34 splunk3 spamd[10040]: spamd: clean message (-1.1/5.0) for spamme:501 in 3.6 seconds, 10325 bytes.
|
|
Apr 4 16:15:34 splunk3 spamd[10040]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=3.6,size=10325,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38112,mid=<0014853493405db5b50466c2d759@google.com>,bayes=0,autolearn=no
|
|
Apr 4 16:15:34 splunk3 sendmail[2424]: n34NFUDZ002407: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=40106, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:15:34 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:15:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:16:21 splunk3 sendmail[2634]: n34NGLAA002634: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:17:21 splunk3 sendmail[2885]: n34NHLsU002885: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:18:21 splunk3 sendmail[3129]: n34NILY9003129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:19:21 splunk3 sendmail[3371]: n34NJLL8003371: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:20:07 splunk3 sendmail[3555]: n34NK7nd003555: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042320.n34NK7jm018543@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:20:07 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38156
|
|
Apr 4 16:20:07 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:20:07 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:20:07 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:20:07 splunk3 spamd[10040]: spamd: processing message <200904042320.n34NK7jm018543@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:20:09 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 4 16:20:09 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38156,mid=<200904042320.n34NK7jm018543@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 16:20:09 splunk3 sendmail[3556]: n34NK7nd003555: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:20:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:20:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:20:21 splunk3 sendmail[3653]: n34NKLHO003653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:20:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:21:21 splunk3 sendmail[3904]: n34NLLcZ003904: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:22:21 splunk3 sendmail[4154]: n34NMLeN004154: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:23:21 splunk3 sendmail[4412]: n34NNLI3004412: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:24:21 splunk3 sendmail[4648]: n34NOLjp004648: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:25:08 splunk3 sendmail[4826]: n34NP8Ds004826: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042325.n34NP7YL019150@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:25:08 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38211
|
|
Apr 4 16:25:08 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:25:08 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:25:08 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:25:08 splunk3 spamd[10040]: spamd: processing message <200904042325.n34NP7YL019150@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:25:12 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Apr 4 16:25:12 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38211,mid=<200904042325.n34NP7YL019150@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 16:25:12 splunk3 sendmail[4827]: n34NP8Ds004826: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:25:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:25:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:25:21 splunk3 sendmail[4916]: n34NPL0J004916: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:25:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:26:21 splunk3 sendmail[5193]: n34NQL9Z005193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 16:27:21 splunk3 sendmail[5436]: n34NRLQ7005436: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:28:21 splunk3 sendmail[5671]: n34NSLYu005671: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:29:21 splunk3 sendmail[5910]: n34NTL9w005910: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:30:09 splunk3 sendmail[6090]: n34NU99v006090: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042330.n34NU87e019771@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:30:09 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38268
|
|
Apr 4 16:30:09 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:30:09 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:30:09 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:30:09 splunk3 spamd[10040]: spamd: processing message <200904042330.n34NU87e019771@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:30:11 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1308 bytes.
|
|
Apr 4 16:30:11 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38268,mid=<200904042330.n34NU87e019771@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 16:30:11 splunk3 sendmail[6091]: n34NU99v006090: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:30:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:30:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:30:21 splunk3 sendmail[6172]: n34NULeh006172: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:30:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:31:21 splunk3 sendmail[6415]: n34NVLLk006415: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:32:22 splunk3 sendmail[6649]: n34NWLfP006649: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:33:22 splunk3 sendmail[6887]: n34NXMZA006887: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:34:22 splunk3 sendmail[7120]: n34NYMk7007120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:35:09 splunk3 sendmail[7297]: n34NZ9rX007297: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042335.n34NZ9eD020515@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:35:09 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38323
|
|
Apr 4 16:35:09 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:35:09 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:35:09 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:35:09 splunk3 spamd[10040]: spamd: processing message <200904042335.n34NZ9eD020515@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:35:11 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 16:35:11 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38323,mid=<200904042335.n34NZ9eD020515@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 16:35:11 splunk3 sendmail[7298]: n34NZ9rX007297: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:35:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:35:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:35:22 splunk3 sendmail[7379]: n34NZMSK007379: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:35:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:36:22 splunk3 sendmail[7625]: n34NaM7t007625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:37:22 splunk3 sendmail[7864]: n34NbM2Z007864: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:38:22 splunk3 sendmail[8104]: n34NcMfd008104: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:39:22 splunk3 sendmail[8342]: n34NdMXN008342: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:40:09 splunk3 sendmail[8542]: n34Ne9Q5008542: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042340.n34Ne9SO021145@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:40:10 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38379
|
|
Apr 4 16:40:10 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:40:10 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:40:10 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:40:10 splunk3 spamd[10040]: spamd: processing message <200904042340.n34Ne9SO021145@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:40:12 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 16:40:12 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38379,mid=<200904042340.n34Ne9SO021145@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 16:40:12 splunk3 sendmail[8543]: n34Ne9Q5008542: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:40:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:40:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:40:22 splunk3 sendmail[8605]: n34NeMM8008605: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:40:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:41:22 splunk3 sendmail[8846]: n34NfMkw008846: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 16:42:22 splunk3 sendmail[9081]: n34NgMaG009081: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:43:22 splunk3 sendmail[9321]: n34NhMGd009321: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:44:22 splunk3 sendmail[9566]: n34NiM70009566: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:45:10 splunk3 sendmail[9764]: n34NjAhG009764: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042345.n34NjA3F021765@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:45:10 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38435
|
|
Apr 4 16:45:10 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:45:10 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:45:10 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:45:10 splunk3 spamd[10040]: spamd: processing message <200904042345.n34NjA3F021765@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:45:12 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 16:45:12 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38435,mid=<200904042345.n34NjA3F021765@virt2.int.splunk.com>,bayes=0.111864660393,autolearn=no
|
|
Apr 4 16:45:12 splunk3 sendmail[9765]: n34NjAhG009764: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:45:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:45:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:45:22 splunk3 sendmail[9826]: n34NjM6I009826: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:45:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:46:22 splunk3 sendmail[10064]: n34NkMAG010064: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:47:22 splunk3 sendmail[10302]: n34NlMLp010302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:48:12 splunk3 sendmail[10496]: n34NmBkg010496: from=<3u_HXSRQKBs408805yu5yBDC-78By95I08805y.w86C9u66yC95E742D.w86@alerts.bounces.google.com>, size=2728, class=0, nrcpts=1, msgid=<0015175746644dad050466c34cd6@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.163]
|
|
Apr 4 16:48:12 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38472
|
|
Apr 4 16:48:12 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:48:12 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:48:12 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:48:12 splunk3 spamd[10040]: spamd: processing message <0015175746644dad050466c34cd6@google.com> for spamme:501
|
|
Apr 4 16:48:15 splunk3 spamd[10040]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.8 seconds, 3157 bytes.
|
|
Apr 4 16:48:15 splunk3 spamd[10040]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.8,size=3157,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38472,mid=<0015175746644dad050466c34cd6@google.com>,bayes=1.11022302462516e-16,autolearn=ham
|
|
Apr 4 16:48:15 splunk3 sendmail[10498]: n34NmBkg010496: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=32938, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:48:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:48:22 splunk3 sendmail[10542]: n34NmMSJ010542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:49:22 splunk3 sendmail[10782]: n34NnMrZ010782: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:50:11 splunk3 sendmail[10982]: n34NoB0a010982: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042350.n34NoAEH022381@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:50:11 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38492
|
|
Apr 4 16:50:11 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:50:11 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:50:11 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:50:11 splunk3 spamd[10040]: spamd: processing message <200904042350.n34NoAEH022381@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:50:13 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 16:50:13 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38492,mid=<200904042350.n34NoAEH022381@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 16:50:13 splunk3 sendmail[10983]: n34NoB0a010982: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:50:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:50:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:50:22 splunk3 sendmail[11043]: n34NoMEU011043: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:50:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:51:22 splunk3 sendmail[11284]: n34NpM3A011284: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:52:22 splunk3 sendmail[11521]: n34NqMQh011521: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:53:22 splunk3 sendmail[11763]: n34NrMnR011763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:54:22 splunk3 sendmail[11999]: n34NsMx1011999: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:55:11 splunk3 sendmail[12195]: n34NtBMW012195: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904042355.n34NtBgS022989@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 16:55:11 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38547
|
|
Apr 4 16:55:11 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 16:55:11 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 16:55:11 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 16:55:11 splunk3 spamd[10040]: spamd: processing message <200904042355.n34NtBgS022989@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 16:55:13 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 16:55:13 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38547,mid=<200904042355.n34NtBgS022989@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 16:55:13 splunk3 sendmail[12196]: n34NtBMW012195: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 16:55:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 16:55:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 16:55:22 splunk3 sendmail[12257]: n34NtMG2012257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:55:38 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 16:56:22 splunk3 sendmail[12496]: n34NuM6d012496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 16:57:22 splunk3 sendmail[12735]: n34NvM3w012735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:58:22 splunk3 sendmail[12971]: n34NwMpC012971: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 16:59:22 splunk3 sendmail[13210]: n34NxMqk013210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:00:04 splunk3 sendmail[13467]: n350044S013467: from=root, size=291, class=0, nrcpts=1, msgid=<200904050000.n350044S013467@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 17:00:04 splunk3 sendmail[13473]: n35004hN013473: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050000.n350044S013467@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 17:00:04 splunk3 sendmail[13467]: n350044S013467: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35004hN013473 Message accepted for delivery)
|
|
Apr 4 17:00:05 splunk3 sendmail[13474]: n35004hN013473: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:00:12 splunk3 sendmail[13518]: n3500C5O013518: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050000.n3500B1D023656@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:00:12 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38605
|
|
Apr 4 17:00:12 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:00:12 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 17:00:12 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 17:00:12 splunk3 sendmail[13519]: n3500C5O013518: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:00:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:00:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:00:15 splunk3 sendmail[13559]: n3500FkY013559: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904050000.n3500FkY013559@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 17:00:15 splunk3 sendmail[13561]: n3500FkY013559: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 17:00:15 splunk3 sendmail[13561]: n3500FkY013559: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 17:00:15 splunk3 sendmail[13561]: n3500FkY013559: n3500FkY013561: postmaster notify: User unknown
|
|
Apr 4 17:00:17 splunk3 sendmail[13561]: n3500FkY013561: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:00:22 splunk3 sendmail[13593]: n3500MVo013593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:00:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:01:10 splunk3 sendmail[13761]: n350116d013761: from=root, size=443, class=0, nrcpts=1, msgid=<200904050001.n350116d013761@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 17:01:10 splunk3 sendmail[13802]: n3501AWt013802: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050001.n350116d013761@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 17:01:10 splunk3 sendmail[13761]: n350116d013761: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3501AWt013802 Message accepted for delivery)
|
|
Apr 4 17:01:11 splunk3 sendmail[13803]: n3501AWt013802: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:01:22 splunk3 sendmail[13849]: n3501MJv013849: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:02:22 splunk3 sendmail[14084]: n3502Mvu014084: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:03:22 splunk3 sendmail[14322]: n3503Mt3014322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:04:22 splunk3 sendmail[14555]: n3504Mqm014555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:05:12 splunk3 sendmail[14754]: n3505CK4014754: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050005.n3505CEf024339@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:05:13 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38669
|
|
Apr 4 17:05:13 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:05:13 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 17:05:13 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 17:05:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:05:13 splunk3 sendmail[14755]: n3505CK4014754: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:05:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:05:22 splunk3 sendmail[14813]: n3505MBg014813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:05:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:06:22 splunk3 sendmail[15051]: n3506Mxm015051: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:07:22 splunk3 sendmail[15291]: n3507M3K015291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:08:22 splunk3 sendmail[15530]: n3508MI1015530: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:09:22 splunk3 sendmail[15769]: n3509Mtu015769: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:10:02 splunk3 sendmail[16023]: n350A2LK016023: from=root, size=292, class=0, nrcpts=1, msgid=<200904050010.n350A2LK016023@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 17:10:02 splunk3 sendmail[16028]: n350A2B3016028: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050010.n350A2LK016023@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 17:10:02 splunk3 sendmail[16023]: n350A2LK016023: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n350A2B3016028 Message accepted for delivery)
|
|
Apr 4 17:10:04 splunk3 sendmail[16029]: n350A2B3016028: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:10:13 splunk3 sendmail[16081]: n350ADoZ016081: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050010.n350ADqm024954@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:10:13 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38726
|
|
Apr 4 17:10:13 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:10:13 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:10:13 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:10:13 splunk3 spamd[10040]: spamd: processing message <200904050010.n350ADqm024954@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:10:15 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 17:10:15 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38726,mid=<200904050010.n350ADqm024954@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:10:15 splunk3 sendmail[16082]: n350ADoZ016081: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:10:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:10:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:10:22 splunk3 sendmail[16137]: n350AMOF016137: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:10:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:11:22 splunk3 sendmail[16378]: n350BM4c016378: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 17:12:22 splunk3 sendmail[16613]: n350CMb3016613: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:13:22 splunk3 sendmail[16853]: n350DMck016853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:14:22 splunk3 sendmail[17088]: n350EMrf017088: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:15:14 splunk3 sendmail[17292]: n350FDnc017292: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050015.n350FDs8025735@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:15:14 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38783
|
|
Apr 4 17:15:14 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:15:14 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:15:14 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:15:14 splunk3 spamd[10040]: spamd: processing message <200904050015.n350FDs8025735@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:15:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:15:16 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 17:15:16 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38783,mid=<200904050015.n350FDs8025735@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:15:16 splunk3 sendmail[17293]: n350FDnc017292: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:15:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:15:22 splunk3 sendmail[17346]: n350FME5017346: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:15:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:16:22 splunk3 sendmail[17586]: n350GMqg017586: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:17:22 splunk3 sendmail[17824]: n350HMCA017824: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:18:22 splunk3 sendmail[18056]: n350IMU7018056: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:19:22 splunk3 sendmail[18295]: n350JMxL018295: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:20:14 splunk3 sendmail[18500]: n350KE20018500: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050020.n350KEqc026372@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:20:14 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38838
|
|
Apr 4 17:20:14 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:20:14 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:20:14 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:20:14 splunk3 spamd[10040]: spamd: processing message <200904050020.n350KEqc026372@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:20:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:20:16 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 17:20:16 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38838,mid=<200904050020.n350KEqc026372@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:20:16 splunk3 sendmail[18501]: n350KE20018500: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:20:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:20:22 splunk3 sendmail[18555]: n350KM7B018555: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:20:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:21:22 splunk3 sendmail[18797]: n350LMbx018797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:22:22 splunk3 sendmail[19034]: n350MMVF019034: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:23:22 splunk3 sendmail[19275]: n350NMCZ019275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:24:22 splunk3 sendmail[19510]: n350OMOX019510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:25:14 splunk3 sendmail[19732]: n350PE36019732: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050025.n350PEEV026980@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:25:14 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38894
|
|
Apr 4 17:25:14 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:25:15 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:25:15 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:25:15 splunk3 spamd[10040]: spamd: processing message <200904050025.n350PEEV026980@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:25:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:25:17 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 17:25:17 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38894,mid=<200904050025.n350PEEV026980@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:25:17 splunk3 sendmail[19733]: n350PE36019732: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:25:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:25:22 splunk3 sendmail[19770]: n350PMjU019770: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:25:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:26:22 splunk3 sendmail[20007]: n350QMiV020007: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 17:27:22 splunk3 sendmail[20247]: n350RM12020247: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:28:22 splunk3 sendmail[20483]: n350SMeX020483: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:29:22 splunk3 sendmail[20723]: n350TMbJ020723: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:30:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:30:15 splunk3 sendmail[20945]: n350UF6w020945: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050030.n350UFw0027607@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:30:15 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 38950
|
|
Apr 4 17:30:15 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:30:15 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:30:15 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:30:15 splunk3 spamd[10040]: spamd: processing message <200904050030.n350UFw0027607@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:30:18 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 17:30:18 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38950,mid=<200904050030.n350UFw0027607@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:30:18 splunk3 sendmail[20946]: n350UF6w020945: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:30:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:30:22 splunk3 sendmail[20982]: n350UMc8020982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:30:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:31:22 splunk3 sendmail[21226]: n350VMMx021226: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:32:22 splunk3 sendmail[21460]: n350WMuA021460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:33:22 splunk3 sendmail[21697]: n350XMg1021697: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:34:22 splunk3 sendmail[21934]: n350YM4l021934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:35:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:35:16 splunk3 sendmail[22155]: n350ZG7D022155: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050035.n350ZFTf028351@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:35:16 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39006
|
|
Apr 4 17:35:16 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:35:16 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:35:16 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:35:16 splunk3 spamd[10040]: spamd: processing message <200904050035.n350ZFTf028351@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:35:18 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 17:35:18 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39006,mid=<200904050035.n350ZFTf028351@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:35:18 splunk3 sendmail[22156]: n350ZG7D022155: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:35:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:35:22 splunk3 sendmail[22193]: n350ZMIS022193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:35:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:36:22 splunk3 sendmail[22431]: n350aMT2022431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:37:22 splunk3 sendmail[22667]: n350bMvi022667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:38:22 splunk3 sendmail[22907]: n350cMtV022907: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:39:22 splunk3 sendmail[23145]: n350dMre023145: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:40:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:40:17 splunk3 sendmail[23370]: n350eGbH023370: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050040.n350eGTP028983@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:40:17 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39061
|
|
Apr 4 17:40:17 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:40:17 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:40:17 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:40:17 splunk3 spamd[10040]: spamd: processing message <200904050040.n350eGTP028983@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:40:19 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 17:40:19 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39061,mid=<200904050040.n350eGTP028983@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:40:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:40:19 splunk3 sendmail[23371]: n350eGbH023370: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:40:22 splunk3 sendmail[23406]: n350eMj9023406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:40:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:41:22 splunk3 sendmail[23649]: n350fM7j023649: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 17:42:22 splunk3 sendmail[23884]: n350gMFp023884: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:43:22 splunk3 sendmail[24125]: n350hMhB024125: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:44:22 splunk3 sendmail[24360]: n350iMbq024360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:45:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:45:19 splunk3 sendmail[24600]: n350jJ14024600: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050045.n350jHYr029593@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:45:19 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39118
|
|
Apr 4 17:45:19 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:45:19 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:45:19 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:45:19 splunk3 spamd[10040]: spamd: processing message <200904050045.n350jHYr029593@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:45:21 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 17:45:21 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39118,mid=<200904050045.n350jHYr029593@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:45:21 splunk3 sendmail[24601]: n350jJ14024600: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:45:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:45:22 splunk3 sendmail[24620]: n350jMjC024620: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:45:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:46:22 splunk3 sendmail[24859]: n350kMUt024859: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:47:22 splunk3 sendmail[25096]: n350lMd3025096: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:48:22 splunk3 sendmail[25332]: n350mMGR025332: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:49:22 splunk3 sendmail[25569]: n350nMhU025569: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:50:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:50:20 splunk3 sendmail[25814]: n350oKnT025814: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050050.n350oJSI030204@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:50:20 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39182
|
|
Apr 4 17:50:20 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:50:20 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:50:20 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:50:20 splunk3 spamd[10040]: spamd: processing message <200904050050.n350oJSI030204@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:50:22 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 4 17:50:22 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39182,mid=<200904050050.n350oJSI030204@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:50:22 splunk3 sendmail[25822]: n350oKnT025814: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:50:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:50:22 splunk3 sendmail[25830]: n350oM5P025830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:50:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:51:22 splunk3 sendmail[26072]: n350pMEq026072: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:52:22 splunk3 sendmail[26307]: n350qMJq026307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:53:22 splunk3 sendmail[26548]: n350rMqJ026548: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:54:22 splunk3 sendmail[26781]: n350sMfI026781: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:55:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 17:55:21 splunk3 sendmail[27035]: n350tLh3027035: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050055.n350tKvA030825@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 17:55:21 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39237
|
|
Apr 4 17:55:21 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 17:55:21 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 17:55:21 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 17:55:21 splunk3 spamd[10040]: spamd: processing message <200904050055.n350tKvA030825@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 17:55:22 splunk3 sendmail[27041]: n350tMxH027041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:55:23 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 17:55:23 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39237,mid=<200904050055.n350tKvA030825@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 17:55:23 splunk3 sendmail[27036]: n350tLh3027035: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 17:55:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 17:55:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 17:56:22 splunk3 sendmail[27278]: n350uMJQ027278: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 17:57:22 splunk3 sendmail[27519]: n350vMps027519: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:58:22 splunk3 sendmail[27754]: n350wMtR027754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 17:59:22 splunk3 sendmail[27992]: n350xMlJ027992: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:00:04 splunk3 sendmail[28230]: n35104qb028230: from=root, size=291, class=0, nrcpts=1, msgid=<200904050100.n35104qb028230@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 18:00:04 splunk3 sendmail[28234]: n35104uf028234: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050100.n35104qb028230@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 18:00:04 splunk3 sendmail[28230]: n35104qb028230: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35104uf028234 Message accepted for delivery)
|
|
Apr 4 18:00:06 splunk3 sendmail[28235]: n35104uf028234: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:00:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:00:21 splunk3 sendmail[28316]: n3510LmX028316: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904050100.n3510LmX028316@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 18:00:21 splunk3 sendmail[28318]: n3510LmX028316: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 18:00:21 splunk3 sendmail[28318]: n3510LmX028316: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 18:00:21 splunk3 sendmail[28318]: n3510LmX028316: n3510LmX028318: postmaster notify: User unknown
|
|
Apr 4 18:00:21 splunk3 sendmail[28328]: n3510L5l028328: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050100.n3510LZB031466@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:00:21 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39302
|
|
Apr 4 18:00:21 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:00:21 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 18:00:21 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 18:00:21 splunk3 sendmail[28333]: n3510L5l028328: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:00:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:00:22 splunk3 sendmail[28337]: n3510MBZ028337: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:00:22 splunk3 sendmail[28318]: n3510LmX028318: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:00:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:01:04 splunk3 sendmail[28504]: n35111LB028504: from=root, size=443, class=0, nrcpts=1, msgid=<200904050101.n35111LB028504@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 18:01:04 splunk3 sendmail[28525]: n35114W9028525: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050101.n35111LB028504@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 18:01:04 splunk3 sendmail[28504]: n35111LB028504: to=root, ctladdr=root (0/0), delay=00:00:03, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35114W9028525 Message accepted for delivery)
|
|
Apr 4 18:01:05 splunk3 sendmail[28526]: n35114W9028525: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:01:22 splunk3 sendmail[28593]: n3511M1I028593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:02:22 splunk3 sendmail[28829]: n3512M5G028829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:03:22 splunk3 sendmail[29067]: n3513M9Q029067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:04:22 splunk3 sendmail[29304]: n3514MkR029304: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:05:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:05:22 splunk3 sendmail[29556]: n3515MD1029556: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050105.n3515MOY032145@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:05:22 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39359
|
|
Apr 4 18:05:22 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:05:22 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 18:05:22 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 18:05:22 splunk3 sendmail[29557]: n3515MD1029556: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:05:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:05:22 splunk3 sendmail[29561]: n3515MPH029561: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:05:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:06:22 splunk3 sendmail[29799]: n3516MFU029799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:07:22 splunk3 sendmail[30037]: n3517Mak030037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:08:22 splunk3 sendmail[30274]: n3518MCD030274: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:09:22 splunk3 sendmail[30512]: n3519M0g030512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:10:02 splunk3 sendmail[30764]: n351A2Nm030764: from=root, size=292, class=0, nrcpts=1, msgid=<200904050110.n351A2Nm030764@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 18:10:02 splunk3 sendmail[30768]: n351A27f030768: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050110.n351A2Nm030764@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 18:10:02 splunk3 sendmail[30764]: n351A2Nm030764: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n351A27f030768 Message accepted for delivery)
|
|
Apr 4 18:10:03 splunk3 sendmail[30769]: n351A27f030768: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:10:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:10:22 splunk3 sendmail[30871]: n351AM32030871: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:10:22 splunk3 sendmail[30870]: n351AMb8030870: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050110.n351AM1r032765@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:10:22 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39415
|
|
Apr 4 18:10:22 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:10:22 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:10:22 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:10:22 splunk3 spamd[10040]: spamd: processing message <200904050110.n351AM1r032765@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:10:24 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 4 18:10:24 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39415,mid=<200904050110.n351AM1r032765@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 18:10:24 splunk3 sendmail[30872]: n351AMb8030870: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:10:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:10:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:11:22 splunk3 sendmail[31118]: n351BMb4031118: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 18:12:22 splunk3 sendmail[31352]: n351CMQb031352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:13:22 splunk3 sendmail[31590]: n351DM8R031590: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:14:22 splunk3 sendmail[31825]: n351EMpu031825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:15:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:15:22 splunk3 sendmail[32067]: n351FMWL032067: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:15:23 splunk3 sendmail[32081]: n351FN0l032081: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050115.n351FNii001081@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:15:23 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39472
|
|
Apr 4 18:15:23 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:15:23 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:15:23 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:15:23 splunk3 spamd[10040]: spamd: processing message <200904050115.n351FNii001081@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:15:25 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 4 18:15:25 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39472,mid=<200904050115.n351FNii001081@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 18:15:25 splunk3 sendmail[32090]: n351FN0l032081: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:15:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:15:40 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:16:22 splunk3 sendmail[32323]: n351GMJ6032323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:17:22 splunk3 sendmail[32562]: n351HM1G032562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:18:22 splunk3 sendmail[330]: n351IMju000330: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:19:22 splunk3 sendmail[571]: n351JMOO000571: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:20:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:20:22 splunk3 sendmail[816]: n351KMd2000816: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:20:24 splunk3 sendmail[847]: n351KORG000847: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050120.n351KNDO001751@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:20:24 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39527
|
|
Apr 4 18:20:24 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:20:24 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:20:24 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:20:24 splunk3 spamd[10040]: spamd: processing message <200904050120.n351KNDO001751@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:20:26 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.4 seconds, 1305 bytes.
|
|
Apr 4 18:20:26 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39527,mid=<200904050120.n351KNDO001751@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 18:20:26 splunk3 sendmail[848]: n351KORG000847: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:20:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:20:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:21:22 splunk3 sendmail[1074]: n351LMBh001074: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:22:22 splunk3 sendmail[1309]: n351MMZh001309: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:23:22 splunk3 sendmail[1553]: n351NM1f001553: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:24:22 splunk3 sendmail[1788]: n351OM3M001788: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:25:15 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:25:22 splunk3 sendmail[2034]: n351PMlJ002034: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:25:24 splunk3 sendmail[2065]: n351POXo002065: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050125.n351PObN002363@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:25:24 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39583
|
|
Apr 4 18:25:24 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:25:24 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:25:24 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:25:24 splunk3 spamd[10040]: spamd: processing message <200904050125.n351PObN002363@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:25:26 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 4 18:25:26 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39583,mid=<200904050125.n351PObN002363@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 18:25:26 splunk3 sendmail[2066]: n351POXo002065: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:25:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:25:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:26:22 splunk3 sendmail[2288]: n351QMoW002288: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 18:27:22 splunk3 sendmail[2526]: n351RMcR002526: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:28:22 splunk3 sendmail[2776]: n351SMT8002776: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:29:22 splunk3 sendmail[3022]: n351TMMp003022: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:30:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:30:22 splunk3 sendmail[3273]: n351UMpS003273: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:30:25 splunk3 sendmail[3302]: n351UPeH003302: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050130.n351UOKE002991@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:30:25 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39639
|
|
Apr 4 18:30:25 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:30:25 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:30:25 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:30:25 splunk3 spamd[10040]: spamd: processing message <200904050130.n351UOKE002991@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:30:27 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 18:30:27 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39639,mid=<200904050130.n351UOKE002991@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 18:30:27 splunk3 sendmail[3303]: n351UPeH003302: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:30:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:30:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:31:22 splunk3 sendmail[3531]: n351VMcM003531: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:32:22 splunk3 sendmail[3794]: n351WME6003794: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:33:22 splunk3 sendmail[4044]: n351XMqU004044: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:34:22 splunk3 sendmail[4291]: n351YMd4004291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:35:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:35:22 splunk3 sendmail[4544]: n351ZM7e004544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:35:26 splunk3 sendmail[4574]: n351ZPTc004574: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050135.n351ZPIn003730@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:35:26 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39695
|
|
Apr 4 18:35:26 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:35:26 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:35:26 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:35:26 splunk3 spamd[10040]: spamd: processing message <200904050135.n351ZPIn003730@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:35:28 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 18:35:28 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39695,mid=<200904050135.n351ZPIn003730@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 18:35:28 splunk3 sendmail[4575]: n351ZPTc004574: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:35:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:35:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:36:23 splunk3 sendmail[4797]: n351aNg6004797: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:37:23 splunk3 sendmail[5050]: n351bNii005050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:38:23 splunk3 sendmail[5324]: n351cNg8005324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:39:23 splunk3 sendmail[5565]: n351dNaQ005565: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:40:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:40:23 splunk3 sendmail[5813]: n351eNMW005813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:40:26 splunk3 sendmail[5843]: n351eQET005843: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050140.n351eQfB004369@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:40:26 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39750
|
|
Apr 4 18:40:26 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:40:26 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:40:26 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:40:26 splunk3 spamd[10040]: spamd: processing message <200904050140.n351eQfB004369@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:40:28 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 18:40:28 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39750,mid=<200904050140.n351eQfB004369@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 18:40:28 splunk3 sendmail[5845]: n351eQET005843: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:40:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:40:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:41:23 splunk3 sendmail[6069]: n351fNN5006069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 18:42:23 splunk3 sendmail[6303]: n351gNRV006303: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:43:23 splunk3 sendmail[6539]: n351hN1c006539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:44:23 splunk3 sendmail[6775]: n351iN91006775: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:45:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:45:23 splunk3 sendmail[7018]: n351jNpt007018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:45:27 splunk3 sendmail[7049]: n351jQee007049: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050145.n351jQ4j004975@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:45:27 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39807
|
|
Apr 4 18:45:27 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:45:27 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:45:27 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:45:27 splunk3 spamd[10040]: spamd: processing message <200904050145.n351jQ4j004975@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:45:29 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 4 18:45:29 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39807,mid=<200904050145.n351jQ4j004975@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 18:45:29 splunk3 sendmail[7050]: n351jQee007049: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:45:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:45:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:46:23 splunk3 sendmail[7272]: n351kNaH007272: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:47:23 splunk3 sendmail[7512]: n351lNnV007512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:48:23 splunk3 sendmail[7755]: n351mN2G007755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:49:23 splunk3 sendmail[7993]: n351nNbw007993: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:50:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:50:23 splunk3 sendmail[8239]: n351oNcj008239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:50:27 splunk3 sendmail[8272]: n351oRnZ008272: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050150.n351oR6c005590@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:50:27 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39863
|
|
Apr 4 18:50:27 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:50:27 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:50:27 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:50:27 splunk3 spamd[10040]: spamd: processing message <200904050150.n351oR6c005590@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:50:29 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 4 18:50:29 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39863,mid=<200904050150.n351oR6c005590@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 18:50:29 splunk3 sendmail[8273]: n351oRnZ008272: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:50:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:50:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:51:23 splunk3 sendmail[8498]: n351pNve008498: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:52:23 splunk3 sendmail[8733]: n351qNTI008733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:53:23 splunk3 sendmail[8976]: n351rNS2008976: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:54:23 splunk3 sendmail[9211]: n351sNQm009211: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:55:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 18:55:23 splunk3 sendmail[9455]: n351tNq9009455: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:55:28 splunk3 sendmail[9487]: n351tR5M009487: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050155.n351tRCp006220@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 18:55:28 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39918
|
|
Apr 4 18:55:28 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 18:55:28 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 18:55:28 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 18:55:28 splunk3 spamd[10040]: spamd: processing message <200904050155.n351tRCp006220@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 18:55:30 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 18:55:30 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=39918,mid=<200904050155.n351tRCp006220@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 18:55:30 splunk3 sendmail[9488]: n351tR5M009487: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 18:55:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 18:55:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 18:56:23 splunk3 sendmail[9717]: n351uN75009717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 18:57:23 splunk3 sendmail[9955]: n351vNUV009955: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:58:23 splunk3 sendmail[10192]: n351wN5L010192: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 18:59:23 splunk3 sendmail[10431]: n351xNjR010431: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:00:04 splunk3 sendmail[10672]: n35204VH010672: from=root, size=291, class=0, nrcpts=1, msgid=<200904050200.n35204VH010672@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 19:00:04 splunk3 sendmail[10676]: n352049a010676: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050200.n35204VH010672@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 19:00:04 splunk3 sendmail[10672]: n35204VH010672: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n352049a010676 Message accepted for delivery)
|
|
Apr 4 19:00:05 splunk3 sendmail[10677]: n352049a010676: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:00:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:00:23 splunk3 sendmail[10746]: n3520ND1010746: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:00:27 splunk3 sendmail[10778]: n3520RF6010778: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904050200.n3520RF6010778@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 19:00:27 splunk3 sendmail[10780]: n3520RF6010778: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 19:00:27 splunk3 sendmail[10780]: n3520RF6010778: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 19:00:27 splunk3 sendmail[10780]: n3520RF6010778: n3520RF6010780: postmaster notify: User unknown
|
|
Apr 4 19:00:28 splunk3 sendmail[10810]: n3520SbY010810: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050200.n3520SOw006837@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:00:28 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 39983
|
|
Apr 4 19:00:28 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:00:28 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 19:00:28 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 19:00:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:00:28 splunk3 sendmail[10811]: n3520SbY010810: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:00:28 splunk3 sendmail[10780]: n3520RF6010780: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:00:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:01:02 splunk3 sendmail[10946]: n35211Ha010946: from=root, size=443, class=0, nrcpts=1, msgid=<200904050201.n35211Ha010946@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 19:01:02 splunk3 sendmail[10949]: n35212hb010949: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050201.n35211Ha010946@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 19:01:02 splunk3 sendmail[10946]: n35211Ha010946: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35212hb010949 Message accepted for delivery)
|
|
Apr 4 19:01:03 splunk3 sendmail[10950]: n35212hb010949: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:01:23 splunk3 sendmail[11033]: n3521NvE011033: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:02:23 splunk3 sendmail[11271]: n3522NE0011271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:03:23 splunk3 sendmail[11513]: n3523Nq1011513: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:04:23 splunk3 sendmail[11753]: n3524NvZ011753: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:05:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:05:23 splunk3 sendmail[12000]: n3525NMv012000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:05:29 splunk3 sendmail[12030]: n3525TJW012030: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050205.n3525SEJ007541@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:05:29 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40039
|
|
Apr 4 19:05:29 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:05:29 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 19:05:29 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 19:05:29 splunk3 sendmail[12031]: n3525TJW012030: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:05:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:05:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:06:23 splunk3 sendmail[12253]: n3526Nj5012253: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:07:23 splunk3 sendmail[12492]: n3527NVx012492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:08:23 splunk3 sendmail[12731]: n3528NvK012731: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:09:23 splunk3 sendmail[12970]: n3529NPk012970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:10:02 splunk3 sendmail[13207]: n352A27L013207: from=root, size=292, class=0, nrcpts=1, msgid=<200904050210.n352A27L013207@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 19:10:02 splunk3 sendmail[13212]: n352A2s8013212: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050210.n352A27L013207@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 19:10:02 splunk3 sendmail[13207]: n352A27L013207: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n352A2s8013212 Message accepted for delivery)
|
|
Apr 4 19:10:04 splunk3 sendmail[13213]: n352A2s8013212: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:10:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:10:23 splunk3 sendmail[13353]: n352ANWh013353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:10:29 splunk3 sendmail[13392]: n352ATS2013392: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050210.n352ATr4008133@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:10:29 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40096
|
|
Apr 4 19:10:29 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:10:29 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:10:29 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:10:29 splunk3 spamd[10040]: spamd: processing message <200904050210.n352ATr4008133@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:10:31 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 19:10:31 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40096,mid=<200904050210.n352ATr4008133@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 19:10:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:10:32 splunk3 sendmail[13393]: n352ATS2013392: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:10:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:11:23 splunk3 sendmail[13616]: n352BNHx013616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 19:12:23 splunk3 sendmail[13853]: n352CNBS013853: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:13:23 splunk3 sendmail[14091]: n352DN3T014091: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:14:23 splunk3 sendmail[14324]: n352ENFd014324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:15:00 splunk3 sendmail[14468]: n352F0ek014468: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050215.n352F0rM008844@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:15:00 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40140
|
|
Apr 4 19:15:00 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:15:00 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:15:00 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:15:00 splunk3 spamd[10040]: spamd: processing message <200904050215.n352F0rM008844@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:15:02 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.4 seconds, 1305 bytes.
|
|
Apr 4 19:15:02 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.4,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40140,mid=<200904050215.n352F0rM008844@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 19:15:02 splunk3 sendmail[14469]: n352F0ek014468: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:15:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:15:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:15:23 splunk3 sendmail[14574]: n352FNHN014574: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:15:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:16:23 splunk3 sendmail[14822]: n352GNgS014822: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:17:23 splunk3 sendmail[15058]: n352HNWu015058: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:18:23 splunk3 sendmail[15291]: n352INMj015291: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:19:23 splunk3 sendmail[15532]: n352JNZP015532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:20:02 splunk3 sendmail[15678]: n352K13R015678: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050220.n352K13Q009457@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:20:02 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40195
|
|
Apr 4 19:20:02 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:20:02 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:20:02 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:20:02 splunk3 spamd[10040]: spamd: processing message <200904050220.n352K13Q009457@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:20:04 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1305 bytes.
|
|
Apr 4 19:20:04 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40195,mid=<200904050220.n352K13Q009457@virt2.int.splunk.com>,bayes=0.168769126674711,autolearn=no
|
|
Apr 4 19:20:04 splunk3 sendmail[15679]: n352K13R015678: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:20:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:20:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:20:23 splunk3 sendmail[15784]: n352KNDw015784: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:20:37 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:21:23 splunk3 sendmail[16035]: n352LNKr016035: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:22:23 splunk3 sendmail[16271]: n352MNwt016271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:23:23 splunk3 sendmail[16514]: n352NNQx016514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:24:23 splunk3 sendmail[16746]: n352ONLp016746: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:25:02 splunk3 sendmail[16896]: n352P2MM016896: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050225.n352P27L010121@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:25:02 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40251
|
|
Apr 4 19:25:02 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:25:02 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:25:02 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:25:02 splunk3 spamd[10040]: spamd: processing message <200904050225.n352P27L010121@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:25:04 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1308 bytes.
|
|
Apr 4 19:25:04 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40251,mid=<200904050225.n352P27L010121@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 19:25:04 splunk3 sendmail[16909]: n352P2MM016896: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:25:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:25:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:25:23 splunk3 sendmail[16998]: n352PNuS016998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:25:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:26:23 splunk3 sendmail[17246]: n352QN4v017246: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 19:27:23 splunk3 sendmail[17486]: n352RNME017486: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:28:23 splunk3 sendmail[17719]: n352SNmU017719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:29:23 splunk3 sendmail[17957]: n352TNmO017957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:30:03 splunk3 sendmail[18122]: n352U3jC018122: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050230.n352U3Lh010743@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:30:03 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40307
|
|
Apr 4 19:30:03 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:30:03 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:30:03 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:30:03 splunk3 spamd[10040]: spamd: processing message <200904050230.n352U3Lh010743@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:30:05 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 19:30:05 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40307,mid=<200904050230.n352U3Lh010743@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 19:30:05 splunk3 sendmail[18123]: n352U3jC018122: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:30:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:30:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:30:23 splunk3 sendmail[18210]: n352UNrs018210: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:30:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:31:23 splunk3 sendmail[18459]: n352VNXU018459: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:32:23 splunk3 sendmail[18693]: n352WNHB018693: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:33:23 splunk3 sendmail[18934]: n352XNb6018934: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:34:23 splunk3 sendmail[19169]: n352YNxG019169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:35:04 splunk3 sendmail[19339]: n352Z4BJ019339: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050235.n352Z44d011487@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:35:04 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40371
|
|
Apr 4 19:35:04 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:35:04 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:35:04 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:35:04 splunk3 spamd[10040]: spamd: processing message <200904050235.n352Z44d011487@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:35:06 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 19:35:06 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40371,mid=<200904050235.n352Z44d011487@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 19:35:06 splunk3 sendmail[19340]: n352Z4BJ019339: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:35:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:35:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:35:23 splunk3 sendmail[19427]: n352ZN9n019427: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:35:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:36:23 splunk3 sendmail[19667]: n352aNDA019667: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:37:23 splunk3 sendmail[19907]: n352bNTI019907: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:38:23 splunk3 sendmail[20143]: n352cNLI020143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:39:23 splunk3 sendmail[20383]: n352dNGd020383: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:40:06 splunk3 sendmail[20555]: n352e5Uo020555: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050240.n352e57t012119@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:40:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40427
|
|
Apr 4 19:40:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:40:06 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:40:06 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:40:06 splunk3 spamd[10040]: spamd: processing message <200904050240.n352e57t012119@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:40:08 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 19:40:08 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40427,mid=<200904050240.n352e57t012119@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 19:40:08 splunk3 sendmail[20556]: n352e5Uo020555: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:40:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:40:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:40:23 splunk3 sendmail[20645]: n352eNlu020645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:40:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:41:23 splunk3 sendmail[20888]: n352fNY2020888: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 19:42:23 splunk3 sendmail[21123]: n352gNDI021123: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:43:23 splunk3 sendmail[21363]: n352hNKq021363: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:44:23 splunk3 sendmail[21598]: n352iNgd021598: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:45:06 splunk3 sendmail[21768]: n352j6YZ021768: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050245.n352j60N012735@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:45:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40483
|
|
Apr 4 19:45:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:45:06 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:45:06 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:45:06 splunk3 spamd[10040]: spamd: processing message <200904050245.n352j60N012735@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:45:08 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 19:45:08 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40483,mid=<200904050245.n352j60N012735@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 19:45:08 splunk3 sendmail[21769]: n352j6YZ021768: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:45:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:45:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:45:23 splunk3 sendmail[21854]: n352jNAC021854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:45:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:46:23 splunk3 sendmail[22095]: n352kNgU022095: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:47:23 splunk3 sendmail[22333]: n352lNfK022333: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:48:23 splunk3 sendmail[22567]: n352mN97022567: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:49:23 splunk3 sendmail[22806]: n352nN9T022806: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:50:06 splunk3 sendmail[22979]: n352o63B022979: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050250.n352o6wm013346@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:50:06 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40539
|
|
Apr 4 19:50:06 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:50:06 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:50:06 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:50:06 splunk3 spamd[10040]: spamd: processing message <200904050250.n352o6wm013346@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:50:08 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 19:50:08 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40539,mid=<200904050250.n352o6wm013346@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 19:50:09 splunk3 sendmail[22980]: n352o63B022979: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:50:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:50:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:50:23 splunk3 sendmail[23066]: n352oNVT023066: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:50:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:51:23 splunk3 sendmail[23308]: n352pNpo023308: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:52:23 splunk3 sendmail[23540]: n352qNs0023540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:53:23 splunk3 sendmail[23784]: n352rNri023784: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:54:23 splunk3 sendmail[24019]: n352sNQC024019: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:55:07 splunk3 sendmail[24202]: n352t7gP024202: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050255.n352t70X013952@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 19:55:07 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40594
|
|
Apr 4 19:55:07 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 19:55:07 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 19:55:07 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 19:55:07 splunk3 spamd[10040]: spamd: processing message <200904050255.n352t70X013952@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 19:55:09 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 19:55:09 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40594,mid=<200904050255.n352t70X013952@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 19:55:09 splunk3 sendmail[24210]: n352t7gP024202: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 19:55:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 19:55:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 19:55:23 splunk3 sendmail[24279]: n352tNOm024279: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:55:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 19:56:23 splunk3 sendmail[24517]: n352uNK6024517: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 19:57:23 splunk3 sendmail[24758]: n352vNFt024758: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:58:23 splunk3 sendmail[24994]: n352wNfx024994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 19:59:23 splunk3 sendmail[25230]: n352xNh5025230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:00:02 splunk3 sendmail[25435]: n3530213025435: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904050300.n3530213025435@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 20:00:02 splunk3 sendmail[25437]: n3530213025435: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 20:00:02 splunk3 sendmail[25437]: n3530213025435: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 20:00:02 splunk3 sendmail[25437]: n3530213025435: n3530213025437: postmaster notify: User unknown
|
|
Apr 4 20:00:03 splunk3 sendmail[25437]: n3530213025437: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:00:04 splunk3 sendmail[25478]: n35304Rg025478: from=root, size=291, class=0, nrcpts=1, msgid=<200904050300.n35304Rg025478@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 20:00:04 splunk3 sendmail[25482]: n35304dA025482: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050300.n35304Rg025478@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 20:00:04 splunk3 sendmail[25478]: n35304Rg025478: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35304dA025482 Message accepted for delivery)
|
|
Apr 4 20:00:05 splunk3 sendmail[25483]: n35304dA025482: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:00:08 splunk3 sendmail[25511]: n35308qs025511: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050300.n35307Es014592@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:00:08 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40659
|
|
Apr 4 20:00:08 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:00:08 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 20:00:08 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 20:00:08 splunk3 sendmail[25512]: n35308qs025511: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:00:08 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:00:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:00:23 splunk3 sendmail[25576]: n3530NED025576: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:00:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:01:16 splunk3 sendmail[25727]: n353113P025727: from=root, size=443, class=0, nrcpts=1, msgid=<200904050301.n353113P025727@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 20:01:16 splunk3 sendmail[25793]: n3531GsL025793: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050301.n353113P025727@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 20:01:16 splunk3 sendmail[25727]: n353113P025727: to=root, ctladdr=root (0/0), delay=00:00:15, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3531GsL025793 Message accepted for delivery)
|
|
Apr 4 20:01:17 splunk3 sendmail[25794]: n3531GsL025793: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:01:23 splunk3 sendmail[25834]: n3531N04025834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:02:23 splunk3 sendmail[26069]: n3532NGi026069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:03:23 splunk3 sendmail[26307]: n3533NPB026307: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:04:23 splunk3 sendmail[26542]: n3534Nm1026542: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:05:09 splunk3 sendmail[26733]: n35359ac026733: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050305.n35358ge015271@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:05:09 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40715
|
|
Apr 4 20:05:09 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:05:09 splunk3 spamd[10040]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 20:05:09 splunk3 spamd[10040]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 20:05:09 splunk3 sendmail[26735]: n35359ac026733: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:05:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:05:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:05:23 splunk3 sendmail[26799]: n3535NOL026799: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:05:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:06:23 splunk3 sendmail[27036]: n3536Nsj027036: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:07:23 splunk3 sendmail[27275]: n3537N59027275: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:08:23 splunk3 sendmail[27514]: n3538Nim027514: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:09:23 splunk3 sendmail[27750]: n3539N4v027750: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:10:02 splunk3 sendmail[28002]: n353A2xI028002: from=root, size=292, class=0, nrcpts=1, msgid=<200904050310.n353A2xI028002@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 20:10:02 splunk3 sendmail[28006]: n353A2ld028006: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050310.n353A2xI028002@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 20:10:02 splunk3 sendmail[28002]: n353A2xI028002: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n353A2ld028006 Message accepted for delivery)
|
|
Apr 4 20:10:04 splunk3 sendmail[28007]: n353A2ld028006: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:10:09 splunk3 sendmail[28049]: n353A9Q9028049: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050310.n353A9G7015887@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:10:09 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40772
|
|
Apr 4 20:10:09 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:10:09 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:10:09 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:10:09 splunk3 spamd[10040]: spamd: processing message <200904050310.n353A9G7015887@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:10:12 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 20:10:12 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40772,mid=<200904050310.n353A9G7015887@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 20:10:12 splunk3 sendmail[28050]: n353A9Q9028049: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:10:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:10:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:10:23 splunk3 sendmail[28117]: n353ANxv028117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:10:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:11:23 splunk3 sendmail[28360]: n353BNh1028360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 20:12:23 splunk3 sendmail[28596]: n353CNFC028596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:13:23 splunk3 sendmail[28833]: n353DNHI028833: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:14:23 splunk3 sendmail[29069]: n353ENYp029069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:15:10 splunk3 sendmail[29259]: n353FA9D029259: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050315.n353FAiJ016679@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:15:10 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40829
|
|
Apr 4 20:15:10 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:15:10 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:15:10 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:15:10 splunk3 spamd[10040]: spamd: processing message <200904050315.n353FAiJ016679@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:15:12 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 20:15:12 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40829,mid=<200904050315.n353FAiJ016679@virt2.int.splunk.com>,bayes=0.111896693851154,autolearn=no
|
|
Apr 4 20:15:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:15:13 splunk3 sendmail[29260]: n353FA9D029259: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:15:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:15:23 splunk3 sendmail[29328]: n353FNus029328: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:15:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:16:23 splunk3 sendmail[29569]: n353GNkt029569: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:17:23 splunk3 sendmail[29807]: n353HNbU029807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:18:23 splunk3 sendmail[30041]: n353INLg030041: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:19:23 splunk3 sendmail[30281]: n353JN71030281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:19:42 splunk3 sendmail[30339]: n353JfrP030339: from=<3TSPYSRQKBpI2AA270w70DFE-9AD0B7K2AA270.yA8EBw880EB7G964F.yA8@alerts.bounces.google.com>, size=8950, class=0, nrcpts=1, msgid=<001636163cc7ae3e420466c6408c@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 4 20:19:42 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40873
|
|
Apr 4 20:19:42 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:19:42 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:19:42 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:19:42 splunk3 spamd[10040]: spamd: processing message <001636163cc7ae3e420466c6408c@google.com> for spamme:501
|
|
Apr 4 20:19:44 splunk3 spamd[10040]: spamd: clean message (-2.3/5.0) for spamme:501 in 2.2 seconds, 9384 bytes.
|
|
Apr 4 20:19:44 splunk3 spamd[10040]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.2,size=9384,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40873,mid=<001636163cc7ae3e420466c6408c@google.com>,bayes=0,autolearn=ham
|
|
Apr 4 20:19:44 splunk3 sendmail[30356]: n353JfrP030339: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=39165, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:19:44 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:20:10 splunk3 sendmail[30480]: n353KA3f030480: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050320.n353KAHX017310@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:20:11 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40885
|
|
Apr 4 20:20:11 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:20:11 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:20:11 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:20:11 splunk3 spamd[10040]: spamd: processing message <200904050320.n353KAHX017310@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:20:13 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 20:20:13 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40885,mid=<200904050320.n353KAHX017310@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 20:20:13 splunk3 sendmail[30481]: n353KA3f030480: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:20:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:20:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:20:23 splunk3 sendmail[30544]: n353KNZw030544: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:20:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:21:23 splunk3 sendmail[30785]: n353LNeK030785: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:22:23 splunk3 sendmail[31021]: n353MNSi031021: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:23:23 splunk3 sendmail[31263]: n353NNSr031263: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:24:23 splunk3 sendmail[31496]: n353ONeP031496: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:25:11 splunk3 sendmail[31690]: n353PBN5031690: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050325.n353PBUH017917@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:25:11 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40941
|
|
Apr 4 20:25:11 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:25:11 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:25:11 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:25:11 splunk3 spamd[10040]: spamd: processing message <200904050325.n353PBUH017917@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:25:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:25:15 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Apr 4 20:25:15 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40941,mid=<200904050325.n353PBUH017917@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 20:25:15 splunk3 sendmail[31691]: n353PBN5031690: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:25:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:25:23 splunk3 sendmail[31755]: n353PNEn031755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:25:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:26:23 splunk3 sendmail[31994]: n353QNv9031994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 20:27:23 splunk3 sendmail[32231]: n353RNmG032231: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:28:23 splunk3 sendmail[32468]: n353SN2o032468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:29:23 splunk3 sendmail[32707]: n353TNJd032707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:30:11 splunk3 sendmail[452]: n353UBwT000452: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050330.n353UBRL018537@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:30:11 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 40998
|
|
Apr 4 20:30:11 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:30:12 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:30:12 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:30:12 splunk3 spamd[10040]: spamd: processing message <200904050330.n353UBRL018537@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:30:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:30:14 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.8 seconds, 1308 bytes.
|
|
Apr 4 20:30:14 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.8,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=40998,mid=<200904050330.n353UBRL018537@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 20:30:14 splunk3 sendmail[454]: n353UBwT000452: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:30:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:30:23 splunk3 sendmail[501]: n353UNhS000501: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:30:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:31:23 splunk3 sendmail[744]: n353VNOm000744: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:32:23 splunk3 sendmail[978]: n353WNhH000978: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:33:23 splunk3 sendmail[1217]: n353XNmP001217: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:34:24 splunk3 sendmail[1451]: n353YNCS001451: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:35:12 splunk3 sendmail[1667]: n353ZC9Q001667: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050335.n353ZCqi019284@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:35:12 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41054
|
|
Apr 4 20:35:12 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:35:12 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:35:12 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:35:12 splunk3 spamd[10040]: spamd: processing message <200904050335.n353ZCqi019284@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:35:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:35:14 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 4 20:35:14 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41054,mid=<200904050335.n353ZCqi019284@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 20:35:14 splunk3 sendmail[1668]: n353ZC9Q001667: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:35:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:35:24 splunk3 sendmail[1712]: n353ZOmM001712: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:35:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:36:24 splunk3 sendmail[1951]: n353aOfL001951: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:37:24 splunk3 sendmail[2192]: n353bOAV002192: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:38:24 splunk3 sendmail[2428]: n353cOpX002428: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:39:24 splunk3 sendmail[2673]: n353dO24002673: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:40:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:40:14 splunk3 sendmail[2902]: n353eE5a002902: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050340.n353eCsp019916@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:40:14 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41110
|
|
Apr 4 20:40:14 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:40:14 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:40:14 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:40:14 splunk3 spamd[10040]: spamd: processing message <200904050340.n353eCsp019916@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:40:16 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 20:40:16 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41110,mid=<200904050340.n353eCsp019916@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 20:40:16 splunk3 sendmail[2903]: n353eE5a002902: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:40:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:40:24 splunk3 sendmail[2946]: n353eOmR002946: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:40:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:41:24 splunk3 sendmail[3196]: n353fOmx003196: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 20:42:24 splunk3 sendmail[3433]: n353gOh6003433: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:43:24 splunk3 sendmail[3696]: n353hOAA003696: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:43:39 splunk3 sendmail[3761]: n353hcfq003761: ruleset=check_rcpt, arg1=<sanjinn001@yahoo.com.tw>, relay=61-231-68-166.dynamic.hinet.net [61.231.68.166], reject=550 5.7.1 <sanjinn001@yahoo.com.tw>... Relaying denied
|
|
Apr 4 20:44:24 splunk3 sendmail[3940]: n353iOMN003940: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:45:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:45:15 splunk3 sendmail[4167]: n353jFxh004167: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050345.n353jFTE020529@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:45:15 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41166
|
|
Apr 4 20:45:15 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:45:15 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:45:15 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:45:15 splunk3 spamd[10040]: spamd: processing message <200904050345.n353jFTE020529@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:45:17 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 20:45:17 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41166,mid=<200904050345.n353jFTE020529@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 20:45:17 splunk3 sendmail[4168]: n353jFxh004167: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:45:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:45:24 splunk3 sendmail[4215]: n353jOHp004215: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:45:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:46:24 splunk3 sendmail[4466]: n353kO2h004466: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:47:24 splunk3 sendmail[4707]: n353lOSR004707: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:48:24 splunk3 sendmail[4950]: n353mOki004950: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:49:24 splunk3 sendmail[5227]: n353nOT0005227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:50:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:50:15 splunk3 sendmail[5449]: n353oFbO005449: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050350.n353oFbT021144@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:50:15 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41222
|
|
Apr 4 20:50:15 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:50:15 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:50:15 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:50:15 splunk3 spamd[10040]: spamd: processing message <200904050350.n353oFbT021144@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:50:18 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 20:50:18 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41222,mid=<200904050350.n353oFbT021144@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 20:50:18 splunk3 sendmail[5450]: n353oFbO005449: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:50:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:50:24 splunk3 sendmail[5492]: n353oOlP005492: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:50:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:51:24 splunk3 sendmail[5733]: n353pOQ9005733: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:52:24 splunk3 sendmail[5966]: n353qOBW005966: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:53:24 splunk3 sendmail[6207]: n353rOa8006207: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:54:24 splunk3 sendmail[6443]: n353sOVe006443: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:55:14 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 20:55:16 splunk3 sendmail[6661]: n353tGA1006661: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050355.n353tGs7021750@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 20:55:16 splunk3 spamd[10040]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41277
|
|
Apr 4 20:55:16 splunk3 spamd[10040]: spamd: setuid to spamme succeeded
|
|
Apr 4 20:55:16 splunk3 spamd[10040]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 20:55:16 splunk3 spamd[10040]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 20:55:16 splunk3 spamd[10040]: spamd: processing message <200904050355.n353tGs7021750@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 20:55:18 splunk3 spamd[10040]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 20:55:18 splunk3 spamd[10040]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41277,mid=<200904050355.n353tGs7021750@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 20:55:18 splunk3 sendmail[6662]: n353tGA1006661: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 20:55:18 splunk3 spamd[3033]: prefork: child states: BI
|
|
Apr 4 20:55:18 splunk3 spamd[3033]: spamd: handled cleanup of child pid 10040 due to SIGCHLD
|
|
Apr 4 20:55:18 splunk3 spamd[3033]: spamd: server successfully spawned child process, pid 6683
|
|
Apr 4 20:55:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 20:55:24 splunk3 sendmail[6701]: n353tOJa006701: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:55:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 20:56:24 splunk3 sendmail[6942]: n353uOuS006942: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 20:57:24 splunk3 sendmail[7180]: n353vOrJ007180: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:58:24 splunk3 sendmail[7417]: n353wO81007417: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 20:59:24 splunk3 sendmail[7664]: n353xOsm007664: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:00:04 splunk3 sendmail[7884]: n35404gQ007884: from=root, size=291, class=0, nrcpts=1, msgid=<200904050400.n35404gQ007884@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 21:00:04 splunk3 sendmail[7888]: n35404mb007888: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050400.n35404gQ007884@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 21:00:04 splunk3 sendmail[7884]: n35404gQ007884: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35404mb007888 Message accepted for delivery)
|
|
Apr 4 21:00:05 splunk3 sendmail[7889]: n35404mb007888: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:00:08 splunk3 sendmail[7927]: n35408gG007927: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904050400.n35408gG007927@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 21:00:08 splunk3 sendmail[7929]: n35408gG007927: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 21:00:08 splunk3 sendmail[7929]: n35408gG007927: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 4 21:00:08 splunk3 sendmail[7929]: n35408gG007927: n35408gG007929: postmaster notify: User unknown
|
|
Apr 4 21:00:09 splunk3 sendmail[7929]: n35408gG007929: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:00:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:00:17 splunk3 sendmail[7982]: n3540Ha9007982: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050400.n3540GqT022389@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:00:17 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41342
|
|
Apr 4 21:00:17 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:00:17 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 21:00:17 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 21:00:17 splunk3 sendmail[7983]: n3540Ha9007982: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:00:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:00:24 splunk3 sendmail[8008]: n3540Ox8008008: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:00:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:01:15 splunk3 sendmail[8173]: n35411N8008173: from=root, size=443, class=0, nrcpts=1, msgid=<200904050401.n35411N8008173@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 21:01:15 splunk3 sendmail[8224]: n3541FXn008224: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050401.n35411N8008173@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 21:01:15 splunk3 sendmail[8173]: n35411N8008173: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3541FXn008224 Message accepted for delivery)
|
|
Apr 4 21:01:16 splunk3 sendmail[8225]: n3541FXn008224: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:01:24 splunk3 sendmail[8266]: n3541OcD008266: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:02:24 splunk3 sendmail[8498]: n3542Ooa008498: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:03:24 splunk3 sendmail[8738]: n3543O88008738: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:04:24 splunk3 sendmail[8974]: n3544OD4008974: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:05:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:05:17 splunk3 sendmail[9207]: n3545HXg009207: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050405.n3545HhZ023070@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:05:17 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41398
|
|
Apr 4 21:05:17 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:05:17 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 21:05:17 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 21:05:17 splunk3 sendmail[9208]: n3545HXg009207: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:05:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:05:24 splunk3 sendmail[9232]: n3545OII009232: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:05:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:06:24 splunk3 sendmail[9469]: n3546Osv009469: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:07:24 splunk3 sendmail[9719]: n3547Ou5009719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:08:24 splunk3 sendmail[9958]: n3548O3s009958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:09:24 splunk3 sendmail[10194]: n3549OCm010194: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:10:02 splunk3 sendmail[10446]: n354A2fo010446: from=root, size=292, class=0, nrcpts=1, msgid=<200904050410.n354A2fo010446@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 21:10:02 splunk3 sendmail[10451]: n354A2ie010451: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050410.n354A2fo010446@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 21:10:02 splunk3 sendmail[10446]: n354A2fo010446: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n354A2ie010451 Message accepted for delivery)
|
|
Apr 4 21:10:03 splunk3 sendmail[10452]: n354A2ie010451: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:10:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:10:18 splunk3 sendmail[10538]: n354AIWL010538: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050410.n354AIwm023721@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:10:18 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41455
|
|
Apr 4 21:10:18 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:10:18 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:10:18 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:10:18 splunk3 spamd[6683]: spamd: processing message <200904050410.n354AIwm023721@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:10:20 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 4 21:10:20 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41455,mid=<200904050410.n354AIwm023721@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 21:10:20 splunk3 sendmail[10539]: n354AIWL010538: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:10:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:10:24 splunk3 sendmail[10562]: n354AOjO010562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:10:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:11:24 splunk3 sendmail[10805]: n354BODe010805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 21:12:24 splunk3 sendmail[11040]: n354COtc011040: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:13:24 splunk3 sendmail[11282]: n354DOWn011282: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:14:24 splunk3 sendmail[11515]: n354EOPf011515: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:15:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:15:20 splunk3 sendmail[11747]: n354FK7A011747: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050415.n354FIXe024504@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:15:20 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41511
|
|
Apr 4 21:15:20 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:15:20 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:15:20 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:15:20 splunk3 spamd[6683]: spamd: processing message <200904050415.n354FIXe024504@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:15:23 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 21:15:23 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41511,mid=<200904050415.n354FIXe024504@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 21:15:23 splunk3 sendmail[11748]: n354FK7A011747: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:15:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:15:24 splunk3 sendmail[11772]: n354FO8v011772: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:15:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:16:24 splunk3 sendmail[12010]: n354GOvL012010: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:17:24 splunk3 sendmail[12250]: n354HOHC012250: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:18:24 splunk3 sendmail[12485]: n354IOSX012485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:19:24 splunk3 sendmail[12725]: n354JOdg012725: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:20:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:20:21 splunk3 sendmail[12961]: n354KLuN012961: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050420.n354KLmK025139@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:20:21 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41566
|
|
Apr 4 21:20:21 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:20:21 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:20:21 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:20:21 splunk3 spamd[6683]: spamd: processing message <200904050420.n354KLmK025139@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:20:23 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 4 21:20:23 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41566,mid=<200904050420.n354KLmK025139@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 21:20:23 splunk3 sendmail[12962]: n354KLuN012961: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:20:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:20:24 splunk3 sendmail[12985]: n354KOMR012985: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:20:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:21:24 splunk3 sendmail[13227]: n354LOKM013227: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:22:24 splunk3 sendmail[13501]: n354MOj0013501: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:23:24 splunk3 sendmail[13743]: n354NO4h013743: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:24:24 splunk3 sendmail[13979]: n354OOgO013979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:25:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:25:21 splunk3 sendmail[14232]: n354PLU1014232: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050425.n354PL5R025741@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:25:21 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41622
|
|
Apr 4 21:25:21 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:25:21 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:25:21 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:25:21 splunk3 spamd[6683]: spamd: processing message <200904050425.n354PL5R025741@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:25:23 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 21:25:23 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41622,mid=<200904050425.n354PL5R025741@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 21:25:23 splunk3 sendmail[14233]: n354PLU1014232: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:25:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:25:24 splunk3 sendmail[14239]: n354POOO014239: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:25:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:26:24 splunk3 sendmail[14478]: n354QO6T014478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 21:27:24 splunk3 sendmail[14715]: n354ROKb014715: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:28:24 splunk3 sendmail[14948]: n354SOWW014948: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:29:24 splunk3 sendmail[15186]: n354TOJY015186: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:30:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:30:22 splunk3 sendmail[15440]: n354UMsK015440: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050430.n354ULkV026362@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:30:22 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41678
|
|
Apr 4 21:30:22 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:30:22 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:30:22 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:30:22 splunk3 spamd[6683]: spamd: processing message <200904050430.n354ULkV026362@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:30:24 splunk3 sendmail[15446]: n354UOah015446: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:30:24 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 21:30:24 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41678,mid=<200904050430.n354ULkV026362@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 21:30:24 splunk3 sendmail[15441]: n354UMsK015440: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:30:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:30:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:31:24 splunk3 sendmail[15691]: n354VOEV015691: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:32:24 splunk3 sendmail[15926]: n354WOaH015926: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:33:24 splunk3 sendmail[16165]: n354XOeb016165: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:34:24 splunk3 sendmail[16401]: n354YORJ016401: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:35:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:35:22 splunk3 sendmail[16654]: n354ZM6o016654: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050435.n354ZMxA027106@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:35:22 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41734
|
|
Apr 4 21:35:22 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:35:22 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:35:22 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:35:22 splunk3 spamd[6683]: spamd: processing message <200904050435.n354ZMxA027106@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:35:24 splunk3 sendmail[16660]: n354ZOwo016660: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:35:24 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 21:35:24 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41734,mid=<200904050435.n354ZMxA027106@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 21:35:24 splunk3 sendmail[16655]: n354ZM6o016654: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:35:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:35:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:36:24 splunk3 sendmail[16898]: n354aOCh016898: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:37:24 splunk3 sendmail[17137]: n354bO6M017137: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:38:24 splunk3 sendmail[17378]: n354cOeK017378: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:39:24 splunk3 sendmail[17617]: n354dOVO017617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:40:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:40:23 splunk3 sendmail[17871]: n354eNHu017871: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050440.n354eN5c027755@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:40:23 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41790
|
|
Apr 4 21:40:23 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:40:23 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:40:23 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:40:23 splunk3 spamd[6683]: spamd: processing message <200904050440.n354eN5c027755@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:40:24 splunk3 sendmail[17878]: n354eOlV017878: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:40:25 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 4 21:40:25 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41790,mid=<200904050440.n354eN5c027755@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 21:40:25 splunk3 sendmail[17873]: n354eNHu017871: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:40:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:40:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:41:24 splunk3 sendmail[18120]: n354fOeM018120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 21:42:24 splunk3 sendmail[18353]: n354gO19018353: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:43:24 splunk3 sendmail[18592]: n354hO4h018592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:43:39 splunk3 sendmail[3761]: n353hcfq003761: timeout waiting for input from 61-231-68-166.dynamic.hinet.net during server cmd read
|
|
Apr 4 21:43:39 splunk3 sendmail[3761]: n353hcfq003761: lost input channel from 61-231-68-166.dynamic.hinet.net [61.231.68.166] to MTA after rcpt
|
|
Apr 4 21:43:39 splunk3 sendmail[3761]: n353hcfq003761: from=<0403pc@163.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=61-231-68-166.dynamic.hinet.net [61.231.68.166]
|
|
Apr 4 21:44:24 splunk3 sendmail[18825]: n354iOsl018825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:45:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:45:24 splunk3 sendmail[19079]: n354jOep019079: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050445.n354jNPR028364@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:45:24 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41846
|
|
Apr 4 21:45:24 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:45:24 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:45:24 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:45:24 splunk3 spamd[6683]: spamd: processing message <200904050445.n354jNPR028364@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:45:24 splunk3 sendmail[19085]: n354jO16019085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:45:26 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 21:45:26 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41846,mid=<200904050445.n354jNPR028364@virt2.int.splunk.com>,bayes=0.111928727106548,autolearn=no
|
|
Apr 4 21:45:26 splunk3 sendmail[19080]: n354jOep019079: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:45:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:45:36 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:46:24 splunk3 sendmail[19324]: n354kOHE019324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:47:24 splunk3 sendmail[19562]: n354lO1E019562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:48:12 splunk3 sendmail[19753]: n354mBVw019753: from=<3CzjYSRQKBmUJRRJOHDOHUWV-QRUHSObJRRJOH.FRPVSDPPHVSOXQNLW.FRP@alerts.bounces.google.com>, size=2943, class=0, nrcpts=1, msgid=<000e0cd484942adbcd0466c77db2@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 4 21:48:12 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41872
|
|
Apr 4 21:48:12 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:48:12 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:48:12 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:48:12 splunk3 spamd[6683]: spamd: processing message <000e0cd484942adbcd0466c77db2@google.com> for spamme:501
|
|
Apr 4 21:48:14 splunk3 spamd[6683]: spamd: clean message (-2.4/5.0) for spamme:501 in 2.6 seconds, 3377 bytes.
|
|
Apr 4 21:48:14 splunk3 spamd[6683]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.6,size=3377,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41872,mid=<000e0cd484942adbcd0466c77db2@google.com>,bayes=0,autolearn=ham
|
|
Apr 4 21:48:14 splunk3 sendmail[19754]: n354mBVw019753: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33158, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:48:14 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:48:24 splunk3 sendmail[19801]: n354mO7n019801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:49:24 splunk3 sendmail[20040]: n354nOhc020040: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:50:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:50:24 splunk3 sendmail[20294]: n354oO1x020294: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:50:24 splunk3 sendmail[20295]: n354oOI5020295: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050450.n354oOcO028978@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:50:24 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41903
|
|
Apr 4 21:50:24 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:50:24 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:50:24 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:50:24 splunk3 spamd[6683]: spamd: processing message <200904050450.n354oOcO028978@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:50:26 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 21:50:26 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41903,mid=<200904050450.n354oOcO028978@virt2.int.splunk.com>,bayes=0.111960760157812,autolearn=no
|
|
Apr 4 21:50:26 splunk3 sendmail[20296]: n354oOI5020295: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:50:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:50:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:51:24 splunk3 sendmail[20541]: n354pOo7020541: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:52:24 splunk3 sendmail[20779]: n354qO8T020779: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:53:24 splunk3 sendmail[21022]: n354rOaU021022: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:54:24 splunk3 sendmail[21257]: n354sOtX021257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:55:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 21:55:24 splunk3 sendmail[21510]: n354tO2n021510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:55:25 splunk3 sendmail[21511]: n354tPDD021511: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050455.n354tO94029585@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 21:55:25 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 41958
|
|
Apr 4 21:55:25 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 21:55:25 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 21:55:25 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 21:55:25 splunk3 spamd[6683]: spamd: processing message <200904050455.n354tO94029585@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 21:55:27 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 21:55:27 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=41958,mid=<200904050455.n354tO94029585@virt2.int.splunk.com>,bayes=0.111960760157812,autolearn=no
|
|
Apr 4 21:55:27 splunk3 sendmail[21512]: n354tPDD021511: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 21:55:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 21:55:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 21:56:24 splunk3 sendmail[21754]: n354uOA4021754: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 21:57:24 splunk3 sendmail[21994]: n354vOOw021994: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:58:24 splunk3 sendmail[22228]: n354wOdg022228: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 21:59:24 splunk3 sendmail[22468]: n354xObN022468: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:00:04 splunk3 sendmail[22687]: n35504Jm022687: from=root, size=291, class=0, nrcpts=1, msgid=<200904050500.n35504Jm022687@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 22:00:04 splunk3 sendmail[22691]: n35504He022691: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050500.n35504Jm022687@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 22:00:04 splunk3 sendmail[22687]: n35504Jm022687: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35504He022691 Message accepted for delivery)
|
|
Apr 4 22:00:05 splunk3 sendmail[22692]: n35504He022691: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:00:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:00:13 splunk3 sendmail[22754]: n3550DOO022754: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904050500.n3550DOO022754@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 22:00:13 splunk3 sendmail[22756]: n3550DOO022754: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 22:00:13 splunk3 sendmail[22756]: n3550DOO022754: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 4 22:00:13 splunk3 sendmail[22756]: n3550DOO022754: n3550DOO022756: postmaster notify: User unknown
|
|
Apr 4 22:00:15 splunk3 sendmail[22756]: n3550DOO022756: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:00:24 splunk3 sendmail[22807]: n3550OZw022807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:00:26 splunk3 sendmail[22812]: n3550PO3022812: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050500.n3550PIf030236@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:00:26 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42023
|
|
Apr 4 22:00:26 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:00:26 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 22:00:26 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 22:00:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:00:26 splunk3 sendmail[22825]: n3550PO3022812: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:00:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:01:01 splunk3 sendmail[22975]: n35511CX022975: from=root, size=443, class=0, nrcpts=1, msgid=<200904050501.n35511CX022975@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 22:01:01 splunk3 sendmail[22978]: n355114j022978: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050501.n35511CX022975@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 22:01:01 splunk3 sendmail[22975]: n35511CX022975: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n355114j022978 Message accepted for delivery)
|
|
Apr 4 22:01:03 splunk3 sendmail[22979]: n355114j022978: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:01:24 splunk3 sendmail[23068]: n3551O7N023068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:02:24 splunk3 sendmail[23302]: n3552Ofx023302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:03:24 splunk3 sendmail[23539]: n3553OqG023539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:04:24 splunk3 sendmail[23773]: n3554Olj023773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:05:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:05:24 splunk3 sendmail[24024]: n3555Oh8024024: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:05:26 splunk3 sendmail[24044]: n3555Qgp024044: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050505.n3555Q07030911@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:05:26 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42079
|
|
Apr 4 22:05:26 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:05:26 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 22:05:26 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 22:05:26 splunk3 sendmail[24045]: n3555Qgp024044: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:05:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:05:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:06:24 splunk3 sendmail[24269]: n3556OSO024269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:07:24 splunk3 sendmail[24510]: n3557O9q024510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:08:24 splunk3 sendmail[24748]: n3558OTn024748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:09:24 splunk3 sendmail[24987]: n3559Ojd024987: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:10:02 splunk3 sendmail[25238]: n355A2Ba025238: from=root, size=292, class=0, nrcpts=1, msgid=<200904050510.n355A2Ba025238@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 22:10:02 splunk3 sendmail[25243]: n355A2uw025243: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050510.n355A2Ba025238@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 22:10:02 splunk3 sendmail[25238]: n355A2Ba025238: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n355A2uw025243 Message accepted for delivery)
|
|
Apr 4 22:10:04 splunk3 sendmail[25244]: n355A2uw025243: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:10:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:10:24 splunk3 sendmail[25346]: n355AO1l025346: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:10:27 splunk3 sendmail[25366]: n355ARdK025366: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050510.n355AQxa031530@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:10:27 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42136
|
|
Apr 4 22:10:27 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:10:27 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:10:27 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:10:27 splunk3 spamd[6683]: spamd: processing message <200904050510.n355AQxa031530@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:10:29 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 4 22:10:29 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42136,mid=<200904050510.n355AQxa031530@virt2.int.splunk.com>,bayes=0.111960760157812,autolearn=no
|
|
Apr 4 22:10:29 splunk3 sendmail[25367]: n355ARdK025366: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:10:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:10:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:11:24 splunk3 sendmail[25596]: n355BOea025596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 22:12:24 splunk3 sendmail[25829]: n355COnd025829: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:13:24 splunk3 sendmail[26070]: n355DOvQ026070: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:14:24 splunk3 sendmail[26306]: n355EOGZ026306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:15:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:15:24 splunk3 sendmail[26558]: n355FOw8026558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:15:28 splunk3 sendmail[26576]: n355FSXu026576: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050515.n355FRQa032334@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:15:28 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42192
|
|
Apr 4 22:15:28 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:15:28 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:15:28 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:15:28 splunk3 spamd[6683]: spamd: processing message <200904050515.n355FRQa032334@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:15:30 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 22:15:30 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42192,mid=<200904050515.n355FRQa032334@virt2.int.splunk.com>,bayes=0.111960760157812,autolearn=no
|
|
Apr 4 22:15:30 splunk3 sendmail[26577]: n355FSXu026576: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:15:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:15:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:16:24 splunk3 sendmail[26801]: n355GOC9026801: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:17:24 splunk3 sendmail[27037]: n355HOkn027037: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:18:24 splunk3 sendmail[27271]: n355IOX1027271: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:19:24 splunk3 sendmail[27507]: n355JO85027507: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:20:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:20:24 splunk3 sendmail[27763]: n355KOvd027763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:20:29 splunk3 sendmail[27781]: n355KTCh027781: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904050520.n355KS0U000476@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:20:29 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42248
|
|
Apr 4 22:20:29 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:20:29 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:20:29 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:20:29 splunk3 spamd[6683]: spamd: processing message <200904050520.n355KS0U000476@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:20:31 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1302 bytes.
|
|
Apr 4 22:20:31 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42248,mid=<200904050520.n355KS0U000476@virt2.int.splunk.com>,bayes=0.0660029680868447,autolearn=no
|
|
Apr 4 22:20:31 splunk3 sendmail[27782]: n355KTCh027781: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:20:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:20:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:21:24 splunk3 sendmail[28013]: n355LOjT028013: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:22:24 splunk3 sendmail[28249]: n355MOFK028249: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:23:24 splunk3 sendmail[28491]: n355NOMx028491: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:24:24 splunk3 sendmail[28724]: n355OOLR028724: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:25:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:25:24 splunk3 sendmail[28979]: n355POPF028979: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:25:30 splunk3 sendmail[28999]: n355PURi028999: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050525.n355PTwO001107@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:25:30 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42304
|
|
Apr 4 22:25:30 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:25:30 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:25:30 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:25:30 splunk3 spamd[6683]: spamd: processing message <200904050525.n355PTwO001107@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:25:32 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.3 seconds, 1305 bytes.
|
|
Apr 4 22:25:32 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.3,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42304,mid=<200904050525.n355PTwO001107@virt2.int.splunk.com>,bayes=0.168844745800503,autolearn=no
|
|
Apr 4 22:25:32 splunk3 sendmail[29016]: n355PURi028999: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:25:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:25:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:26:24 splunk3 sendmail[29221]: n355QOEg029221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 22:27:24 splunk3 sendmail[29463]: n355RO7E029463: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:27:48 splunk3 sendmail[29464]: n355RO5q029464: from=<taylorp@deactivatedon.com>, size=5784, class=0, nrcpts=1, msgid=<b42f019db911$5f974223$d917a374@deactivatedon.com>, proto=ESMTP, daemon=MTA, relay=[92.81.239.124]
|
|
Apr 4 22:27:48 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42327
|
|
Apr 4 22:27:48 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:27:48 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:27:48 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:27:48 splunk3 spamd[6683]: spamd: processing message <b42f019db911$5f974223$d917a374@deactivatedon.com> for spamme:501
|
|
Apr 4 22:27:50 splunk3 spamd[6683]: spamd: identified spam (28.8/5.0) for spamme:501 in 1.8 seconds, 6069 bytes.
|
|
Apr 4 22:27:50 splunk3 spamd[6683]: spamd: result: Y 28 - BAYES_99,DATE_IN_FUTURE_96_XX,DRUGS_ERECTILE,FROM_EXCESS_BASE64,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,MSGID_OUTLOOK_INVALID,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,SUBJECT_EXCESS_BASE64,URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL scantime=1.8,size=6069,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42327,mid=<b42f019db911$5f974223$d917a374@deactivatedon.com>,bayes=1,autolearn=spam
|
|
Apr 4 22:27:50 splunk3 sendmail[29561]: n355RO5q029464: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:02, mailer=local, pri=35966, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:27:50 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:28:24 splunk3 sendmail[29705]: n355SOmJ029705: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:29:24 splunk3 sendmail[29945]: n355TOaE029945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:30:00 splunk3 sendmail[30095]: n355U0YZ030095: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050530.n355U0D1001661@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:30:00 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42348
|
|
Apr 4 22:30:00 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:30:00 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:30:00 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:30:00 splunk3 spamd[6683]: spamd: processing message <200904050530.n355U0D1001661@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:30:02 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 22:30:02 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42348,mid=<200904050530.n355U0D1001661@virt2.int.splunk.com>,bayes=0.168839400484234,autolearn=no
|
|
Apr 4 22:30:02 splunk3 sendmail[30096]: n355U0YZ030095: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:30:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:30:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:30:24 splunk3 sendmail[30205]: n355UOGi030205: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:30:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:31:24 splunk3 sendmail[30447]: n355VOk6030447: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:32:24 splunk3 sendmail[30681]: n355WO4O030681: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:33:24 splunk3 sendmail[30916]: n355XO2N030916: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:34:24 splunk3 sendmail[31152]: n355YOh4031152: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:35:01 splunk3 sendmail[31309]: n355Z1q4031309: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050535.n355Z11G002428@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:35:01 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42404
|
|
Apr 4 22:35:01 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:35:01 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:35:01 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:35:01 splunk3 spamd[6683]: spamd: processing message <200904050535.n355Z11G002428@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:35:03 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 4 22:35:04 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42404,mid=<200904050535.n355Z11G002428@virt2.int.splunk.com>,bayes=0.168839400484234,autolearn=no
|
|
Apr 4 22:35:04 splunk3 sendmail[31310]: n355Z1q4031309: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:35:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:35:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:35:24 splunk3 sendmail[31410]: n355ZORZ031410: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:35:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:36:24 splunk3 sendmail[31650]: n355aO9W031650: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:36:54 splunk3 sendmail[31764]: n355arfh031764: from=<3dUPYSRQKBtoCKKCHA6HANPO-JKNALHUCKKCHA.8KIOL6IIAOLHQJGEP.8KI@alerts.bounces.google.com>, size=2806, class=0, nrcpts=1, msgid=<000e0cd47e545af4750466c82bd3@google.com>, proto=ESMTP, daemon=MTA, relay=yw-out-1516.google.com [74.125.46.162]
|
|
Apr 4 22:36:54 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42430
|
|
Apr 4 22:36:54 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:36:54 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:36:54 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:36:54 splunk3 spamd[6683]: spamd: processing message <000e0cd47e545af4750466c82bd3@google.com> for spamme:501
|
|
Apr 4 22:36:57 splunk3 spamd[6683]: spamd: clean message (-2.2/5.0) for spamme:501 in 2.7 seconds, 3235 bytes.
|
|
Apr 4 22:36:57 splunk3 spamd[6683]: spamd: result: . -2 - AWL,BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY scantime=2.7,size=3235,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42430,mid=<000e0cd47e545af4750466c82bd3@google.com>,bayes=5.55111512312578e-17,autolearn=ham
|
|
Apr 4 22:36:57 splunk3 sendmail[31765]: n355arfh031764: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=33016, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:36:57 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:37:24 splunk3 sendmail[31895]: n355bOP1031895: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:38:24 splunk3 sendmail[32130]: n355cOC0032130: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:39:24 splunk3 sendmail[32369]: n355dOPh032369: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:40:02 splunk3 sendmail[32527]: n355e2wv032527: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050540.n355e1Qu003042@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:40:02 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42461
|
|
Apr 4 22:40:02 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:40:02 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:40:02 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:40:02 splunk3 spamd[6683]: spamd: processing message <200904050540.n355e1Qu003042@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:40:04 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 22:40:04 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42461,mid=<200904050540.n355e1Qu003042@virt2.int.splunk.com>,bayes=0.168877204673057,autolearn=no
|
|
Apr 4 22:40:04 splunk3 sendmail[32528]: n355e2wv032527: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:40:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:40:13 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:40:24 splunk3 sendmail[32629]: n355eOA1032629: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:40:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:41:24 splunk3 sendmail[406]: n355fOwO000406: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 22:42:24 splunk3 sendmail[642]: n355gOVw000642: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:43:24 splunk3 sendmail[883]: n355hOI6000883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:44:25 splunk3 sendmail[1117]: n355iPu3001117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:45:02 splunk3 sendmail[1275]: n355j2UX001275: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050545.n355j2T8003710@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:45:02 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42517
|
|
Apr 4 22:45:02 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:45:02 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:45:02 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:45:02 splunk3 spamd[6683]: spamd: processing message <200904050545.n355j2T8003710@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:45:04 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 22:45:04 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42517,mid=<200904050545.n355j2T8003710@virt2.int.splunk.com>,bayes=0.168877204673057,autolearn=no
|
|
Apr 4 22:45:04 splunk3 sendmail[1276]: n355j2UX001275: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:45:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:45:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:45:25 splunk3 sendmail[1376]: n355jPnR001376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:45:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:46:25 splunk3 sendmail[1616]: n355kPBN001616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:47:25 splunk3 sendmail[1854]: n355lPrX001854: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:48:25 splunk3 sendmail[2092]: n355mPul002092: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:49:25 splunk3 sendmail[2332]: n355nPac002332: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:50:03 splunk3 sendmail[2491]: n355o379002491: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050550.n355o3VR004326@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:50:03 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42573
|
|
Apr 4 22:50:03 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:50:03 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:50:03 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:50:03 splunk3 spamd[6683]: spamd: processing message <200904050550.n355o3VR004326@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:50:05 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 4 22:50:05 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42573,mid=<200904050550.n355o3VR004326@virt2.int.splunk.com>,bayes=0.168877204673057,autolearn=no
|
|
Apr 4 22:50:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:50:05 splunk3 sendmail[2492]: n355o379002491: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:50:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:50:25 splunk3 sendmail[2597]: n355oPBT002597: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:50:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:51:25 splunk3 sendmail[2848]: n355pPTi002848: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:52:25 splunk3 sendmail[3093]: n355qPD2003093: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:53:25 splunk3 sendmail[3338]: n355rPxn003338: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:54:25 splunk3 sendmail[3591]: n355sPpp003591: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:55:03 splunk3 sendmail[3760]: n355t3lb003760: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050555.n355t3iT004932@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 22:55:03 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42628
|
|
Apr 4 22:55:03 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 22:55:03 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 22:55:03 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 22:55:04 splunk3 spamd[6683]: spamd: processing message <200904050555.n355t3iT004932@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 22:55:06 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 4 22:55:06 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42628,mid=<200904050555.n355t3iT004932@virt2.int.splunk.com>,bayes=0.168877204673057,autolearn=no
|
|
Apr 4 22:55:06 splunk3 sendmail[3761]: n355t3lb003760: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 22:55:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 22:55:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 22:55:25 splunk3 sendmail[3862]: n355tPGX003862: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:55:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 22:56:25 splunk3 sendmail[4115]: n355uPbv004115: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 22:57:25 splunk3 sendmail[4388]: n355vPq2004388: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:58:25 splunk3 sendmail[4624]: n355wP4m004624: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 22:59:25 splunk3 sendmail[4863]: n355xP6s004863: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:00:04 splunk3 sendmail[5073]: n35604Tw005073: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050600.n35604xQ005565@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:00:04 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42685
|
|
Apr 4 23:00:04 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:00:04 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 23:00:04 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 23:00:04 splunk3 sendmail[5074]: n35604Tw005073: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:00:04 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:00:04 splunk3 sendmail[5081]: n35604TZ005081: from=root, size=291, class=0, nrcpts=1, msgid=<200904050600.n35604TZ005081@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 23:00:04 splunk3 sendmail[5085]: n35604WN005085: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050600.n35604TZ005081@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 23:00:04 splunk3 sendmail[5081]: n35604TZ005081: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35604WN005085 Message accepted for delivery)
|
|
Apr 4 23:00:06 splunk3 sendmail[5086]: n35604WN005085: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:00:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:00:20 splunk3 sendmail[5209]: n3560K2I005209: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904050600.n3560K2I005209@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 23:00:20 splunk3 sendmail[5220]: n3560K2I005209: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 4 23:00:20 splunk3 sendmail[5220]: n3560K2I005209: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 4 23:00:20 splunk3 sendmail[5220]: n3560K2I005209: n3560K2I005220: postmaster notify: User unknown
|
|
Apr 4 23:00:21 splunk3 sendmail[5220]: n3560K2I005220: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:00:25 splunk3 sendmail[5252]: n3560PvX005252: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:00:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:01:10 splunk3 sendmail[5405]: n35611cT005405: from=root, size=443, class=0, nrcpts=1, msgid=<200904050601.n35611cT005405@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 23:01:10 splunk3 sendmail[5448]: n3561AvP005448: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050601.n35611cT005405@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 23:01:10 splunk3 sendmail[5405]: n35611cT005405: to=root, ctladdr=root (0/0), delay=00:00:09, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3561AvP005448 Message accepted for delivery)
|
|
Apr 4 23:01:11 splunk3 sendmail[5449]: n3561AvP005448: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:01:25 splunk3 sendmail[5512]: n3561P0A005512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:02:25 splunk3 sendmail[5749]: n3562PNG005749: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:03:25 splunk3 sendmail[5988]: n3563PgE005988: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:04:25 splunk3 sendmail[6224]: n3564PAB006224: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:05:05 splunk3 sendmail[6364]: n35654Le006364: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050605.n35654wn006252@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:05:05 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42749
|
|
Apr 4 23:05:05 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:05:05 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 4 23:05:05 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 4 23:05:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:05:05 splunk3 sendmail[6366]: n35654Le006364: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:05:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:05:25 splunk3 sendmail[6481]: n3565P05006481: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:05:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:06:25 splunk3 sendmail[6717]: n3566PEA006717: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:07:25 splunk3 sendmail[6957]: n3567PHh006957: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:08:25 splunk3 sendmail[7193]: n3568PUc007193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:09:25 splunk3 sendmail[7432]: n3569P3b007432: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:10:02 splunk3 sendmail[7676]: n356A2U6007676: from=root, size=292, class=0, nrcpts=1, msgid=<200904050610.n356A2U6007676@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 4 23:10:02 splunk3 sendmail[7681]: n356A2Ex007681: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050610.n356A2U6007676@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 4 23:10:02 splunk3 sendmail[7676]: n356A2U6007676: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n356A2Ex007681 Message accepted for delivery)
|
|
Apr 4 23:10:03 splunk3 sendmail[7682]: n356A2Ex007681: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:10:07 splunk3 sendmail[7708]: n356A7A3007708: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050610.n356A5N5006864@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:10:07 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42806
|
|
Apr 4 23:10:07 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:10:07 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:10:07 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:10:07 splunk3 spamd[6683]: spamd: processing message <200904050610.n356A5N5006864@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:10:09 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 23:10:09 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42806,mid=<200904050610.n356A5N5006864@virt2.int.splunk.com>,bayes=0.168877204673057,autolearn=no
|
|
Apr 4 23:10:09 splunk3 sendmail[7709]: n356A7A3007708: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:10:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:10:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:10:25 splunk3 sendmail[7807]: n356AP0O007807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:10:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:11:25 splunk3 sendmail[8050]: n356BPbT008050: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 23:12:25 splunk3 sendmail[8286]: n356CPHD008286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:13:25 splunk3 sendmail[8524]: n356DPvk008524: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:14:25 splunk3 sendmail[8759]: n356EPr6008759: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:15:07 splunk3 sendmail[8922]: n356F7UF008922: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050615.n356F7e9007656@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:15:07 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42863
|
|
Apr 4 23:15:07 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:15:08 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:15:08 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:15:08 splunk3 spamd[6683]: spamd: processing message <200904050615.n356F7e9007656@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:15:10 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 4 23:15:10 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42863,mid=<200904050615.n356F7e9007656@virt2.int.splunk.com>,bayes=0.168877204673057,autolearn=no
|
|
Apr 4 23:15:10 splunk3 sendmail[8923]: n356F7UF008922: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:15:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:15:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:15:25 splunk3 sendmail[9016]: n356FPvZ009016: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:15:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:16:25 splunk3 sendmail[9257]: n356GPiv009257: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:17:25 splunk3 sendmail[9497]: n356HP3i009497: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:18:25 splunk3 sendmail[9742]: n356IP00009742: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:19:25 splunk3 sendmail[9982]: n356JP8k009982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:20:08 splunk3 sendmail[10147]: n356K8fc010147: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050620.n356K8Dt008294@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:20:08 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42918
|
|
Apr 4 23:20:08 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:20:08 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:20:08 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:20:08 splunk3 spamd[6683]: spamd: processing message <200904050620.n356K8Dt008294@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:20:10 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1305 bytes.
|
|
Apr 4 23:20:10 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42918,mid=<200904050620.n356K8Dt008294@virt2.int.splunk.com>,bayes=0.168877204673057,autolearn=no
|
|
Apr 4 23:20:10 splunk3 sendmail[10149]: n356K8fc010147: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:20:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:20:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:20:25 splunk3 sendmail[10242]: n356KP4m010242: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:20:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:21:25 splunk3 sendmail[10485]: n356LP1W010485: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:22:25 splunk3 sendmail[10719]: n356MPBa010719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:23:25 splunk3 sendmail[10961]: n356NPN3010961: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:24:25 splunk3 sendmail[11195]: n356OP3p011195: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:25:09 splunk3 sendmail[11357]: n356P899011357: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050625.n356P8kQ008899@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:25:09 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 42974
|
|
Apr 4 23:25:09 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:25:09 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:25:09 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:25:09 splunk3 spamd[6683]: spamd: processing message <200904050625.n356P8kQ008899@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:25:11 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1305 bytes.
|
|
Apr 4 23:25:11 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=42974,mid=<200904050625.n356P8kQ008899@virt2.int.splunk.com>,bayes=0.168877204673057,autolearn=no
|
|
Apr 4 23:25:11 splunk3 sendmail[11358]: n356P899011357: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:25:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:25:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:25:25 splunk3 sendmail[11453]: n356PP6K011453: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:25:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:26:25 splunk3 sendmail[11692]: n356QPnr011692: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 23:27:25 splunk3 sendmail[11930]: n356RPIH011930: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:28:25 splunk3 sendmail[12166]: n356SPmZ012166: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:29:25 splunk3 sendmail[12403]: n356TP05012403: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:30:09 splunk3 sendmail[12571]: n356U9dv012571: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050630.n356U9YH009519@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:30:09 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43030
|
|
Apr 4 23:30:09 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:30:09 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:30:09 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:30:09 splunk3 spamd[6683]: spamd: processing message <200904050630.n356U9YH009519@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:30:11 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 4 23:30:11 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43030,mid=<200904050630.n356U9YH009519@virt2.int.splunk.com>,bayes=0.168877204673057,autolearn=no
|
|
Apr 4 23:30:11 splunk3 sendmail[12572]: n356U9dv012571: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:30:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:30:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:30:25 splunk3 sendmail[12665]: n356UPYW012665: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:30:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:31:25 splunk3 sendmail[12909]: n356VP07012909: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:32:25 splunk3 sendmail[13144]: n356WPhX013144: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:33:25 splunk3 sendmail[13422]: n356XPp2013422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:34:25 splunk3 sendmail[13658]: n356YP3i013658: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:35:09 splunk3 sendmail[13839]: n356Z9iO013839: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050635.n356Z9qH010262@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:35:09 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43086
|
|
Apr 4 23:35:09 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:35:09 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:35:09 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:35:09 splunk3 spamd[6683]: spamd: processing message <200904050635.n356Z9qH010262@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:35:11 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 4 23:35:11 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43086,mid=<200904050635.n356Z9qH010262@virt2.int.splunk.com>,bayes=0.111988338803594,autolearn=no
|
|
Apr 4 23:35:11 splunk3 sendmail[13840]: n356Z9iO013839: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:35:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:35:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:35:25 splunk3 sendmail[13917]: n356ZP16013917: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:35:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:36:25 splunk3 sendmail[14153]: n356aPo1014153: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:37:25 splunk3 sendmail[14394]: n356bP7j014394: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:38:25 splunk3 sendmail[14633]: n356cPIJ014633: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:39:25 splunk3 sendmail[14870]: n356dPll014870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:40:10 splunk3 sendmail[15054]: n356eA0p015054: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050640.n356e9U1010896@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:40:10 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43142
|
|
Apr 4 23:40:10 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:40:10 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:40:10 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:40:10 splunk3 spamd[6683]: spamd: processing message <200904050640.n356e9U1010896@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:40:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:40:12 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 4 23:40:12 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43142,mid=<200904050640.n356e9U1010896@virt2.int.splunk.com>,bayes=0.111988338803594,autolearn=no
|
|
Apr 4 23:40:12 splunk3 sendmail[15055]: n356eA0p015054: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:40:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:40:25 splunk3 sendmail[15129]: n356ePYQ015129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:40:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:41:25 splunk3 sendmail[15370]: n356fPjM015370: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 23:42:25 splunk3 sendmail[15606]: n356gPVe015606: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:43:25 splunk3 sendmail[15843]: n356hPO2015843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:44:25 splunk3 sendmail[16077]: n356iPVE016077: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:45:10 splunk3 sendmail[16260]: n356jAeR016260: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050645.n356jAX5011508@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:45:10 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43199
|
|
Apr 4 23:45:10 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:45:10 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:45:10 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:45:10 splunk3 spamd[6683]: spamd: processing message <200904050645.n356jAX5011508@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:45:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:45:12 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 4 23:45:12 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43199,mid=<200904050645.n356jAX5011508@virt2.int.splunk.com>,bayes=0.111988338803594,autolearn=no
|
|
Apr 4 23:45:12 splunk3 sendmail[16261]: n356jAeR016260: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:45:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:45:25 splunk3 sendmail[16335]: n356jP5f016335: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:45:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:46:25 splunk3 sendmail[16575]: n356kPa2016575: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:47:25 splunk3 sendmail[16813]: n356lPfx016813: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:48:25 splunk3 sendmail[17047]: n356mP39017047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:49:25 splunk3 sendmail[17287]: n356nPx5017287: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:50:11 splunk3 sendmail[17474]: n356oAVg017474: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050650.n356oABn012120@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:50:11 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43255
|
|
Apr 4 23:50:11 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:50:11 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:50:11 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:50:11 splunk3 spamd[6683]: spamd: processing message <200904050650.n356oABn012120@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:50:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:50:13 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 23:50:13 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43255,mid=<200904050650.n356oABn012120@virt2.int.splunk.com>,bayes=0.111988338803594,autolearn=no
|
|
Apr 4 23:50:13 splunk3 sendmail[17475]: n356oAVg017474: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:50:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:50:25 splunk3 sendmail[17546]: n356oPwB017546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:50:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:51:25 splunk3 sendmail[17789]: n356pP5Q017789: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:51:51 splunk3 sendmail[17889]: n356ppLa017889: from=<3B1XYSRQKBn4iqqingcngtvu-pqtgrn0iqqing.eqourcoogurnwpmkv.eqo@alerts.bounces.google.com>, size=4367, class=0, nrcpts=1, msgid=<0016e644de5e6a2e6d0466c937aa@google.com>, proto=ESMTP, daemon=MTA, relay=an-out-0910.google.com [209.85.132.188]
|
|
Apr 4 23:51:51 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43278
|
|
Apr 4 23:51:51 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:51:51 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:51:51 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:51:51 splunk3 spamd[6683]: spamd: processing message <0016e644de5e6a2e6d0466c937aa@google.com> for spamme:501
|
|
Apr 4 23:51:53 splunk3 spamd[6683]: spamd: clean message (-2.3/5.0) for spamme:501 in 1.5 seconds, 4797 bytes.
|
|
Apr 4 23:51:53 splunk3 spamd[6683]: spamd: result: . -2 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY scantime=1.5,size=4797,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43278,mid=<0016e644de5e6a2e6d0466c937aa@google.com>,bayes=0,autolearn=ham
|
|
Apr 4 23:51:53 splunk3 sendmail[17890]: n356ppLa017889: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=34578, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:51:53 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:52:25 splunk3 sendmail[18032]: n356qPGS018032: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:53:25 splunk3 sendmail[18281]: n356rPdr018281: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:54:25 splunk3 sendmail[18515]: n356sP7X018515: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:55:11 splunk3 sendmail[18700]: n356tBgI018700: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050655.n356tB4D012727@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 4 23:55:11 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43311
|
|
Apr 4 23:55:11 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 4 23:55:11 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 4 23:55:11 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 4 23:55:11 splunk3 spamd[6683]: spamd: processing message <200904050655.n356tB4D012727@virt2.int.splunk.com> for spamme:501
|
|
Apr 4 23:55:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 4 23:55:13 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 4 23:55:13 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43311,mid=<200904050655.n356tB4D012727@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 4 23:55:13 splunk3 sendmail[18701]: n356tBgI018700: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 4 23:55:13 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 4 23:55:25 splunk3 sendmail[18773]: n356tPEP018773: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:55:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 4 23:56:25 splunk3 sendmail[19011]: n356uP7e019011: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 4 23:57:25 splunk3 sendmail[19249]: n356vPPp019249: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:58:25 splunk3 sendmail[19484]: n356wPpJ019484: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 4 23:59:25 splunk3 sendmail[19721]: n356xPBO019721: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:00:04 splunk3 sendmail[19946]: n3570457019946: from=root, size=291, class=0, nrcpts=1, msgid=<200904050700.n3570457019946@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 00:00:04 splunk3 sendmail[19950]: n35704AF019950: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050700.n3570457019946@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 00:00:04 splunk3 sendmail[19946]: n3570457019946: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35704AF019950 Message accepted for delivery)
|
|
Apr 5 00:00:05 splunk3 sendmail[19951]: n35704AF019950: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:00:12 splunk3 sendmail[19978]: n3570BqP019978: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050700.n3570BOO013368@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:00:12 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43369
|
|
Apr 5 00:00:12 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:00:12 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 5 00:00:12 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 5 00:00:12 splunk3 sendmail[19979]: n3570BqP019978: to=<spamme@splunkit.com>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:00:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:00:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:00:25 splunk3 sendmail[20047]: n3570PlH020047: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:00:25 splunk3 sendmail[20052]: n3570P3q020052: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904050700.n3570P3q020052@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 00:00:25 splunk3 sendmail[20054]: n3570P3q020052: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 5 00:00:25 splunk3 sendmail[20054]: n3570P3q020052: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 5 00:00:25 splunk3 sendmail[20054]: n3570P3q020052: n3570P3q020054: postmaster notify: User unknown
|
|
Apr 5 00:00:27 splunk3 sendmail[20054]: n3570P3q020054: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:00:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:01:16 splunk3 sendmail[20213]: n357110O020213: from=root, size=443, class=0, nrcpts=1, msgid=<200904050701.n357110O020213@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 00:01:16 splunk3 sendmail[20275]: n3571Gua020275: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050701.n357110O020213@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 00:01:16 splunk3 sendmail[20213]: n357110O020213: to=root, ctladdr=root (0/0), delay=00:00:15, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3571Gua020275 Message accepted for delivery)
|
|
Apr 5 00:01:17 splunk3 sendmail[20276]: n3571Gua020275: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:01:25 splunk3 sendmail[20318]: n3571PZ4020318: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:02:25 splunk3 sendmail[20553]: n3572P4i020553: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:03:25 splunk3 sendmail[20792]: n3573PGs020792: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:04:25 splunk3 sendmail[21026]: n3574P6I021026: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:05:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:05:12 splunk3 sendmail[21217]: n3575CaO021217: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050705.n3575CiD014050@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:05:12 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43432
|
|
Apr 5 00:05:12 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:05:12 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 5 00:05:12 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 5 00:05:12 splunk3 sendmail[21218]: n3575CaO021217: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:05:12 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:05:25 splunk3 sendmail[21276]: n3575Pev021276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:05:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:06:25 splunk3 sendmail[21523]: n3576PbW021523: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:07:25 splunk3 sendmail[21764]: n3577P2h021764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:08:25 splunk3 sendmail[22003]: n3578PWU022003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:09:25 splunk3 sendmail[22241]: n3579PxQ022241: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:10:02 splunk3 sendmail[22478]: n357A2wE022478: from=root, size=292, class=0, nrcpts=1, msgid=<200904050710.n357A2wE022478@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 00:10:02 splunk3 sendmail[22484]: n357A2ih022484: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050710.n357A2wE022478@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 00:10:02 splunk3 sendmail[22478]: n357A2wE022478: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n357A2ih022484 Message accepted for delivery)
|
|
Apr 5 00:10:04 splunk3 sendmail[22485]: n357A2ih022484: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:10:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:10:13 splunk3 sendmail[22538]: n357ADLV022538: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050710.n357AC3N014665@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:10:13 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43489
|
|
Apr 5 00:10:13 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:10:13 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:10:13 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:10:13 splunk3 spamd[6683]: spamd: processing message <200904050710.n357AC3N014665@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:10:15 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 5 00:10:15 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43489,mid=<200904050710.n357AC3N014665@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:10:15 splunk3 sendmail[22539]: n357ADLV022538: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:10:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:10:25 splunk3 sendmail[22599]: n357APwW022599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:10:35 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:11:25 splunk3 sendmail[22847]: n357BP2H022847: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 00:12:25 splunk3 sendmail[23083]: n357CPJg023083: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:13:25 splunk3 sendmail[23322]: n357DPno023322: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:14:25 splunk3 sendmail[23558]: n357EP9j023558: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:15:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:15:13 splunk3 sendmail[23745]: n357FDaB023745: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050715.n357FDFs015450@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:15:13 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43545
|
|
Apr 5 00:15:13 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:15:13 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:15:13 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:15:13 splunk3 spamd[6683]: spamd: processing message <200904050715.n357FDFs015450@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:15:15 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.9 seconds, 1308 bytes.
|
|
Apr 5 00:15:15 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.9,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43545,mid=<200904050715.n357FDFs015450@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:15:15 splunk3 sendmail[23746]: n357FDaB023745: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:15:15 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:15:25 splunk3 sendmail[23805]: n357FPFZ023805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:15:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:16:25 splunk3 sendmail[24052]: n357GPHI024052: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:17:25 splunk3 sendmail[24292]: n357HPIT024292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:18:25 splunk3 sendmail[24525]: n357IPFq024525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:19:25 splunk3 sendmail[24766]: n357JPAo024766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:20:12 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:20:14 splunk3 sendmail[24958]: n357KDUC024958: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050720.n357KD9e016105@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:20:14 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43601
|
|
Apr 5 00:20:14 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:20:14 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:20:14 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:20:14 splunk3 spamd[6683]: spamd: processing message <200904050720.n357KD9e016105@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:20:16 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 5 00:20:16 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43601,mid=<200904050720.n357KD9e016105@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:20:16 splunk3 sendmail[24959]: n357KDUC024958: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:20:16 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:20:25 splunk3 sendmail[25018]: n357KP7B025018: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:20:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:21:25 splunk3 sendmail[25270]: n357LP87025270: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:22:25 splunk3 sendmail[25504]: n357MPQJ025504: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:23:25 splunk3 sendmail[25746]: n357NPjT025746: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:24:25 splunk3 sendmail[25980]: n357OPtO025980: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:25:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:25:14 splunk3 sendmail[26188]: n357PEUB026188: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050725.n357PERe016709@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:25:14 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43656
|
|
Apr 5 00:25:14 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:25:14 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:25:14 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:25:14 splunk3 spamd[6683]: spamd: processing message <200904050725.n357PERe016709@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:25:18 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 4.1 seconds, 1308 bytes.
|
|
Apr 5 00:25:18 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=4.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43656,mid=<200904050725.n357PERe016709@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:25:18 splunk3 sendmail[26189]: n357PEUB026188: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:25:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:25:25 splunk3 sendmail[26230]: n357PPg5026230: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:25:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:26:25 splunk3 sendmail[26478]: n357QPUT026478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 00:27:25 splunk3 sendmail[26719]: n357RPYt026719: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:28:25 splunk3 sendmail[26953]: n357SPx0026953: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:29:25 splunk3 sendmail[27189]: n357TPMd027189: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:30:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:30:15 splunk3 sendmail[27395]: n357UFvC027395: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050730.n357UEAp017325@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:30:15 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43713
|
|
Apr 5 00:30:15 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:30:15 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:30:15 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:30:15 splunk3 spamd[6683]: spamd: processing message <200904050730.n357UEAp017325@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:30:17 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 5 00:30:17 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43713,mid=<200904050730.n357UEAp017325@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:30:17 splunk3 sendmail[27396]: n357UFvC027395: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:30:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:30:25 splunk3 sendmail[27438]: n357UPPn027438: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:30:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:31:25 splunk3 sendmail[27690]: n357VP0C027690: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:32:25 splunk3 sendmail[27925]: n357WPxt027925: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:33:25 splunk3 sendmail[28164]: n357XPiB028164: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:34:22 splunk3 sendmail[28379]: n357YKxc028379: from=<spamme@splunkit.com>, size=2728, class=0, nrcpts=1, msgid=<200904050734.n357YKxc028379@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=p1242-ipad06sinnagasak.nagasaki.ocn.ne.jp [221.188.150.242]
|
|
Apr 5 00:34:22 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43759
|
|
Apr 5 00:34:22 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:34:22 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:34:22 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:34:22 splunk3 spamd[6683]: spamd: processing message <200904050734.n357YKxc028379@splunk3.splunkit.com> for spamme:501
|
|
Apr 5 00:34:24 splunk3 spamd[6683]: spamd: identified spam (28.6/5.0) for spamme:501 in 1.8 seconds, 3164 bytes.
|
|
Apr 5 00:34:24 splunk3 spamd[6683]: spamd: result: Y 28 - BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_SORBS_DUL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.8,size=3164,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43759,mid=<200904050734.n357YKxc028379@splunk3.splunkit.com>,bayes=1,autolearn=no
|
|
Apr 5 00:34:24 splunk3 sendmail[28382]: n357YKxc028379: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33086, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:34:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:34:25 splunk3 sendmail[28404]: n357YPUU028404: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:35:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:35:15 splunk3 sendmail[28609]: n357ZF5g028609: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050735.n357ZFSL018070@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:35:15 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43769
|
|
Apr 5 00:35:15 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:35:15 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:35:15 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:35:15 splunk3 spamd[6683]: spamd: processing message <200904050735.n357ZFSL018070@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:35:17 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 5 00:35:17 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43769,mid=<200904050735.n357ZFSL018070@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:35:17 splunk3 sendmail[28610]: n357ZF5g028609: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:35:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:35:25 splunk3 sendmail[28653]: n357ZPi2028653: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:35:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:36:25 splunk3 sendmail[28900]: n357aPIe028900: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:37:25 splunk3 sendmail[29140]: n357bPPP029140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:38:25 splunk3 sendmail[29378]: n357cPJi029378: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:39:25 splunk3 sendmail[29616]: n357dPSP029616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:40:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:40:16 splunk3 sendmail[29826]: n357eGlS029826: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050740.n357eFRl018704@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:40:16 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43825
|
|
Apr 5 00:40:16 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:40:16 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:40:16 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:40:16 splunk3 spamd[6683]: spamd: processing message <200904050740.n357eFRl018704@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:40:18 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 5 00:40:18 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43825,mid=<200904050740.n357eFRl018704@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:40:18 splunk3 sendmail[29827]: n357eGlS029826: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:40:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:40:25 splunk3 sendmail[29868]: n357ePZJ029868: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:40:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:41:25 splunk3 sendmail[30120]: n357fPji030120: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 00:42:25 splunk3 sendmail[30356]: n357gP5v030356: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:43:25 splunk3 sendmail[30593]: n357hPb3030593: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:44:25 splunk3 sendmail[30825]: n357iPgQ030825: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:45:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:45:16 splunk3 sendmail[31033]: n357jGM1031033: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050745.n357jGAR019320@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:45:16 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43882
|
|
Apr 5 00:45:16 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:45:16 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:45:16 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:45:16 splunk3 spamd[6683]: spamd: processing message <200904050745.n357jGAR019320@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:45:18 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 5 00:45:18 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43882,mid=<200904050745.n357jGAR019320@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:45:18 splunk3 sendmail[31034]: n357jGM1031033: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:45:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:45:25 splunk3 sendmail[31075]: n357jPiF031075: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:45:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:46:25 splunk3 sendmail[31324]: n357kPoX031324: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:47:25 splunk3 sendmail[31563]: n357lPmK031563: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:48:25 splunk3 sendmail[31798]: n357mPTi031798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:49:26 splunk3 sendmail[32038]: n357nPjw032038: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:50:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:50:16 splunk3 sendmail[32255]: n357oG4N032255: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050750.n357oGen019940@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:50:16 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 43945
|
|
Apr 5 00:50:16 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:50:16 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:50:16 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:50:16 splunk3 spamd[6683]: spamd: processing message <200904050750.n357oGen019940@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:50:18 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.1 seconds, 1308 bytes.
|
|
Apr 5 00:50:18 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=43945,mid=<200904050750.n357oGen019940@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:50:18 splunk3 sendmail[32256]: n357oG4N032255: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:50:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:50:26 splunk3 sendmail[32299]: n357oQvf032299: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:50:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:51:26 splunk3 sendmail[32540]: n357pQ2J032540: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:52:26 splunk3 sendmail[310]: n357qQPB000310: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:53:26 splunk3 sendmail[552]: n357rQgX000552: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:54:26 splunk3 sendmail[787]: n357sQOw000787: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:55:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 00:55:17 splunk3 sendmail[1004]: n357tHMN001004: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050755.n357tGEA020547@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 00:55:17 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44001
|
|
Apr 5 00:55:17 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 00:55:17 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 00:55:17 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 00:55:17 splunk3 spamd[6683]: spamd: processing message <200904050755.n357tGEA020547@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 00:55:19 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 5 00:55:19 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44001,mid=<200904050755.n357tGEA020547@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 00:55:19 splunk3 sendmail[1005]: n357tHMN001004: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 00:55:19 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 00:55:26 splunk3 sendmail[1048]: n357tQ8M001048: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:55:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 00:56:26 splunk3 sendmail[1286]: n357uQPA001286: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 00:57:26 splunk3 sendmail[1527]: n357vQ8A001527: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:58:26 splunk3 sendmail[1764]: n357wQcP001764: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 00:59:26 splunk3 sendmail[2002]: n357xQAf002002: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:00:01 splunk3 sendmail[2173]: n35801cf002173: from=<splunk@localhost>, size=721, class=0, nrcpts=1, msgid=<200904050800.n35801cf002173@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 01:00:01 splunk3 sendmail[2193]: n35801cf002173: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120721, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 5 01:00:01 splunk3 sendmail[2193]: n35801cf002173: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120721, dsn=5.1.1, stat=User unknown
|
|
Apr 5 01:00:01 splunk3 sendmail[2193]: n35801cf002173: n35801cf002193: postmaster notify: User unknown
|
|
Apr 5 01:00:02 splunk3 sendmail[2193]: n35801cf002193: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32089, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:00:04 splunk3 sendmail[2250]: n358041n002250: from=root, size=291, class=0, nrcpts=1, msgid=<200904050800.n358041n002250@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 01:00:04 splunk3 sendmail[2254]: n35804i8002254: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050800.n358041n002250@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 01:00:04 splunk3 sendmail[2250]: n358041n002250: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35804i8002254 Message accepted for delivery)
|
|
Apr 5 01:00:05 splunk3 sendmail[2255]: n35804i8002254: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:00:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:00:17 splunk3 sendmail[2304]: n3580Hsh002304: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050800.n3580Hsh021182@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:00:17 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44065
|
|
Apr 5 01:00:17 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:00:17 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 5 01:00:17 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 5 01:00:17 splunk3 sendmail[2305]: n3580Hsh002304: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:00:17 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:00:26 splunk3 sendmail[2343]: n3580QvL002343: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:00:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:01:02 splunk3 sendmail[2507]: n35811Xb002507: from=root, size=443, class=0, nrcpts=1, msgid=<200904050801.n35811Xb002507@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 01:01:02 splunk3 sendmail[2512]: n358129X002512: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050801.n35811Xb002507@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 01:01:02 splunk3 sendmail[2507]: n35811Xb002507: to=root, ctladdr=root (0/0), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n358129X002512 Message accepted for delivery)
|
|
Apr 5 01:01:03 splunk3 sendmail[2513]: n358129X002512: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:01:26 splunk3 sendmail[2617]: n3581Q0K002617: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:02:26 splunk3 sendmail[2865]: n3582QPk002865: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:03:26 splunk3 sendmail[3111]: n3583Qgr003111: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:04:26 splunk3 sendmail[3347]: n3584QLV003347: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:05:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:05:18 splunk3 sendmail[3581]: n3585IvM003581: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050805.n3585Hrp021865@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:05:18 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44122
|
|
Apr 5 01:05:18 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:05:18 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 5 01:05:18 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 5 01:05:18 splunk3 sendmail[3582]: n3585IvM003581: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:05:18 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:05:26 splunk3 sendmail[3622]: n3585QYg003622: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:05:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:06:26 splunk3 sendmail[3870]: n3586QwZ003870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:07:26 splunk3 sendmail[4124]: n3587QPf004124: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:08:26 splunk3 sendmail[4380]: n3588Quh004380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:09:26 splunk3 sendmail[4621]: n3589QSg004621: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:10:02 splunk3 sendmail[4870]: n358A2Ve004870: from=root, size=292, class=0, nrcpts=1, msgid=<200904050810.n358A2Ve004870@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 01:10:02 splunk3 sendmail[4875]: n358A2GE004875: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050810.n358A2Ve004870@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 01:10:02 splunk3 sendmail[4870]: n358A2Ve004870: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n358A2GE004875 Message accepted for delivery)
|
|
Apr 5 01:10:04 splunk3 sendmail[4877]: n358A2GE004875: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:10:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:10:18 splunk3 sendmail[4955]: n358AIUt004955: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050810.n358AI1I022478@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:10:18 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44178
|
|
Apr 5 01:10:18 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:10:18 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:10:18 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:10:18 splunk3 spamd[6683]: spamd: processing message <200904050810.n358AI1I022478@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:10:20 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 5 01:10:20 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44178,mid=<200904050810.n358AI1I022478@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:10:20 splunk3 sendmail[4956]: n358AIUt004955: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:10:20 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:10:26 splunk3 sendmail[4998]: n358AQiI004998: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:10:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:11:26 splunk3 sendmail[5276]: n358BQ2C005276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 01:12:26 splunk3 sendmail[5516]: n358CQZI005516: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:13:26 splunk3 sendmail[5756]: n358DQfx005756: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:14:26 splunk3 sendmail[5989]: n358EQoN005989: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:15:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:15:19 splunk3 sendmail[6223]: n358FJ0T006223: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050815.n358FILd023262@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:15:19 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44235
|
|
Apr 5 01:15:19 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:15:19 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:15:19 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:15:19 splunk3 spamd[6683]: spamd: processing message <200904050815.n358FILd023262@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:15:21 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.7 seconds, 1308 bytes.
|
|
Apr 5 01:15:21 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.7,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44235,mid=<200904050815.n358FILd023262@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:15:21 splunk3 sendmail[6224]: n358FJ0T006223: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:15:21 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:15:26 splunk3 sendmail[6248]: n358FQAP006248: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:15:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:16:26 splunk3 sendmail[6488]: n358GQFM006488: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:17:26 splunk3 sendmail[6727]: n358HQ8i006727: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:18:26 splunk3 sendmail[6962]: n358IQ4d006962: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:19:26 splunk3 sendmail[7200]: n358JQQO007200: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:20:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:20:20 splunk3 sendmail[7434]: n358KKGt007434: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050820.n358KJMx023927@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:20:20 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44290
|
|
Apr 5 01:20:20 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:20:20 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:20:20 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:20:20 splunk3 spamd[6683]: spamd: processing message <200904050820.n358KJMx023927@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:20:22 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 5 01:20:22 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44290,mid=<200904050820.n358KJMx023927@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:20:22 splunk3 sendmail[7435]: n358KKGt007434: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:20:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:20:26 splunk3 sendmail[7460]: n358KQh5007460: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:20:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:21:26 splunk3 sendmail[7708]: n358LQb5007708: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:22:26 splunk3 sendmail[7945]: n358MQfS007945: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:23:26 splunk3 sendmail[8189]: n358NQRD008189: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:24:26 splunk3 sendmail[8422]: n358OQHf008422: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:25:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:25:20 splunk3 sendmail[8658]: n358PKcn008658: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050825.n358PKWk024536@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:25:20 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44346
|
|
Apr 5 01:25:20 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:25:20 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:25:20 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:25:20 splunk3 spamd[6683]: spamd: processing message <200904050825.n358PKWk024536@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:25:22 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 5 01:25:22 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44346,mid=<200904050825.n358PKWk024536@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:25:22 splunk3 sendmail[8659]: n358PKcn008658: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:25:22 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:25:26 splunk3 sendmail[8684]: n358PQMc008684: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:25:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:26:26 splunk3 sendmail[8921]: n358QQI1008921: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 01:27:26 splunk3 sendmail[9162]: n358RQoR009162: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:28:26 splunk3 sendmail[9396]: n358SQ5V009396: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:29:26 splunk3 sendmail[9646]: n358TQdW009646: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:30:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:30:21 splunk3 sendmail[9883]: n358ULXg009883: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050830.n358UKq0025161@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:30:21 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44402
|
|
Apr 5 01:30:21 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:30:21 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:30:21 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:30:21 splunk3 spamd[6683]: spamd: processing message <200904050830.n358UKq0025161@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:30:23 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 5 01:30:23 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44402,mid=<200904050830.n358UKq0025161@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:30:23 splunk3 sendmail[9884]: n358ULXg009883: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:30:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:30:26 splunk3 sendmail[9908]: n358UQeD009908: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:30:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:31:26 splunk3 sendmail[10149]: n358VQNx010149: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:32:26 splunk3 sendmail[10387]: n358WQxN010387: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:33:26 splunk3 sendmail[10625]: n358XQMm010625: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:34:26 splunk3 sendmail[10861]: n358YQqf010861: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:35:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:35:21 splunk3 sendmail[11093]: n358ZL1T011093: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050835.n358ZL8H025901@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:35:21 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44458
|
|
Apr 5 01:35:21 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:35:21 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:35:21 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:35:21 splunk3 spamd[6683]: spamd: processing message <200904050835.n358ZL8H025901@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:35:23 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 5 01:35:23 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44458,mid=<200904050835.n358ZL8H025901@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:35:23 splunk3 sendmail[11094]: n358ZL1T011093: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:35:23 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:35:26 splunk3 sendmail[11116]: n358ZQrh011116: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:35:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:36:26 splunk3 sendmail[11352]: n358aQMp011352: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:37:26 splunk3 sendmail[11592]: n358bQ3g011592: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:38:26 splunk3 sendmail[11830]: n358cQEr011830: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:39:26 splunk3 sendmail[12069]: n358dQoh012069: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:40:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:40:22 splunk3 sendmail[12306]: n358eMdv012306: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050840.n358eLHR026536@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:40:22 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44514
|
|
Apr 5 01:40:22 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:40:22 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:40:22 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:40:22 splunk3 spamd[6683]: spamd: processing message <200904050840.n358eLHR026536@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:40:24 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1308 bytes.
|
|
Apr 5 01:40:24 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44514,mid=<200904050840.n358eLHR026536@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:40:24 splunk3 sendmail[12307]: n358eMdv012306: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:40:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:40:26 splunk3 sendmail[12330]: n358eQ1F012330: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:40:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:41:26 splunk3 sendmail[12571]: n358fQ18012571: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 01:42:26 splunk3 sendmail[12807]: n358gQtJ012807: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:43:26 splunk3 sendmail[13049]: n358hQ9x013049: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:44:26 splunk3 sendmail[13311]: n358iQ5l013311: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:45:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:45:22 splunk3 sendmail[13558]: n358jMLi013558: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050845.n358jMF5027147@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:45:22 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44570
|
|
Apr 5 01:45:22 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:45:22 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:45:22 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:45:22 splunk3 spamd[6683]: spamd: processing message <200904050845.n358jMF5027147@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:45:24 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 5 01:45:24 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44570,mid=<200904050845.n358jMF5027147@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:45:24 splunk3 sendmail[13559]: n358jMLi013558: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:45:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:45:26 splunk3 sendmail[13582]: n358jQQs013582: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:45:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:46:26 splunk3 sendmail[13820]: n358kQmq013820: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:47:26 splunk3 sendmail[14059]: n358lQwn014059: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:48:26 splunk3 sendmail[14292]: n358mQ8M014292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:49:26 splunk3 sendmail[14531]: n358nQ1v014531: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:50:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:50:23 splunk3 sendmail[14786]: n358oNGU014786: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050850.n358oNYJ027765@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:50:23 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44626
|
|
Apr 5 01:50:23 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:50:23 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:50:23 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:50:23 splunk3 spamd[6683]: spamd: processing message <200904050850.n358oNYJ027765@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:50:25 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 5 01:50:25 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44626,mid=<200904050850.n358oNYJ027765@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:50:25 splunk3 sendmail[14787]: n358oNGU014786: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:50:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:50:26 splunk3 sendmail[14793]: n358oQX3014793: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:50:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:51:26 splunk3 sendmail[15034]: n358pQOZ015034: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:52:26 splunk3 sendmail[15269]: n358qQKN015269: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:53:26 splunk3 sendmail[15510]: n358rQ9N015510: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:54:26 splunk3 sendmail[15744]: n358sQFw015744: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:55:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 01:55:24 splunk3 sendmail[15996]: n358tOxu015996: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050855.n358tNHE028370@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 01:55:24 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44681
|
|
Apr 5 01:55:24 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 01:55:24 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 01:55:24 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 01:55:24 splunk3 spamd[6683]: spamd: processing message <200904050855.n358tNHE028370@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 01:55:26 splunk3 sendmail[16003]: n358tQh5016003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:55:26 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 5 01:55:26 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44681,mid=<200904050855.n358tNHE028370@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 01:55:26 splunk3 sendmail[15997]: n358tOxu015996: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 01:55:26 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 01:55:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 01:56:26 splunk3 sendmail[16240]: n358uQg3016240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 01:57:26 splunk3 sendmail[16481]: n358vQNt016481: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:58:26 splunk3 sendmail[16718]: n358wQSK016718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 01:59:26 splunk3 sendmail[16956]: n358xQoh016956: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:00:04 splunk3 sendmail[17179]: n359040S017179: from=root, size=291, class=0, nrcpts=1, msgid=<200904050900.n359040S017179@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 02:00:04 splunk3 sendmail[17183]: n359042T017183: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904050900.n359040S017179@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 02:00:04 splunk3 sendmail[17179]: n359040S017179: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n359042T017183 Message accepted for delivery)
|
|
Apr 5 02:00:06 splunk3 sendmail[17186]: n359042T017183: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:00:06 splunk3 sendmail[17202]: n35906Tn017202: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904050900.n35906Tn017202@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 02:00:06 splunk3 sendmail[17204]: n35906Tn017202: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 5 02:00:06 splunk3 sendmail[17204]: n35906Tn017202: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 5 02:00:06 splunk3 sendmail[17204]: n35906Tn017202: n35906Tn017204: postmaster notify: User unknown
|
|
Apr 5 02:00:08 splunk3 sendmail[17204]: n35906Tn017204: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:00:11 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:00:24 splunk3 sendmail[17296]: n3590OiQ017296: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050900.n3590O1W029015@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:00:24 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44746
|
|
Apr 5 02:00:24 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:00:24 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 5 02:00:24 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 5 02:00:24 splunk3 sendmail[17297]: n3590OiQ017296: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:00:24 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:00:26 splunk3 sendmail[17302]: n3590QPK017302: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:00:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:01:15 splunk3 sendmail[17448]: n35911KB017448: from=root, size=443, class=0, nrcpts=1, msgid=<200904050901.n35911KB017448@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 02:01:15 splunk3 sendmail[17514]: n3591FJN017514: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904050901.n35911KB017448@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 02:01:15 splunk3 sendmail[17448]: n35911KB017448: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n3591FJN017514 Message accepted for delivery)
|
|
Apr 5 02:01:16 splunk3 sendmail[17515]: n3591FJN017514: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:01:26 splunk3 sendmail[17556]: n3591QjC017556: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:02:26 splunk3 sendmail[17793]: n3592QG3017793: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:03:26 splunk3 sendmail[18031]: n3593QxL018031: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:04:26 splunk3 sendmail[18267]: n3594QkR018267: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:05:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:05:25 splunk3 sendmail[18520]: n3595PHB018520: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050905.n3595OsS029697@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:05:25 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44802
|
|
Apr 5 02:05:25 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:05:25 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 5 02:05:25 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 5 02:05:25 splunk3 sendmail[18521]: n3595PHB018520: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:05:25 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:05:26 splunk3 sendmail[18525]: n3595Qse018525: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:05:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:06:26 splunk3 sendmail[18763]: n3596QuQ018763: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:07:26 splunk3 sendmail[19003]: n3597Q8p019003: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:08:26 splunk3 sendmail[19240]: n3598Q2G019240: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:09:26 splunk3 sendmail[19478]: n3599Q9D019478: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:10:02 splunk3 sendmail[19712]: n359A2qY019712: from=root, size=292, class=0, nrcpts=1, msgid=<200904050910.n359A2qY019712@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 02:10:02 splunk3 sendmail[19717]: n359A2hZ019717: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904050910.n359A2qY019712@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 02:10:02 splunk3 sendmail[19712]: n359A2qY019712: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n359A2hZ019717 Message accepted for delivery)
|
|
Apr 5 02:10:04 splunk3 sendmail[19718]: n359A2hZ019717: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:10:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:10:25 splunk3 sendmail[19837]: n359APkw019837: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050910.n359AP9V030311@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:10:25 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44859
|
|
Apr 5 02:10:25 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:10:25 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:10:25 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:10:25 splunk3 spamd[6683]: spamd: processing message <200904050910.n359AP9V030311@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:10:26 splunk3 sendmail[19843]: n359AQHZ019843: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:10:27 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.6 seconds, 1308 bytes.
|
|
Apr 5 02:10:27 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44859,mid=<200904050910.n359AP9V030311@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 02:10:27 splunk3 sendmail[19838]: n359APkw019837: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:10:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:10:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:11:26 splunk3 sendmail[20085]: n359BQjX020085: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 02:12:26 splunk3 sendmail[20323]: n359CQnK020323: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:13:26 splunk3 sendmail[20562]: n359DQaV020562: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:14:26 splunk3 sendmail[20796]: n359EQu0020796: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:15:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:15:26 splunk3 sendmail[21046]: n359FQ9i021046: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050915.n359FPHP031089@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:15:26 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44915
|
|
Apr 5 02:15:26 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:15:26 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:15:26 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:15:26 splunk3 spamd[6683]: spamd: processing message <200904050915.n359FPHP031089@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:15:26 splunk3 sendmail[21053]: n359FQjs021053: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:15:28 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 5 02:15:28 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44915,mid=<200904050915.n359FPHP031089@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 02:15:28 splunk3 sendmail[21047]: n359FQ9i021046: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:15:28 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:15:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:16:26 splunk3 sendmail[21292]: n359GQvp021292: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:17:26 splunk3 sendmail[21532]: n359HQtW021532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:18:26 splunk3 sendmail[21769]: n359IQEp021769: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:19:26 splunk3 sendmail[22010]: n359JQds022010: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:20:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:20:26 splunk3 sendmail[22265]: n359KQhB022265: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:20:26 splunk3 sendmail[22264]: n359KQ5J022264: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050920.n359KQDP031725@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:20:26 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 44971
|
|
Apr 5 02:20:26 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:20:26 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:20:26 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:20:26 splunk3 spamd[6683]: spamd: processing message <200904050920.n359KQDP031725@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:20:30 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 3.6 seconds, 1308 bytes.
|
|
Apr 5 02:20:30 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=3.6,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=44971,mid=<200904050920.n359KQDP031725@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 02:20:30 splunk3 sendmail[22266]: n359KQ5J022264: to=<spamme@splunkit.com>, delay=00:00:04, xdelay=00:00:04, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:20:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:20:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:21:26 splunk3 sendmail[22512]: n359LQUc022512: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:22:26 splunk3 sendmail[22747]: n359MQ7m022747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:23:26 splunk3 sendmail[22988]: n359NQD0022988: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:24:26 splunk3 sendmail[23222]: n359OQ0u023222: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:25:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:25:26 splunk3 sendmail[23474]: n359PQJ1023474: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:25:27 splunk3 sendmail[23475]: n359PRIG023475: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904050925.n359PRLL032345@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:25:27 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45027
|
|
Apr 5 02:25:27 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:25:27 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:25:27 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:25:27 splunk3 spamd[6683]: spamd: processing message <200904050925.n359PRLL032345@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:25:29 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.2 seconds, 1308 bytes.
|
|
Apr 5 02:25:29 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45027,mid=<200904050925.n359PRLL032345@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 02:25:29 splunk3 sendmail[23476]: n359PRIG023475: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:25:29 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:25:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:26:26 splunk3 sendmail[23718]: n359QQW0023718: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 02:27:26 splunk3 sendmail[23958]: n359RQZ4023958: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:28:26 splunk3 sendmail[24193]: n359SQHb024193: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:29:26 splunk3 sendmail[24430]: n359TQIR024430: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:30:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:30:26 splunk3 sendmail[24685]: n359UQc8024685: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:30:27 splunk3 sendmail[24687]: n359URw9024687: from=<spammer@spamdomain.com>, size=1026, class=0, nrcpts=1, msgid=<200904050930.n359UR7V000490@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:30:27 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45082
|
|
Apr 5 02:30:27 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:30:27 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:30:27 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:30:28 splunk3 spamd[6683]: spamd: processing message <200904050930.n359UR7V000490@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:30:30 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1302 bytes.
|
|
Apr 5 02:30:30 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1302,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45082,mid=<200904050930.n359UR7V000490@virt2.int.splunk.com>,bayes=0.0658825040901234,autolearn=no
|
|
Apr 5 02:30:30 splunk3 sendmail[24704]: n359URw9024687: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31218, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:30:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:30:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:31:26 splunk3 sendmail[24933]: n359VQ0k024933: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:32:26 splunk3 sendmail[25169]: n359WQWp025169: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:33:26 splunk3 sendmail[25409]: n359XQkI025409: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:34:26 splunk3 sendmail[25644]: n359YQ9x025644: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:35:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:35:26 splunk3 sendmail[25897]: n359ZQGQ025897: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:35:28 splunk3 sendmail[25914]: n359ZSXG025914: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050935.n359ZSbo001266@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:35:28 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45138
|
|
Apr 5 02:35:28 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:35:28 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:35:28 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:35:28 splunk3 spamd[6683]: spamd: processing message <200904050935.n359ZSbo001266@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:35:30 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 5 02:35:30 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45138,mid=<200904050935.n359ZSbo001266@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 02:35:30 splunk3 sendmail[25915]: n359ZSXG025914: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:35:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:35:34 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:36:26 splunk3 sendmail[26140]: n359aQDQ026140: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:37:26 splunk3 sendmail[26380]: n359bQ1x026380: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:38:26 splunk3 sendmail[26619]: n359cQMa026619: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:39:26 splunk3 sendmail[26857]: n359dQnv026857: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:40:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:40:26 splunk3 sendmail[27113]: n359eQw0027113: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:40:28 splunk3 sendmail[27130]: n359eSIC027130: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050940.n359eS5Y001904@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:40:28 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45193
|
|
Apr 5 02:40:28 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:40:28 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:40:28 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:40:28 splunk3 spamd[6683]: spamd: processing message <200904050940.n359eS5Y001904@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:40:30 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 5 02:40:30 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45193,mid=<200904050940.n359eS5Y001904@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 02:40:30 splunk3 sendmail[27131]: n359eSIC027130: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:40:30 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:40:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:41:26 splunk3 sendmail[27359]: n359fQLh027359: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 02:42:26 splunk3 sendmail[27596]: n359gQtp027596: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:43:26 splunk3 sendmail[27834]: n359hQDi027834: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:44:26 splunk3 sendmail[28068]: n359iQaY028068: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:45:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:45:26 splunk3 sendmail[28320]: n359jQLb028320: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:45:29 splunk3 sendmail[28339]: n359jTJ4028339: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050945.n359jSAs002556@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:45:29 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45250
|
|
Apr 5 02:45:29 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:45:29 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:45:29 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:45:29 splunk3 spamd[6683]: spamd: processing message <200904050945.n359jSAs002556@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:45:31 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 5 02:45:31 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45250,mid=<200904050945.n359jSAs002556@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 02:45:31 splunk3 sendmail[28340]: n359jTJ4028339: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:45:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:45:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:46:26 splunk3 sendmail[28564]: n359kQJj028564: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:47:26 splunk3 sendmail[28805]: n359lQc7028805: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:48:26 splunk3 sendmail[29038]: n359mQQq029038: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:49:26 splunk3 sendmail[29279]: n359nQIc029279: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:50:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:50:26 splunk3 sendmail[29532]: n359oQOu029532: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:50:29 splunk3 sendmail[29552]: n359oTjr029552: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050950.n359oTda003147@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:50:29 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45305
|
|
Apr 5 02:50:29 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:50:29 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:50:29 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:50:29 splunk3 spamd[6683]: spamd: processing message <200904050950.n359oTda003147@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:50:31 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 5 02:50:31 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45305,mid=<200904050950.n359oTda003147@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 02:50:31 splunk3 sendmail[29553]: n359oTjr029552: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:50:31 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:50:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:51:26 splunk3 sendmail[29780]: n359pQas029780: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:52:26 splunk3 sendmail[30017]: n359qQuu030017: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:53:26 splunk3 sendmail[30261]: n359rQ6o030261: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:53:37 splunk3 sendmail[30303]: n359rbeN030303: from=<3oX_YSRQKBkMlttlqjfqjwyx-stwjuq3lttlqj.htrxufrrjxuqzspny.htr@alerts.bounces.google.com>, size=5965, class=0, nrcpts=1, msgid=<000e0cd5d0267921770466cbc1d3@google.com>, proto=ESMTP, daemon=MTA, relay=mail-gx0-f232.google.com [209.85.217.232]
|
|
Apr 5 02:53:37 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45336
|
|
Apr 5 02:53:37 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:53:37 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:53:37 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:53:37 splunk3 spamd[6683]: spamd: processing message <000e0cd5d0267921770466cbc1d3@google.com> for spamme:501
|
|
Apr 5 02:53:40 splunk3 spamd[6683]: spamd: clean message (-1.3/5.0) for spamme:501 in 2.5 seconds, 6399 bytes.
|
|
Apr 5 02:53:40 splunk3 spamd[6683]: spamd: result: . -1 - AWL,BAYES_00,HTML_50_60,HTML_MESSAGE,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY scantime=2.5,size=6399,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45336,mid=<000e0cd5d0267921770466cbc1d3@google.com>,bayes=0,autolearn=no
|
|
Apr 5 02:53:40 splunk3 sendmail[30320]: n359rbeN030303: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=36180, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:53:40 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:54:26 splunk3 sendmail[30502]: n359sQFO030502: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:55:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 02:55:26 splunk3 sendmail[30755]: n359tQUo030755: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:55:30 splunk3 sendmail[30775]: n359tUOO030775: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904050955.n359tT16003780@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 02:55:30 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45362
|
|
Apr 5 02:55:30 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 02:55:30 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 02:55:30 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 02:55:30 splunk3 spamd[6683]: spamd: processing message <200904050955.n359tT16003780@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 02:55:32 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 5 02:55:32 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45362,mid=<200904050955.n359tT16003780@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 02:55:32 splunk3 sendmail[30776]: n359tUOO030775: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 02:55:32 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 02:55:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 02:56:26 splunk3 sendmail[31000]: n359uQGA031000: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 02:57:26 splunk3 sendmail[31238]: n359vQ3f031238: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:58:26 splunk3 sendmail[31472]: n359wQAg031472: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 02:59:26 splunk3 sendmail[31709]: n359xQC1031709: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:00:01 splunk3 sendmail[31843]: n35A01K7031843: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904051000.n35A00OQ004300@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:00:01 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45406
|
|
Apr 5 03:00:01 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:00:01 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:00:01 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:00:01 splunk3 spamd[6683]: spamd: processing message <200904051000.n35A00OQ004300@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:00:03 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 5 03:00:03 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45406,mid=<200904051000.n35A00OQ004300@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 03:00:03 splunk3 sendmail[31844]: n35A01K7031843: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:00:03 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:00:04 splunk3 sendmail[31939]: n35A041u031939: from=root, size=291, class=0, nrcpts=1, msgid=<200904051000.n35A041u031939@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 03:00:04 splunk3 sendmail[31943]: n35A04hw031943: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904051000.n35A041u031939@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 03:00:04 splunk3 sendmail[31939]: n35A041u031939: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35A04hw031943 Message accepted for delivery)
|
|
Apr 5 03:00:06 splunk3 sendmail[31944]: n35A04hw031943: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:00:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:00:12 splunk3 sendmail[31985]: n35A0CPR031985: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904051000.n35A0CPR031985@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 03:00:12 splunk3 sendmail[32003]: n35A0CPR031985: to=<mark@splunk.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 5 03:00:12 splunk3 sendmail[32003]: n35A0CPR031985: to=<splunk@localhost>, delay=00:00:00, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 5 03:00:12 splunk3 sendmail[32003]: n35A0CPR031985: n35A0CPR032003: postmaster notify: User unknown
|
|
Apr 5 03:00:13 splunk3 sendmail[32003]: n35A0CPR032003: to=root, delay=00:00:01, xdelay=00:00:01, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:00:26 splunk3 sendmail[32055]: n35A0Q7x032055: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:00:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:01:16 splunk3 sendmail[32203]: n35A11mj032203: from=root, size=443, class=0, nrcpts=1, msgid=<200904051001.n35A11mj032203@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 03:01:16 splunk3 sendmail[32268]: n35A1GqR032268: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904051001.n35A11mj032203@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 03:01:16 splunk3 sendmail[32203]: n35A11mj032203: to=root, ctladdr=root (0/0), delay=00:00:15, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35A1GqR032268 Message accepted for delivery)
|
|
Apr 5 03:01:17 splunk3 sendmail[32269]: n35A1GqR032268: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:01:26 splunk3 sendmail[32312]: n35A1Q1H032312: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:02:26 splunk3 sendmail[32546]: n35A2Qpp032546: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:03:26 splunk3 sendmail[317]: n35A3QAd000317: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:04:27 splunk3 sendmail[551]: n35A4RN0000551: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:05:02 splunk3 sendmail[689]: n35A52XY000689: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904051005.n35A51oR005001@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:05:02 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45470
|
|
Apr 5 03:05:02 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:05:02 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 5 03:05:02 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 5 03:05:02 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:05:02 splunk3 sendmail[690]: n35A52XY000689: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:05:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:05:27 splunk3 sendmail[809]: n35A5ROO000809: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:05:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:06:27 splunk3 sendmail[1045]: n35A6RxZ001045: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:07:27 splunk3 sendmail[1288]: n35A7RtB001288: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:08:27 splunk3 sendmail[1528]: n35A8RhS001528: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:09:27 splunk3 sendmail[1766]: n35A9R5C001766: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:10:02 splunk3 sendmail[2022]: n35AA2rT002022: from=root, size=292, class=0, nrcpts=1, msgid=<200904051010.n35AA2rT002022@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 03:10:02 splunk3 sendmail[2027]: n35AA2XJ002027: from=<root@splunk3.splunkit.com>, size=565, class=0, nrcpts=1, msgid=<200904051010.n35AA2rT002022@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 03:10:02 splunk3 sendmail[2022]: n35AA2rT002022: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30292, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35AA2XJ002027 Message accepted for delivery)
|
|
Apr 5 03:10:03 splunk3 sendmail[2033]: n35AA2uC002033: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904051010.n35AA2FK005655@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:10:03 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45527
|
|
Apr 5 03:10:03 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:10:03 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:10:03 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:10:03 splunk3 spamd[6683]: spamd: processing message <200904051010.n35AA2FK005655@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:10:04 splunk3 sendmail[2028]: n35AA2XJ002027: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30792, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:10:05 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.7 seconds, 1305 bytes.
|
|
Apr 5 03:10:05 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.7,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45527,mid=<200904051010.n35AA2FK005655@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 03:10:05 splunk3 sendmail[2034]: n35AA2uC002033: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:10:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:10:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:10:27 splunk3 sendmail[2136]: n35AARNo002136: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:10:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:11:27 splunk3 sendmail[2376]: n35ABRwF002376: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:11:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 03:12:27 splunk3 sendmail[2616]: n35ACRRw002616: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:13:27 splunk3 sendmail[2870]: n35ADRka002870: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:14:27 splunk3 sendmail[3117]: n35AERf3003117: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:15:03 splunk3 sendmail[3278]: n35AF3Ke003278: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904051015.n35AF3c6006439@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:15:03 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45583
|
|
Apr 5 03:15:03 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:15:03 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:15:03 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:15:03 splunk3 spamd[6683]: spamd: processing message <200904051015.n35AF3c6006439@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:15:06 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.6 seconds, 1305 bytes.
|
|
Apr 5 03:15:06 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.6,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45583,mid=<200904051015.n35AF3c6006439@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 03:15:06 splunk3 sendmail[3279]: n35AF3Ke003278: to=<spamme@splunkit.com>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:15:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:15:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:15:27 splunk3 sendmail[3378]: n35AFRCp003378: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:15:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:16:27 splunk3 sendmail[3635]: n35AGRuR003635: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:17:27 splunk3 sendmail[3883]: n35AHRpU003883: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:18:27 splunk3 sendmail[4129]: n35AIRbG004129: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:19:27 splunk3 sendmail[4386]: n35AJRwT004386: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:20:03 splunk3 sendmail[4547]: n35AK3f3004547: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904051020.n35AK30s007072@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:20:03 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45639
|
|
Apr 5 03:20:03 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:20:03 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:20:03 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:20:03 splunk3 spamd[6683]: spamd: processing message <200904051020.n35AK30s007072@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:20:05 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.5 seconds, 1305 bytes.
|
|
Apr 5 03:20:05 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45639,mid=<200904051020.n35AK30s007072@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 03:20:05 splunk3 sendmail[4548]: n35AK3f3004547: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:20:05 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:20:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:20:27 splunk3 sendmail[4645]: n35AKRXo004645: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:20:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:21:27 splunk3 sendmail[4893]: n35ALRAU004893: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:22:27 splunk3 sendmail[5174]: n35AMR1A005174: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:23:27 splunk3 sendmail[5419]: n35ANR3f005419: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:24:27 splunk3 sendmail[5655]: n35AORLo005655: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:25:04 splunk3 sendmail[5814]: n35AP499005814: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904051025.n35AP3u9007681@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:25:04 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45694
|
|
Apr 5 03:25:04 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:25:04 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:25:04 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:25:04 splunk3 spamd[6683]: spamd: processing message <200904051025.n35AP3u9007681@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:25:06 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 5 03:25:06 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45694,mid=<200904051025.n35AP3u9007681@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 03:25:06 splunk3 sendmail[5815]: n35AP499005814: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:25:06 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:25:10 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:25:27 splunk3 sendmail[5913]: n35APRg0005913: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:25:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:26:27 splunk3 sendmail[6151]: n35AQR8x006151: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:26:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 03:27:27 splunk3 sendmail[6390]: n35ARRkq006390: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:28:27 splunk3 sendmail[6631]: n35ASRqd006631: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:29:27 splunk3 sendmail[6877]: n35ATRVx006877: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:30:05 splunk3 sendmail[7030]: n35AU5KQ007030: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904051030.n35AU4qG008303@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:30:05 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45750
|
|
Apr 5 03:30:05 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:30:05 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:30:05 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:30:05 splunk3 spamd[6683]: spamd: processing message <200904051030.n35AU4qG008303@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:30:07 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1305 bytes.
|
|
Apr 5 03:30:07 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45750,mid=<200904051030.n35AU4qG008303@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 03:30:07 splunk3 sendmail[7031]: n35AU5KQ007030: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:30:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:30:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:30:27 splunk3 sendmail[7143]: n35AUR2t007143: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:30:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:31:27 splunk3 sendmail[7385]: n35AVRVY007385: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:32:27 splunk3 sendmail[7627]: n35AWRFc007627: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:33:27 splunk3 sendmail[7866]: n35AXRWF007866: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:34:27 splunk3 sendmail[8099]: n35AYRMd008099: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:35:05 splunk3 sendmail[8246]: n35AZ5Yn008246: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904051035.n35AZ5tb009054@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:35:05 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45806
|
|
Apr 5 03:35:05 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:35:05 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:35:05 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:35:05 splunk3 spamd[6683]: spamd: processing message <200904051035.n35AZ5tb009054@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:35:07 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 5 03:35:07 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45806,mid=<200904051035.n35AZ5tb009054@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 03:35:07 splunk3 sendmail[8247]: n35AZ5Yn008246: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:35:07 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:35:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:35:27 splunk3 sendmail[8360]: n35AZRSS008360: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:35:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:36:27 splunk3 sendmail[8599]: n35AaRkT008599: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:37:27 splunk3 sendmail[8838]: n35AbRIu008838: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:38:27 splunk3 sendmail[9078]: n35AcRgI009078: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:39:27 splunk3 sendmail[9315]: n35AdRIw009315: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:40:07 splunk3 sendmail[9480]: n35Ae7xx009480: from=<spammer@spamdomain.com>, size=1029, class=0, nrcpts=1, msgid=<200904051040.n35Ae6o0009683@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:40:07 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45861
|
|
Apr 5 03:40:07 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:40:07 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:40:07 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:40:07 splunk3 spamd[6683]: spamd: processing message <200904051040.n35Ae6o0009683@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:40:09 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1305 bytes.
|
|
Apr 5 03:40:09 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1305,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45861,mid=<200904051040.n35Ae6o0009683@virt2.int.splunk.com>,bayes=0.168672521632541,autolearn=no
|
|
Apr 5 03:40:09 splunk3 sendmail[9481]: n35Ae7xx009480: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31221, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:40:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:40:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:40:27 splunk3 sendmail[9588]: n35AeR2w009588: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:40:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:41:27 splunk3 sendmail[9827]: n35AfRVn009827: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:41:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 03:42:27 splunk3 sendmail[10065]: n35AgRgJ010065: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:43:27 splunk3 sendmail[10306]: n35AhReK010306: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:44:27 splunk3 sendmail[10539]: n35AiRsv010539: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:45:07 splunk3 sendmail[10706]: n35Aj7Qe010706: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904051045.n35Aj7rY010298@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:45:07 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45919
|
|
Apr 5 03:45:07 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:45:07 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:45:07 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:45:07 splunk3 spamd[6683]: spamd: processing message <200904051045.n35Aj7rY010298@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:45:09 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 1.2 seconds, 1308 bytes.
|
|
Apr 5 03:45:09 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=1.2,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45919,mid=<200904051045.n35Aj7rY010298@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 03:45:09 splunk3 sendmail[10707]: n35Aj7Qe010706: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:45:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:45:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:45:27 splunk3 sendmail[10798]: n35AjRLN010798: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:45:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:46:27 splunk3 sendmail[11035]: n35AkREe011035: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:47:27 splunk3 sendmail[11276]: n35AlRN3011276: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:48:27 splunk3 sendmail[11508]: n35AmRMX011508: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:49:27 splunk3 sendmail[11748]: n35AnR4D011748: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:50:08 splunk3 sendmail[11917]: n35Ao8ir011917: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904051050.n35Ao838010908@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:50:08 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45974
|
|
Apr 5 03:50:08 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:50:08 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:50:08 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:50:08 splunk3 spamd[6683]: spamd: processing message <200904051050.n35Ao838010908@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:50:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:50:10 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.1 seconds, 1308 bytes.
|
|
Apr 5 03:50:10 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.1,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45974,mid=<200904051050.n35Ao838010908@virt2.int.splunk.com>,bayes=0.111812575427484,autolearn=no
|
|
Apr 5 03:50:10 splunk3 sendmail[11918]: n35Ao8ir011917: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:50:10 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:50:25 splunk3 sendmail[11991]: n35AoNHZ011991: from=<spamme@splunkit.com>, size=2768, class=0, nrcpts=1, msgid=<200904051050.n35AoNHZ011991@splunk3.splunkit.com>, proto=SMTP, daemon=MTA, relay=pc06123.ict.ne.jp [61.114.69.123]
|
|
Apr 5 03:50:25 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 45986
|
|
Apr 5 03:50:25 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:50:25 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:50:25 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:50:25 splunk3 spamd[6683]: spamd: processing message <200904051050.n35AoNHZ011991@splunk3.splunkit.com> for spamme:501
|
|
Apr 5 03:50:27 splunk3 sendmail[12015]: n35AoRkD012015: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:50:27 splunk3 spamd[6683]: spamd: identified spam (33.1/5.0) for spamme:501 in 1.8 seconds, 3154 bytes.
|
|
Apr 5 03:50:27 splunk3 spamd[6683]: spamd: result: Y 33 - BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,SUBJ_YOUR_DEBT,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=1.8,size=3154,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45986,mid=<200904051050.n35AoNHZ011991@splunk3.splunkit.com>,bayes=1,autolearn=spam
|
|
Apr 5 03:50:27 splunk3 sendmail[11992]: n35AoNHZ011991: to=<spamme@splunkit.com>, ctladdr=<spamme@splunkit.com> (501/502), delay=00:00:03, xdelay=00:00:02, mailer=local, pri=33076, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:50:27 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:50:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:51:27 splunk3 sendmail[12256]: n35ApRrq012256: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:52:27 splunk3 sendmail[12493]: n35AqR4R012493: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:53:27 splunk3 sendmail[12735]: n35ArRcq012735: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:54:27 splunk3 sendmail[12970]: n35AsRBh012970: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:55:09 splunk3 sendmail[13138]: n35At9Ak013138: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904051055.n35At8wq011516@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 03:55:09 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46031
|
|
Apr 5 03:55:09 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 03:55:09 splunk3 spamd[6683]: config: failed to parse, now a plugin, skipping: ok_languages all
|
|
Apr 5 03:55:09 splunk3 spamd[6683]: config: SpamAssassin failed to parse line, ".4" is not valid for "required_hits", skipping: required_hits .4
|
|
Apr 5 03:55:09 splunk3 spamd[6683]: spamd: processing message <200904051055.n35At8wq011516@virt2.int.splunk.com> for spamme:501
|
|
Apr 5 03:55:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 03:55:11 splunk3 spamd[6683]: spamd: identified spam (100.6/5.0) for spamme:501 in 2.5 seconds, 1308 bytes.
|
|
Apr 5 03:55:11 splunk3 spamd[6683]: spamd: result: Y 100 - AWL,BAYES_20,HTML_30_40,HTML_MESSAGE,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,NO_REAL_NAME,USER_IN_BLACKLIST scantime=2.5,size=1308,user=spamme,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46031,mid=<200904051055.n35At8wq011516@virt2.int.splunk.com>,bayes=0.111805162197268,autolearn=no
|
|
Apr 5 03:55:11 splunk3 sendmail[13139]: n35At9Ak013138: to=<spamme@splunkit.com>, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 03:55:11 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 03:55:27 splunk3 sendmail[13228]: n35AtRRe013228: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:55:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 03:56:27 splunk3 sendmail[13505]: n35AuRTA013505: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:56:31 splunk3 imap-login: Aborted login [::ffff:10.2.1.48]
|
|
Apr 5 03:57:27 splunk3 sendmail[13747]: n35AvRQO013747: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:58:27 splunk3 sendmail[13982]: n35AwRxt013982: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 03:59:27 splunk3 sendmail[14221]: n35AxRpn014221: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 04:00:04 splunk3 sendmail[14428]: n35B045I014428: from=root, size=291, class=0, nrcpts=1, msgid=<200904051100.n35B045I014428@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 04:00:04 splunk3 sendmail[14432]: n35B04l5014432: from=<root@splunk3.splunkit.com>, size=564, class=0, nrcpts=1, msgid=<200904051100.n35B045I014428@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 04:00:04 splunk3 sendmail[14428]: n35B045I014428: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30291, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35B04l5014432 Message accepted for delivery)
|
|
Apr 5 04:00:05 splunk3 sendmail[14433]: n35B04l5014432: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30791, dsn=2.0.0, stat=Sent
|
|
Apr 5 04:00:09 splunk3 sendmail[14460]: n35B09EF014460: from=<spammer@spamdomain.com>, size=1032, class=0, nrcpts=1, msgid=<200904051100.n35B09CC012150@virt2.int.splunk.com>, proto=ESMTP, daemon=MTA, relay=[64.127.105.34]
|
|
Apr 5 04:00:09 splunk3 spamd[6683]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46089
|
|
Apr 5 04:00:09 splunk3 spamd[6683]: spamd: setuid to spamme succeeded
|
|
Apr 5 04:00:09 splunk3 spamd[6683]: config: failed to load user (spamme) scores from SQL database: config: SQL error: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
|
|
Apr 5 04:00:09 splunk3 spamd[6683]: spamd: service unavailable: Error fetching user preferences via SQL at /usr/bin/spamd line 1679.
|
|
Apr 5 04:00:09 splunk3 sendmail[14461]: n35B09EF014460: to=<spamme@splunkit.com>, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31224, dsn=2.0.0, stat=Sent
|
|
Apr 5 04:00:09 splunk3 spamd[3033]: prefork: child states: II
|
|
Apr 5 04:00:09 splunk3 imap-login: Disconnected [::ffff:127.0.0.1]
|
|
Apr 5 04:00:19 splunk3 sendmail[14513]: n35B0IOA014513: from=<splunk@localhost>, size=725, class=0, nrcpts=1, msgid=<200904051100.n35B0IOA014513@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 04:00:19 splunk3 sendmail[14515]: n35B0IOA014513: to=<mark@splunk.com>, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120725, relay=[10.2.1.10] [10.2.1.10], dsn=5.1.1, stat=User unknown
|
|
Apr 5 04:00:19 splunk3 sendmail[14515]: n35B0IOA014513: to=<splunk@localhost>, delay=00:00:01, mailer=local, pri=120725, dsn=5.1.1, stat=User unknown
|
|
Apr 5 04:00:19 splunk3 sendmail[14515]: n35B0IOA014513: n35B0JOA014515: postmaster notify: User unknown
|
|
Apr 5 04:00:21 splunk3 sendmail[14515]: n35B0JOA014515: to=root, delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32093, dsn=2.0.0, stat=Sent
|
|
Apr 5 04:00:27 splunk3 sendmail[14565]: n35B0R61014565: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 04:00:33 splunk3 imap-login: Login: spamme [::ffff:10.2.1.57]
|
|
Apr 5 04:01:15 splunk3 sendmail[14695]: n35B11Q7014695: from=root, size=443, class=0, nrcpts=1, msgid=<200904051101.n35B11Q7014695@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 04:01:15 splunk3 sendmail[14758]: n35B1FuX014758: from=<root@splunk3.splunkit.com>, size=716, class=0, nrcpts=1, msgid=<200904051101.n35B11Q7014695@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 04:01:15 splunk3 sendmail[14695]: n35B11Q7014695: to=root, ctladdr=root (0/0), delay=00:00:14, xdelay=00:00:00, mailer=relay, pri=30443, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35B1FuX014758 Message accepted for delivery)
|
|
Apr 5 04:01:17 splunk3 sendmail[14759]: n35B1FuX014758: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=30943, dsn=2.0.0, stat=Sent
|
|
Apr 5 04:01:27 splunk3 sendmail[14821]: n35B1Rh8014821: lb1.int.splunk.com [10.2.1.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
|
|
Apr 5 04:02:05 splunk3 sendmail[15273]: n35B25ej015273: from=root, size=2102, class=0, nrcpts=1, msgid=<200904051102.n35B25ej015273@splunk3.splunkit.com>, relay=root@localhost
|
|
Apr 5 04:02:05 splunk3 sendmail[15275]: n35B25pq015275: from=<root@splunk3.splunkit.com>, size=2402, class=0, nrcpts=1, msgid=<200904051102.n35B25ej015273@splunk3.splunkit.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
|
|
Apr 5 04:02:05 splunk3 sendmail[15273]: n35B25ej015273: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=32102, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n35B25pq015275 Message accepted for delivery)
|
|
Apr 5 04:02:07 splunk3 sendmail[15276]: n35B25pq015275: to=<root@splunk3.splunkit.com>, ctladdr=<root@splunk3.splunkit.com> (0/0), delay=00:00:02, xdelay=00:00:02, mailer=local, pri=32635, dsn=2.0.0, stat=Sent
|