|
|
ssjh.sk 02/15/10:05.00 ACTIVE SYSTEM ATTACK! |
HTML5, css3
Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Feb 15 04:10:10 ssjh portsentry[2338]: attackalert: TCP SYN/Normal scan from host:
static-host119-73-65-34.link.net.pk/119.73.65.34 to TCP port: 23
Feb 15 04:10:10 ssjh portsentry[2338]: attackalert: Host 119.73.65.34 has been blocked via
wrappers with string: "ALL: 119.73.65.34"
Feb 15 04:10:10 ssjh portsentry[2338]: attackalert: Host 119.73.65.34 has been blocked via
dropped route using command: "/sbin/iptables -I INPUT -s 119.73.65.34 -j DROP"
Security Violations
=-=-=-=-=-=-=-=-=-=
Feb 15 04:10:10 ssjh portsentry[2338]: attackalert: TCP SYN/Normal scan from host:
static-host119-73-65-34.link.net.pk/119.73.65.34 to TCP port: 23
Feb 15 04:10:10 ssjh portsentry[2338]: attackalert: Host 119.73.65.34 has been blocked via
wrappers with string: "ALL: 119.73.65.34"
Feb 15 04:10:10 ssjh portsentry[2338]: attackalert: Host 119.73.65.34 has been blocked via
dropped route using command: "/sbin/iptables -I INPUT -s 119.73.65.34 -j DROP"
Feb 15 04:20:01 ssjh crond[11632]: (root) CMD (/usr/bin/env python /usr/bin/denyhosts.py
--daemon --config=/etc/denyhosts.conf)
Feb 15 04:40:02 ssjh crond[14635]: (root) CMD (/usr/bin/env python /usr/bin/denyhosts.py
--daemon --config=/etc/denyhosts.conf)
Feb 15 05:00:01 ssjh crond[28502]: (root) CMD (/usr/bin/env python /usr/bin/denyhosts.py
--daemon --config=/etc/denyhosts.conf)
Feb 15 04:01:06 ssjh update.bad.phishing.sites: Delaying cron job up to 600 seconds
Feb 15 04:26:37 ssjh postfix/smtpd[12926]: NOQUEUE: reject: RCPT from unknown[91.148.86.128]:
450 4.7.1 : Recipient address rejected: Greylisted for 5 minutes;
from= to= proto=ESMTP helo=<[91.148.86.128]>
Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Feb 15 04:00:06 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:00:06 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:00:06 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45893
Feb 15 04:00:06 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45893
Feb 15 04:00:06 ssjh MailScanner[19682]: Saved archive copies of B5B0EBE60026.AFC26
Feb 15 04:00:16 ssjh named[12127]: FORMERR resolving 'bayeinsaat.com/NS/IN': 209.85.84.67#53
Feb 15 04:00:20 ssjh MailScanner[4863]: Saved archive copies of DD035BE60024.A2450
Feb 15 04:00:20 ssjh named[12127]: FORMERR resolving 'bayeinsaat.com/NS/IN': 209.85.87.67#53
Feb 15 04:00:20 ssjh MailScanner[4863]: Saved archive copies of AF8EFBE60027.A23FB
Feb 15 04:00:26 ssjh amavis[32302]: (32302-16) Passed CLEAN, -> ,
Message-ID: <20100215030006.DD035BE60024@ssjh.sk>, mail_id: XDHCkUbKADbq, Hits: -100.001,
size: 1095, queued_as: 7217ABE60024, 5917 ms
Feb 15 04:00:28 ssjh amavis[6421]: (06421-16) Passed CLEAN, -> ,
Message-ID: <20100215030019.AF8EFBE60027@ssjh.sk>, mail_id: MPbYu2LR947S, Hits: -100.001,
size: 944, queued_as: BD8A0BE60026, 1995 ms
Feb 15 04:00:29 ssjh named[12127]: FORMERR resolving 'bayeinsaat.com/NS/IN': 209.85.87.67#53
Feb 15 04:00:29 ssjh named[12127]: FORMERR resolving 'bayeinsaat.com/NS/IN': 209.85.84.67#53
Feb 15 04:00:31 ssjh amavis[32302]: (32302-17) Passed CLEAN, -> ,
Message-ID: <20100215030005.B5B0EBE60026@ssjh.sk>, mail_id: 6Q+1VSPQvqR9, Hits: -100.001,
size: 48775, queued_as: 5741BBE60024, 4369 ms
Feb 15 04:05:02 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:05:02 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:05:02 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45895
Feb 15 04:05:02 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45895
Feb 15 04:10:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:10:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:10:01 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45901
Feb 15 04:10:01 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45901
Feb 15 04:10:10 ssjh portsentry[2338]: attackalert: TCP SYN/Normal scan from host:
static-host119-73-65-34.link.net.pk/119.73.65.34 to TCP port: 23
Feb 15 04:10:10 ssjh portsentry[2338]: attackalert: Host 119.73.65.34 has been blocked via
wrappers with string: "ALL: 119.73.65.34"
Feb 15 04:10:10 ssjh portsentry[2338]: attackalert: Host 119.73.65.34 has been blocked via
dropped route using command: "/sbin/iptables -I INPUT -s 119.73.65.34 -j DROP"
Feb 15 04:15:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:15:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:15:01 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45910
Feb 15 04:15:01 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45910
Feb 15 04:20:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:20:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:20:02 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45917
Feb 15 04:20:02 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45917
Feb 15 04:20:03 ssjh MailScanner[4863]: Saved archive copies of C4FF6BE60025.A0FBA
Feb 15 04:20:10 ssjh amavis[6421]: (06421-17) Passed CLEAN, -> ,
Message-ID: <20100215032001.C4FF6BE60025@ssjh.sk>, mail_id: 6IT8+9Huc9CF, Hits: -100.001,
size: 1095, queued_as: CED74BE60025, 1597 ms
Feb 15 04:25:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:25:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:25:02 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45920
Feb 15 04:25:02 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45920
Feb 15 04:26:37 ssjh sqlgrey: spam: 41.141.122.118: aix@ssjh.sk -> aix@ssjh.sk at 2010-02-14
02:59:30
Feb 15 04:26:37 ssjh sqlgrey: perf: spent 0s cleaning: from_awl (0) domain_awl (0) connect (1)
Feb 15 04:26:37 ssjh sqlgrey: grey: new: 91.148.86.128(91.148.86.128), aix@ssjh.sk ->
aix@ssjh.sk
Feb 15 04:30:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:30:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:30:02 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45924
Feb 15 04:30:02 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45924
Feb 15 04:35:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:35:01 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:35:02 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45931
Feb 15 04:35:02 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45931
Feb 15 04:40:02 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:40:02 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:40:02 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45937
Feb 15 04:40:02 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45937
Feb 15 04:40:03 ssjh MailScanner[4863]: Saved archive copies of 488B1BE60025.A0B6F
Feb 15 04:40:14 ssjh amavis[32302]: (32302-18) (!!)WARN: all primary virus scanners failed,
considering backups
Feb 15 04:40:16 ssjh amavis[32302]: (32302-18) Passed CLEAN, -> ,
Message-ID: <20100215034002.488B1BE60025@ssjh.sk>, mail_id: IBXodDf-0bYt, Hits: -100.001,
size: 1095, queued_as: 86754BE60025, 1940 ms
Feb 15 04:45:02 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:45:02 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:45:02 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:45940
Feb 15 04:45:02 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:45940
Feb 15 04:46:30 ssjh dhcpd: DHCPREQUEST for 10.13.93.100 from 00:e0:4d:3b:e7:3f via eth0:
unknown lease 10.13.93.100.
Feb 15 04:46:30 ssjh dhcpd: DHCPREQUEST for 10.13.93.100 from 00:e0:4d:3b:e7:3f via
10.13.93.4: unknown lease 10.13.93.100.
Feb 15 04:46:30 ssjh dhcpd: DHCPREQUEST for 10.13.93.100 from 00:e0:4d:3b:e7:3f via
10.13.93.3: unknown lease 10.13.93.100.
Feb 15 04:47:19 ssjh dhcpd: DHCPINFORM from 10.13.93.100 via eth0: not authoritative for
subnet 10.13.93.0
Feb 15 04:47:19 ssjh dhcpd: DHCPINFORM from 10.13.93.100 via 10.13.93.3: not authoritative for
subnet 10.13.93.0
Feb 15 04:47:19 ssjh dhcpd: DHCPINFORM from 10.13.93.100 via 10.13.93.4: not authoritative for
subnet 10.13.93.0
Feb 15 04:49:51 ssjh anacron[16118]: Updated timestamp for job `cron.daily' to 2010-02-15
Feb 15 04:50:14 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:50:14 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:50:14 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:46155
Feb 15 04:50:14 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:46155
Feb 15 04:50:27 ssjh MailScanner[4863]: Saved archive copies of BCDE6BE60025.AF265
Feb 15 04:50:40 ssjh amavis[6421]: (06421-18) Passed CLEAN, -> ,
Message-ID: <20100215035024.BCDE6BE60025@ssjh.sk>, mail_id: Op1eD8jfOzRl, Hits: -100.001,
size: 16679, queued_as: 50FF5BE60025, 7416 ms
Feb 15 04:53:51 ssjh MailScanner[4863]: Saved archive copies of 234E2BE60024.A2964
1E070BE60025.AF93C
Feb 15 04:53:57 ssjh amavis[6421]: (06421-19) Passed CLEAN, ->
, Message-ID: <20100215035350.234E2BE60024@ssjh.sk>, mail_id: 2cQ0QMrj96Bq,
Hits: -100.001, size: 3550, queued_as: B72CABE60025, 3461 ms
Feb 15 04:53:58 ssjh amavis[32302]: (32302-19) Passed CLEAN, ->
, Message-ID: <20100215035350.1E070BE60025@ssjh.sk>, mail_id: UuBTaOdPsuw7,
Hits: -100.001, size: 827, queued_as: D16E7BE60026, 3613 ms
Feb 15 04:55:04 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:55:04 ssjh blockhosts: final counts: blocking 1, watching 18
Feb 15 04:55:04 ssjh snmpd[2651]: Connection from UDP: [127.0.0.1]:46165
Feb 15 04:55:04 ssjh snmpd[2651]: Received SNMP packet(s) from UDP: [127.0.0.1]:46165
Feb 15 04:50:26 ssjh runuser: pam_unix(runuser-l:session): session opened for user cyrus by
(uid=0)
Feb 15 04:50:26 ssjh runuser: pam_unix(runuser-l:session): session closed for user cyrus
Feb 15 04:52:20 ssjh Rootkit Hunter: Rootkit hunter check started (version 1.3.6)
Feb 15 04:53:50 ssjh Rootkit Hunter: Scanning took 1 minute and 29 seconds
Feb 15 04:53:50 ssjh Rootkit Hunter: Please inspect this machine, because it may be infected.
Feb 15 04:00:06 ssjh postfix/pickup[3388]: B5B0EBE60026: uid=0 from=
Feb 15 04:00:06 ssjh postfix/cleanup[7703]: B5B0EBE60026: hold: header Received: by ssjh.sk
(Postfix, from userid 0)??id B5B0EBE60026; Mon, 15 Feb 2010 04:00:04 +0100 (CET) from local;
from= to=
Feb 15 04:00:06 ssjh postfix/cleanup[7703]: B5B0EBE60026:
message-id=<20100215030005.B5B0EBE60026@ssjh.sk>
Feb 15 04:00:06 ssjh postfix/pickup[3388]: DD035BE60024: uid=0 from=
Feb 15 04:00:06 ssjh postfix/cleanup[7703]: DD035BE60024: hold: header Received: by ssjh.sk
(Postfix, from userid 0)??id DD035BE60024; Mon, 15 Feb 2010 04:00:05 +0100 (CET) from local;
from=
Feb 15 04:00:06 ssjh postfix/cleanup[7703]: DD035BE60024:
message-id=<20100215030006.DD035BE60024@ssjh.sk>
Feb 15 04:00:06 ssjh MailScanner[19682]: New Batch: Scanning 1 messages, 48589 bytes
Feb 15 04:00:06 ssjh MailScanner[19682]: Saved archive copies of B5B0EBE60026.AFC26
Feb 15 04:00:06 ssjh MailScanner[19682]: Virus and Content Scanning: Starting
Feb 15 04:00:17 ssjh MailScanner[4863]: New Batch: Found 2 messages waiting
Feb 15 04:00:17 ssjh MailScanner[4863]: New Batch: Scanning 1 messages, 853 bytes
Feb 15 04:00:20 ssjh MailScanner[4863]: Saved archive copies of DD035BE60024.A2450
Feb 15 04:00:20 ssjh MailScanner[4863]: Virus and Content Scanning: Starting
Feb 15 04:00:20 ssjh postfix/pickup[3388]: AF8EFBE60027: uid=0 from=
Feb 15 04:00:20 ssjh postfix/cleanup[7703]: AF8EFBE60027: hold: header Received: by ssjh.sk
(Postfix, from userid 0)??id AF8EFBE60027; Mon, 15 Feb 2010 04:00:17 +0100 (CET) from local;
from= to=
Feb 15 04:00:20 ssjh postfix/cleanup[7703]: AF8EFBE60027:
message-id=<20100215030019.AF8EFBE60027@ssjh.sk>
Feb 15 04:00:20 ssjh MailScanner[4863]: Requeue: DD035BE60024.A2450 to E4BDBBE60025
Feb 15 04:00:20 ssjh MailScanner[4863]: Uninfected: Delivered 1 messages
Feb 15 04:00:20 ssjh postfix/qmgr[32428]: E4BDBBE60025: from=, size=623, nrcpt=1
(queue active)
Feb 15 04:00:20 ssjh MailScanner[4863]: Deleted 1 messages from processing-database
Feb 15 04:00:20 ssjh amavis[32302]: (32302-16) ESMTP::10024
/var/amavis/amavis-20100214T232015-32302: -> SIZE=623 Received:
from ssjh.sk ([127.0.0.1]) by localhost (mail.ssjh.sk [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP for ; Mon, 15 Feb 2010 04:00:20 +0100 (CET)
Feb 15 04:00:20 ssjh MailScanner[4863]: New Batch: Found 2 messages waiting
Feb 15 04:00:20 ssjh MailScanner[4863]: New Batch: Scanning 1 messages, 696 bytes
Feb 15 04:00:20 ssjh MailScanner[4863]: Saved archive copies of AF8EFBE60027.A23FB
Feb 15 04:00:20 ssjh MailScanner[4863]: Virus and Content Scanning: Starting
Feb 15 04:00:20 ssjh amavis[32302]: (32302-16) Actual message size 1095 B greater than the
declared 623 B
Feb 15 04:00:20 ssjh amavis[32302]: (32302-16) Checking: XDHCkUbKADbq ->
Feb 15 04:00:20 ssjh amavis[32302]: (32302-16) Cached virus check expired, TTL = 180 s
Feb 15 04:00:20 ssjh amavis[32302]: (32302-16) Cached spam check expired, TTL = 600 s
Feb 15 04:00:20 ssjh amavis[32302]: (32302-16) cached dc6dbab11f5b3a5b6836178586080419 from
(0,0)
Feb 15 04:00:20 ssjh amavis[32302]: (32302-16) p001 1 Content-Type: text/plain, size: 204 B,
name:
Feb 15 04:00:26 ssjh postfix/smtpd[8874]: connect from ssjh.sk[127.0.0.1]
Feb 15 04:00:26 ssjh milter-greylist: (unknown id): skipping greylist because address
127.0.0.1 is whitelisted, (from=, rcpt=, addr=ssjh.sk[127.0.0.1])
ACL 134(none)
Feb 15 04:00:26 ssjh postfix/smtpd[8874]: 7217ABE60024: client=ssjh.sk[127.0.0.1]
Feb 15 04:00:26 ssjh postfix/cleanup[7703]: 7217ABE60024:
message-id=<20100215030006.DD035BE60024@ssjh.sk>
Feb 15 04:00:26 ssjh postfix/qmgr[32428]: 7217ABE60024: from=, size=1504,
nrcpt=1 (queue active)
Feb 15 04:00:26 ssjh postfix/smtpd[8874]: disconnect from ssjh.sk[127.0.0.1]
Feb 15 04:00:26 ssjh amavis[32302]: (32302-16) FWD via SMTP: ->
,BODY=7BIT 250 2.6.0 Ok, id=32302-16, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok:
queued as 7217ABE60024
Feb 15 04:00:26 ssjh amavis[32302]: (32302-16) Passed CLEAN, -> ,
Message-ID: <20100215030006.DD035BE60024@ssjh.sk>, mail_id: XDHCkUbKADbq, Hits: -100.001,
size: 1095, queued_as: 7217ABE60024, 5917 ms
Feb 15 04:00:26 ssjh postfix/smtp[8861]: E4BDBBE60025: to=, orig_to=,
relay=127.0.0.1[127.0.0.1]:10024, delay=21, delays=15/0.01/0.01/5.9, dsn=2.0.0, status=sent
(250 2.0.0 Ok: queued as 7217ABE60024)
Feb 15 04:00:26 ssjh amavis[32302]: (32302-16) TIMING [total 5971 ms] - SMTP greeting: 2
(0%)0, SMTP EHLO: 2 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 2 (0%)0, SMTP DATA: 41
(1%)1, check_init: 1 (0%)1, digest_hdr: 0 (0%)1, digest_body: 0 (0%)1, gen_mail_id: 1 (0%)1,
mime_decode: 23 (0%)1, get-file-type1: 14 (0%)1, decompose_part: 1 (0%)1, parts_decode: 0
(0%)1, check_header: 1 (0%)1, AV-scan-1: 4100 (69%)70, spam-wb-list: 2 (0%)70, SA msg read: 0
(0%)70, SA parse: 2 (0%)70, SA check: 1249 (21%)91, update_cache: 5 (0%)91,
decide_mail_destiny: 1 (0%)91, fwd-connect: 305 (5%)96, fwd-mail-pip: 97 (2%)98, fwd-rcpt-pip:
0 (0%)98, fwd-data-chkpnt: 0 (0%)98, write-header: 1 (0%)98, fwd-data-contents: 0 (0%)98,
fwd-end-chkpnt: 59 (1%)99, prepare-dsn: 1 (0%)99, main_log_entry: 8 (0%)99, update_snmp: 2
(0%)99, SMTP pre-response: 0 (0%)99, SMTP response: 1 (0%)99, unlink-1-files: 0 (0%)99,
rundown: 49 (1%)100
Feb 15 04:00:26 ssjh postfix/qmgr[32428]: E4BDBBE60025: removed
Feb 15 04:00:26 ssjh postfix/local[8877]: 7217ABE60024: to=, relay=local,
delay=0.22, delays=0.1/0.08/0/0.04, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 15 04:00:26 ssjh postfix/qmgr[32428]: 7217ABE60024: removed
Feb 15 04:00:26 ssjh MailScanner[4863]: Requeue: AF8EFBE60027.A23FB to D8B71BE60024
Feb 15 04:00:26 ssjh postfix/qmgr[32428]: D8B71BE60024: from=, size=472, nrcpt=1
(queue active)
Feb 15 04:00:26 ssjh MailScanner[4863]: Uninfected: Delivered 1 messages
Feb 15 04:00:26 ssjh amavis[6421]: (06421-16) ESMTP::10024
/var/amavis/amavis-20100214T235905-06421: -> SIZE=472 Received:
from ssjh.sk ([127.0.0.1]) by localhost (mail.ssjh.sk [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP for ; Mon, 15 Feb 2010 04:00:26 +0100 (CET)
Feb 15 04:00:26 ssjh amavis[6421]: (06421-16) Actual message size 944 B greater than the
declared 472 B
Feb 15 04:00:26 ssjh MailScanner[4863]: Deleted 1 messages from processing-database
Feb 15 04:00:26 ssjh amavis[6421]: (06421-16) Checking: MPbYu2LR947S ->
Feb 15 04:00:26 ssjh amavis[6421]: (06421-16) p001 1 Content-Type: text/plain, size: 305 B,
name:
Feb 15 04:00:26 ssjh amavis[6421]: (06421-16) (!!)WARN: all primary virus scanners failed,
considering backups
Feb 15 04:00:26 ssjh MailScanner[19682]: Requeue: B5B0EBE60026.AFC26 to 12EBDBE60025
Feb 15 04:00:27 ssjh MailScanner[19682]: Uninfected: Delivered 1 messages
Feb 15 04:00:27 ssjh postfix/qmgr[32428]: 12EBDBE60025: from=, size=48367,
nrcpt=1 (queue active)
Feb 15 04:00:27 ssjh MailScanner[19682]: Deleted 1 messages from processing-database
Feb 15 04:00:27 ssjh amavis[32302]: (32302-17) ESMTP::10024
/var/amavis/amavis-20100214T232015-32302: -> SIZE=48367 Received:
from ssjh.sk ([127.0.0.1]) by localhost (mail.ssjh.sk [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP for ; Mon, 15 Feb 2010 04:00:27 +0100 (CET)
Feb 15 04:00:27 ssjh amavis[32302]: (32302-17) Actual message size 48775 B greater than the
declared 48367 B
Feb 15 04:00:27 ssjh amavis[32302]: (32302-17) Checking: 6Q+1VSPQvqR9 ->
Feb 15 04:00:27 ssjh amavis[32302]: (32302-17) p001 1 Content-Type: text/plain, size: 47790 B,
name:
Feb 15 04:00:28 ssjh postfix/smtpd[8874]: connect from ssjh.sk[127.0.0.1]
Feb 15 04:00:28 ssjh milter-greylist: (unknown id): skipping greylist because address
127.0.0.1 is whitelisted, (from=, rcpt=, addr=ssjh.sk[127.0.0.1])
ACL 134(none)
Feb 15 04:00:28 ssjh postfix/smtpd[8874]: BD8A0BE60026: client=ssjh.sk[127.0.0.1]
Feb 15 04:00:28 ssjh postfix/cleanup[7703]: BD8A0BE60026:
message-id=<20100215030019.AF8EFBE60027@ssjh.sk>
Feb 15 04:00:28 ssjh postfix/qmgr[32428]: BD8A0BE60026: from=, size=1353,
nrcpt=1 (queue active)
Feb 15 04:00:28 ssjh postfix/smtpd[8874]: disconnect from ssjh.sk[127.0.0.1]
Feb 15 04:00:28 ssjh amavis[6421]: (06421-16) FWD via SMTP: ->
,BODY=7BIT 250 2.6.0 Ok, id=06421-16, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok:
queued as BD8A0BE60026
Feb 15 04:00:28 ssjh postfix/local[8877]: BD8A0BE60026: to=, relay=local,
delay=0.05, delays=0.04/0/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 15 04:00:28 ssjh postfix/qmgr[32428]: BD8A0BE60026: removed
Feb 15 04:00:28 ssjh amavis[6421]: (06421-16) Passed CLEAN, -> ,
Message-ID: <20100215030019.AF8EFBE60027@ssjh.sk>, mail_id: MPbYu2LR947S, Hits: -100.001,
size: 944, queued_as: BD8A0BE60026, 1995 ms
Feb 15 04:00:28 ssjh postfix/smtp[8861]: D8B71BE60024: to=, orig_to=,
relay=127.0.0.1[127.0.0.1]:10024, delay=11, delays=9.1/0.01/0.01/2, dsn=2.0.0, status=sent
(250 2.0.0 Ok: queued as BD8A0BE60026)
Feb 15 04:00:28 ssjh postfix/qmgr[32428]: D8B71BE60024: removed
Feb 15 04:00:28 ssjh amavis[6421]: (06421-16) TIMING [total 2032 ms] - SMTP greeting: 3 (0%)0,
SMTP EHLO: 2 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 3 (0%)0, SMTP DATA: 42 (2%)2,
check_init: 1 (0%)3, digest_hdr: 0 (0%)3, digest_body: 0 (0%)3, gen_mail_id: 1 (0%)3,
mime_decode: 7 (0%)3, get-file-type1: 82 (4%)7, decompose_part: 1 (0%)7, parts_decode: 0
(0%)7, check_header: 2 (0%)7, AV-scan-1: 1633 (80%)87, spam-wb-list: 2 (0%)88, SA msg read: 1
(0%)88, SA parse: 2 (0%)88, SA check: 157 (8%)95, update_cache: 4 (0%)96, decide_mail_destiny:
1 (0%)96, fwd-connect: 6 (0%)96, fwd-mail-pip: 16 (1%)97, fwd-rcpt-pip: 0 (0%)97,
fwd-data-chkpnt: 0 (0%)97, write-header: 1 (0%)97, fwd-data-contents: 0 (0%)97,
fwd-end-chkpnt: 24 (1%)98, prepare-dsn: 1 (0%)98, main_log_entry: 9 (0%)98, update_snmp: 2
(0%)98, SMTP pre-response: 1 (0%)98, SMTP response: 2 (0%)99, unlink-1-files: 1 (0%)99,
rundown: 29 (1%)100
Feb 15 04:00:31 ssjh postfix/smtpd[8874]: connect from ssjh.sk[127.0.0.1]
Feb 15 04:00:31 ssjh milter-greylist: (unknown id): skipping greylist because address
127.0.0.1 is whitelisted, (from=, rcpt=, addr=ssjh.sk[127.0.0.1])
ACL 134(none)
Feb 15 04:00:31 ssjh postfix/smtpd[8874]: 5741BBE60024: client=ssjh.sk[127.0.0.1]
Feb 15 04:00:31 ssjh postfix/cleanup[7703]: 5741BBE60024:
message-id=<20100215030005.B5B0EBE60026@ssjh.sk>
Feb 15 04:00:31 ssjh postfix/qmgr[32428]: 5741BBE60024: from=, size=49246,
nrcpt=1 (queue active)
Feb 15 04:00:31 ssjh postfix/smtpd[8874]: disconnect from ssjh.sk[127.0.0.1]
Feb 15 04:00:31 ssjh amavis[32302]: (32302-17) FWD via SMTP: ->
,BODY=7BIT 250 2.6.0 Ok, id=32302-17, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok:
queued as 5741BBE60024
Feb 15 04:00:31 ssjh amavis[32302]: (32302-17) Passed CLEAN, -> ,
Message-ID: <20100215030005.B5B0EBE60026@ssjh.sk>, mail_id: 6Q+1VSPQvqR9, Hits: -100.001,
size: 48775, queued_as: 5741BBE60024, 4369 ms
Feb 15 04:00:31 ssjh postfix/smtp[8882]: 12EBDBE60025: to=, orig_to=,
relay=127.0.0.1[127.0.0.1]:10024, delay=27, delays=22/0.06/0.01/4.4, dsn=2.0.0, status=sent
(250 2.0.0 Ok: queued as 5741BBE60024)
Feb 15 04:00:31 ssjh postfix/qmgr[32428]: 12EBDBE60025: removed
Feb 15 04:00:31 ssjh amavis[32302]: (32302-17) TIMING [total 4374 ms] - SMTP greeting: 3
(0%)0, SMTP EHLO: 2 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 3 (0%)0, SMTP DATA: 44
(1%)1, check_init: 1 (0%)1, digest_hdr: 0 (0%)1, digest_body: 1 (0%)1, gen_mail_id: 0 (0%)1,
mime_decode: 25 (1%)2, get-file-type1: 36 (1%)3, parts_decode: 0 (0%)3, check_header: 1 (0%)3,
AV-scan-1: 1556 (36%)38, spam-wb-list: 2 (0%)38, SA msg read: 2 (0%)38, SA parse: 3 (0%)38, SA
check: 2606 (60%)98, update_cache: 8 (0%)98, decide_mail_destiny: 1 (0%)98, fwd-connect: 7
(0%)98, fwd-mail-pip: 29 (1%)99, fwd-rcpt-pip: 0 (0%)99, fwd-data-chkpnt: 0 (0%)99,
write-header: 1 (0%)99, fwd-data-contents: 22 (1%)100, fwd-end-chkpnt: 8 (0%)100, prepare-dsn:
1 (0%)100, main_log_entry: 7 (0%)100, update_snmp: 2 (0%)100, SMTP pre-response: 0 (0%)100,
SMTP response: 1 (0%)100, unlink-1-files: 0 (0%)100, rundown: 0 (0%)100
Feb 15 04:00:31 ssjh postfix/local[8877]: 5741BBE60024: to=, relay=local,
delay=0.13, delays=0.06/0/0/0.07, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 15 04:00:31 ssjh postfix/qmgr[32428]: 5741BBE60024: removed
Feb 15 04:01:06 ssjh update.bad.phishing.sites: Delaying cron job up to 600 seconds
Feb 15 04:04:13 ssjh clamd.amavisd[3029]: SelfCheck: Database status OK.
Feb 15 04:09:54 ssjh update.virus.scanners: Delaying cron job up to 600 seconds
Feb 15 04:13:29 ssjh update.virus.scanners: Found clamav installed
Feb 15 04:13:29 ssjh update.virus.scanners: Running autoupdate for clamav
Feb 15 04:13:29 ssjh ClamAV-autoupdate[10663]: ClamAV did not need updating
Feb 15 04:13:29 ssjh update.virus.scanners: Found f-prot-6 installed
Feb 15 04:13:29 ssjh update.virus.scanners: Running autoupdate for f-prot-6
Feb 15 04:13:38 ssjh F-Prot-6 autoupdate[10709]: F-Prot-6 did not need updating
Feb 15 04:13:39 ssjh update.virus.scanners: Found generic installed
Feb 15 04:13:39 ssjh update.virus.scanners: Running autoupdate for generic
Feb 15 04:20:01 ssjh postfix/pickup[3388]: C4FF6BE60025: uid=0 from=
Feb 15 04:20:01 ssjh postfix/cleanup[11681]: C4FF6BE60025: hold: header Received: by ssjh.sk
(Postfix, from userid 0)??id C4FF6BE60025; Mon, 15 Feb 2010 04:20:01 +0100 (CET) from local;
from=
Feb 15 04:20:01 ssjh postfix/cleanup[11681]: C4FF6BE60025:
message-id=<20100215032001.C4FF6BE60025@ssjh.sk>
Feb 15 04:20:03 ssjh MailScanner[4863]: New Batch: Scanning 1 messages, 853 bytes
Feb 15 04:20:03 ssjh MailScanner[4863]: Saved archive copies of C4FF6BE60025.A0FBA
Feb 15 04:20:03 ssjh MailScanner[4863]: Virus and Content Scanning: Starting
Feb 15 04:20:09 ssjh MailScanner[4863]: Requeue: C4FF6BE60025.A0FBA to 6169ABE60024
Feb 15 04:20:09 ssjh MailScanner[4863]: Uninfected: Delivered 1 messages
Feb 15 04:20:09 ssjh postfix/qmgr[32428]: 6169ABE60024: from=, size=623, nrcpt=1
(queue active)
Feb 15 04:20:09 ssjh MailScanner[4863]: Deleted 1 messages from processing-database
Feb 15 04:20:09 ssjh amavis[6421]: (06421-17) ESMTP::10024
/var/amavis/amavis-20100214T235905-06421: -> SIZE=623 Received:
from ssjh.sk ([127.0.0.1]) by localhost (mail.ssjh.sk [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP for ; Mon, 15 Feb 2010 04:20:09 +0100 (CET)
Feb 15 04:20:09 ssjh amavis[6421]: (06421-17) Actual message size 1095 B greater than the
declared 623 B
Feb 15 04:20:09 ssjh amavis[6421]: (06421-17) Checking: 6IT8+9Huc9CF ->
Feb 15 04:20:09 ssjh amavis[6421]: (06421-17) Cached virus check expired, TTL = 180 s
Feb 15 04:20:09 ssjh amavis[6421]: (06421-17) Cached spam check expired, TTL = 600 s
Feb 15 04:20:09 ssjh amavis[6421]: (06421-17) cached dc6dbab11f5b3a5b6836178586080419 from
(0,0)
Feb 15 04:20:09 ssjh amavis[6421]: (06421-17) p001 1 Content-Type: text/plain, size: 204 B,
name:
Feb 15 04:20:10 ssjh postfix/smtpd[12145]: connect from ssjh.sk[127.0.0.1]
Feb 15 04:20:10 ssjh milter-greylist: (unknown id): skipping greylist because address
127.0.0.1 is whitelisted, (from=, rcpt=, addr=ssjh.sk[127.0.0.1])
ACL 134(none)
Feb 15 04:20:10 ssjh postfix/smtpd[12145]: CED74BE60025: client=ssjh.sk[127.0.0.1]
Feb 15 04:20:10 ssjh postfix/cleanup[11681]: CED74BE60025:
message-id=<20100215032001.C4FF6BE60025@ssjh.sk>
Feb 15 04:20:10 ssjh postfix/qmgr[32428]: CED74BE60025: from=, size=1504,
nrcpt=1 (queue active)
Feb 15 04:20:10 ssjh postfix/smtpd[12145]: disconnect from ssjh.sk[127.0.0.1]
Feb 15 04:20:10 ssjh amavis[6421]: (06421-17) FWD via SMTP: ->
,BODY=7BIT 250 2.6.0 Ok, id=06421-17, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok:
queued as CED74BE60025
Feb 15 04:20:10 ssjh amavis[6421]: (06421-17) Passed CLEAN, -> ,
Message-ID: <20100215032001.C4FF6BE60025@ssjh.sk>, mail_id: 6IT8+9Huc9CF, Hits: -100.001,
size: 1095, queued_as: CED74BE60025, 1597 ms
Feb 15 04:20:10 ssjh postfix/smtp[12139]: 6169ABE60024: to=, orig_to=,
relay=127.0.0.1[127.0.0.1]:10024, delay=9.1, delays=7.5/0.02/0/1.6, dsn=2.0.0, status=sent
(250 2.0.0 Ok: queued as CED74BE60025)
Feb 15 04:20:10 ssjh amavis[6421]: (06421-17) TIMING [total 1601 ms] - SMTP greeting: 2 (0%)0,
SMTP EHLO: 1 (0%)0, SMTP pre-MAIL: 0 (0%)0, SMTP pre-DATA-flush: 2 (0%)0, SMTP DATA: 41 (3%)3,
check_init: 1 (0%)3, digest_hdr: 0 (0%)3, digest_body: 0 (0%)3, gen_mail_id: 1 (0%)3,
mime_decode: 8 (1%)4, get-file-type1: 17 (1%)5, decompose_part: 1 (0%)5, parts_decode: 0
(0%)5, check_header: 2 (0%)5, AV-scan-1: 1346 (84%)89, spam-wb-list: 2 (0%)89, SA msg read: 0
(0%)89, SA parse: 2 (0%)89, SA check: 121 (8%)97, update_cache: 4 (0%)97, decide_mail_destiny:
0 (0%)97, fwd-connect: 25 (2%)99, fwd-mail-pip: 7 (0%)99, fwd-rcpt-pip: 0 (0%)99,
fwd-data-chkpnt: 0 (0%)99, write-header: 1 (0%)99, fwd-data-contents: 0 (0%)99,
fwd-end-chkpnt: 6 (0%)99, prepare-dsn: 1 (0%)100, main_log_entry: 5 (0%)100, update_snmp: 1
(0%)100, SMTP pre-response: 0 (0%)100, SMTP response: 1 (0%)100, unlink-1-files: 0 (0%)100,
rundown: 0 (0%)100
Feb 15 04:20:10 ssjh postfix/qmgr[32428]: 6169ABE60024: removed
Feb 15 04:20:10 ssjh postfix/local[12148]: CED74BE60025: to=, relay=local,
delay=0.03, delays=0.01/0.02/0/0, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 15 04:20:10 ssjh postfix/qmgr[32428]: CED74BE60025: removed
Feb 15 04:24:12 ssjh clamd.amavisd[3029]: SelfCheck: Database status OK.
Feb 15 04:26:36 ssjh postfix/smtpd[12926]: connect from unknown[91.148.86.128]
Feb 15 04:26:36 ssjh postfix/smtpd[12926]: setting up TLS connection from
unknown[91.148.86.128]
Feb 15 04:26:37 ssjh postfix/smtpd[12926]: TLS connection established from
unknown[91.148.86.128]: TLSv1 with cipher RC4-MD5 (128/128 bits)
Feb 15 04:26:37 ssjh sqlgrey: spam: 41.141.122.118: aix@ssjh.sk -> aix@ssjh.sk at 2010-02-14
02:59:30
Feb 15 04:26:37 ssjh sqlgrey: perf: spent 0s cleaning: from_awl (0) domain_awl (0) connect (1)
Feb 15 04:26:37 ssjh sqlgrey: grey: new: 91.148.86.128(91.148.86.128), aix@ssjh.sk ->
aix@ssjh.sk
Feb 15 04:26:37 ssjh postfix/smtpd[12926]: NOQUEUE: reject: RCPT from unknown[91.148.86.128]:
450 4.7.1 : Recipient address rejected: Greylisted for 5 minutes;
from= to= proto=ESMTP helo=<[91.148.86.128]>
Feb 15 04:26:37 ssjh postfix/smtpd[12926]: disconnect from unknown[91.148.86.128]
Feb 15 04:29:57 ssjh postfix/anvil[12928]: statistics: max connection rate 1/60s for
(smtp:91.148.86.128) at Feb 15 04:26:36
Feb 15 04:29:57 ssjh postfix/anvil[12928]: statistics: max connection count 1 for
(smtp:91.148.86.128) at Feb 15 04:26:36
Feb 15 04:29:57 ssjh postfix/anvil[12928]: statistics: max cache size 1 at Feb 15 04:26:36
Feb 15 04:34:12 ssjh clamd.amavisd[3029]: SelfCheck: Database status OK.
Feb 15 04:40:02 ssjh postfix/pickup[3388]: 488B1BE60025: uid=0 from=
Feb 15 04:40:02 ssjh postfix/cleanup[14675]: 488B1BE60025: hold: header Received: by ssjh.sk
(Postfix, from userid 0)??id 488B1BE60025; Mon, 15 Feb 2010 04:40:02 +0100 (CET) from local;
from=
Feb 15 04:40:02 ssjh postfix/cleanup[14675]: 488B1BE60025:
message-id=<20100215034002.488B1BE60025@ssjh.sk>
Feb 15 04:40:03 ssjh MailScanner[4863]: New Batch: Scanning 1 messages, 853 bytes
Feb 15 04:40:03 ssjh MailScanner[4863]: Saved archive copies of 488B1BE60025.A0B6F
Feb 15 04:40:03 ssjh MailScanner[4863]: Virus and Content Scanning: Starting
Feb 15 04:40:11 ssjh MailScanner[4863]: Expired 2 records from the SpamAssassin cache
Feb 15 04:40:14 ssjh MailScanner[4863]: Requeue: 488B1BE60025.A0B6F to 47059BE60024
Feb 15 04:40:14 ssjh postfix/qmgr[32428]: 47059BE60024: from=, size=623, nrcpt=1
(queue active)
Feb 15 04:40:14 ssjh MailScanner[4863]: Uninfected: Delivered 1 messages
Feb 15 04:40:14 ssjh amavis[32302]: (32302-18) ESMTP::10024
/var/amavis/amavis-20100214T232015-32302: -> SIZE=623 Received:
from ssjh.sk ([127.0.0.1]) by localhost (mail.ssjh.sk [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP for ; Mon, 15 Feb 2010 04:40:14 +0100 (CET)
Feb 15 04:40:14 ssjh MailScanner[4863]: Deleted 1 messages from processing-database
Feb 15 04:40:14 ssjh amavis[32302]: (32302-18) Actual message size 1095 B greater than the
declared 623 B
Feb 15 04:40:14 ssjh amavis[32302]: (32302-18) Checking: IBXodDf-0bYt ->
Feb 15 04:40:14 ssjh amavis[32302]: (32302-18) Cached virus check expired, TTL = 180 s
Feb 15 04:40:14 ssjh amavis[32302]: (32302-18) Cached spam check expired, TTL = 600 s
Feb 15 04:40:14 ssjh amavis[32302]: (32302-18) cached dc6dbab11f5b3a5b6836178586080419 from
(0,0)
Feb 15 04:40:14 ssjh amavis[32302]: (32302-18) p001 1 Content-Type: text/plain, size: 204 B,
name:
Feb 15 04:40:14 ssjh amavis[32302]: (32302-18) (!!)WARN: all primary virus scanners failed,
considering backups
Feb 15 04:40:16 ssjh postfix/smtpd[15139]: connect from ssjh.sk[127.0.0.1]
Feb 15 04:40:16 ssjh milter-greylist: (unknown id): skipping greylist because address
127.0.0.1 is whitelisted, (from=, rcpt=, addr=ssjh.sk[127.0.0.1])
ACL 134(none)
Feb 15 04:40:16 ssjh postfix/smtpd[15139]: 86754BE60025: client=ssjh.sk[127.0.0.1]
Feb 15 04:40:16 ssjh postfix/cleanup[14675]: 86754BE60025:
message-id=<20100215034002.488B1BE60025@ssjh.sk>
Feb 15 04:40:16 ssjh postfix/qmgr[32428]: 86754BE60025: from=, size=1504,
nrcpt=1 (queue active)
Feb 15 04:40:16 ssjh amavis[32302]: (32302-18) FWD via SMTP: ->
,BODY=7BIT 250 2.6.0 Ok, id=32302-18, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok:
queued as 86754BE60025
Feb 15 04:40:16 ssjh amavis[32302]: (32302-18) Passed CLEAN, -> ,
Message-ID: <20100215034002.488B1BE60025@ssjh.sk>, mail_id: IBXodDf-0bYt, Hits: -100.001,
size: 1095, queued_as: 86754BE60025, 1940 ms
Feb 15 04:40:16 ssjh postfix/smtp[15136]: 47059BE60024: to=, orig_to=,
relay=127.0.0.1[127.0.0.1]:10024, delay=14, delays=12/0.01/0.01/1.9, dsn=2.0.0, status=sent
(250 2.0.0 Ok: queued as 86754BE60025)
Feb 15 04:40:16 ssjh postfix/qmgr[32428]: 47059BE60024: removed
Feb 15 04:40:16 ssjh amavis[32302]: (32302-18) TIMING [total 1944 ms] - SMTP greeting: 2
(0%)0, SMTP EHLO: 2 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 2 (0%)0, SMTP DATA: 41
(2%)2, check_init: 1 (0%)2, digest_hdr: 0 (0%)2, digest_body: 0 (0%)2, gen_mail_id: 0 (0%)3,
mime_decode: 6 (0%)3, get-file-type1: 15 (1%)4, decompose_part: 1 (0%)4, parts_decode: 0
(0%)4, check_header: 1 (0%)4, AV-scan-1: 1519 (78%)82, spam-wb-list: 2 (0%)82, SA msg read: 0
(0%)82, SA parse: 2 (0%)82, SA check: 255 (13%)95, update_cache: 4 (0%)95,
decide_mail_destiny: 0 (0%)95, fwd-connect: 27 (1%)97, fwd-mail-pip: 15 (1%)98, fwd-rcpt-pip:
0 (0%)98, fwd-data-chkpnt: 0 (0%)98, write-header: 1 (0%)98, fwd-data-contents: 0 (0%)98,
fwd-end-chkpnt: 38 (2%)100, prepare-dsn: 1 (0%)100, main_log_entry: 5 (0%)100, update_snmp: 1
(0%)100, SMTP pre-response: 0 (0%)100, SMTP response: 1 (0%)100, unlink-1-files: 0 (0%)100,
rundown: 0 (0%)100
Feb 15 04:40:16 ssjh postfix/smtpd[15139]: disconnect from ssjh.sk[127.0.0.1]
Feb 15 04:40:16 ssjh postfix/local[15142]: 86754BE60025: to=, relay=local,
delay=0.06, delays=0.05/0.01/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 15 04:40:16 ssjh postfix/qmgr[32428]: 86754BE60025: removed
Feb 15 04:44:12 ssjh clamd.amavisd[3029]: SelfCheck: Database status OK.
Feb 15 04:50:24 ssjh postfix/pickup[3388]: BCDE6BE60025: uid=0 from=
Feb 15 04:50:24 ssjh postfix/cleanup[17225]: BCDE6BE60025: hold: header Received: by ssjh.sk
(Postfix, from userid 0)??id BCDE6BE60025; Mon, 15 Feb 2010 04:50:24 +0100 (CET) from local;
from=
Feb 15 04:50:24 ssjh postfix/cleanup[17225]: BCDE6BE60025:
message-id=<20100215035024.BCDE6BE60025@ssjh.sk>
Feb 15 04:50:27 ssjh MailScanner[4863]: New Batch: Scanning 1 messages, 16450 bytes
Feb 15 04:50:27 ssjh MailScanner[4863]: Saved archive copies of BCDE6BE60025.AF265
Feb 15 04:50:27 ssjh MailScanner[4863]: Virus and Content Scanning: Starting
Feb 15 04:50:32 ssjh MailScanner[4863]: Requeue: BCDE6BE60025.AF265 to 14B76BE60024
Feb 15 04:50:32 ssjh postfix/qmgr[32428]: 14B76BE60024: from=, size=16226,
nrcpt=1 (queue active)
Feb 15 04:50:32 ssjh MailScanner[4863]: Uninfected: Delivered 1 messages
Feb 15 04:50:32 ssjh MailScanner[4863]: Deleted 1 messages from processing-database
Feb 15 04:50:32 ssjh amavis[6421]: (06421-18) ESMTP::10024
/var/amavis/amavis-20100214T235905-06421: -> SIZE=16226
Received: from ssjh.sk ([127.0.0.1]) by localhost (mail.ssjh.sk [127.0.0.1]) (amavisd-new,
port 10024) with ESMTP for ; Mon, 15 Feb 2010 04:50:32 +0100 (CET)
Feb 15 04:50:32 ssjh amavis[6421]: (06421-18) Actual message size 16679 B greater than the
declared 16226 B
Feb 15 04:50:32 ssjh amavis[6421]: (06421-18) Checking: Op1eD8jfOzRl ->
Feb 15 04:50:32 ssjh amavis[6421]: (06421-18) p001 1 Content-Type: text/plain, size: 15612 B,
name:
Feb 15 04:50:32 ssjh amavis[6421]: (06421-18) (!!)WARN: all primary virus scanners failed,
considering backups
Feb 15 04:50:39 ssjh postfix/smtpd[17421]: connect from ssjh.sk[127.0.0.1]
Feb 15 04:50:39 ssjh milter-greylist: (unknown id): skipping greylist because address
127.0.0.1 is whitelisted, (from=, rcpt=, addr=ssjh.sk[127.0.0.1])
ACL 134(none)
Feb 15 04:50:40 ssjh postfix/smtpd[17421]: 50FF5BE60025: client=ssjh.sk[127.0.0.1]
Feb 15 04:50:40 ssjh postfix/cleanup[17225]: 50FF5BE60025:
message-id=<20100215035024.BCDE6BE60025@ssjh.sk>
Feb 15 04:50:40 ssjh postfix/qmgr[32428]: 50FF5BE60025: from=, size=17088,
nrcpt=1 (queue active)
Feb 15 04:50:40 ssjh amavis[6421]: (06421-18) FWD via SMTP: ->
,BODY=7BIT 250 2.6.0 Ok, id=06421-18, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok:
queued as 50FF5BE60025
Feb 15 04:50:40 ssjh postfix/smtpd[17421]: disconnect from ssjh.sk[127.0.0.1]
Feb 15 04:50:40 ssjh amavis[6421]: (06421-18) Passed CLEAN, -> ,
Message-ID: <20100215035024.BCDE6BE60025@ssjh.sk>, mail_id: Op1eD8jfOzRl, Hits: -100.001,
size: 16679, queued_as: 50FF5BE60025, 7416 ms
Feb 15 04:50:40 ssjh postfix/smtp[17418]: 14B76BE60024: to=, orig_to=,
relay=127.0.0.1[127.0.0.1]:10024, delay=22, delays=15/0.01/0.01/7.4, dsn=2.0.0, status=sent
(250 2.0.0 Ok: queued as 50FF5BE60025)
Feb 15 04:50:40 ssjh postfix/qmgr[32428]: 14B76BE60024: removed
Feb 15 04:50:40 ssjh amavis[6421]: (06421-18) TIMING [total 7422 ms] - SMTP greeting: 2 (0%)0,
SMTP EHLO: 1 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 3 (0%)0, SMTP DATA: 43 (1%)1,
check_init: 1 (0%)1, digest_hdr: 0 (0%)1, digest_body: 0 (0%)1, gen_mail_id: 1 (0%)1,
mime_decode: 11 (0%)1, get-file-type1: 25 (0%)1, decompose_part: 3 (0%)1, parts_decode: 0
(0%)1, check_header: 2 (0%)1, AV-scan-1: 1667 (22%)24, spam-wb-list: 2 (0%)24, SA msg read: 2
(0%)24, SA parse: 3 (0%)24, SA check: 4761 (64%)88, update_cache: 120 (2%)90,
decide_mail_destiny: 0 (0%)90, fwd-connect: 138 (2%)91, fwd-mail-pip: 90 (1%)93, fwd-rcpt-pip:
0 (0%)93, fwd-data-chkpnt: 0 (0%)93, write-header: 1 (0%)93, fwd-data-contents: 137 (2%)95,
fwd-end-chkpnt: 395 (5%)100, prepare-dsn: 1 (0%)100, main_log_entry: 7 (0%)100, update_snmp: 2
(0%)100, SMTP pre-response: 0 (0%)100, SMTP response: 1 (0%)100, unlink-1-files: 0 (0%)100,
rundown: 1 (0%)100
Feb 15 04:50:40 ssjh postfix/local[17424]: 50FF5BE60025: to=, relay=local,
delay=0.69, delays=0.61/0.01/0/0.07, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 15 04:50:40 ssjh postfix/qmgr[32428]: 50FF5BE60025: removed
Feb 15 04:53:50 ssjh postfix/pickup[3388]: 1E070BE60025: uid=0 from=
Feb 15 04:53:50 ssjh postfix/cleanup[27543]: 1E070BE60025: hold: header Received: by ssjh.sk
(Postfix, from userid 0)??id 1E070BE60025; Mon, 15 Feb 2010 04:53:50 +0100 (CET) from local;
from= to=
Feb 15 04:53:50 ssjh postfix/cleanup[27543]: 1E070BE60025:
message-id=<20100215035350.1E070BE60025@ssjh.sk>
Feb 15 04:53:50 ssjh postfix/pickup[3388]: 234E2BE60024: uid=0 from=
Feb 15 04:53:50 ssjh postfix/cleanup[27543]: 234E2BE60024: hold: header Received: by ssjh.sk
(Postfix, from userid 0)??id 234E2BE60024; Mon, 15 Feb 2010 04:53:50 +0100 (CET) from local;
from= to=
Feb 15 04:53:50 ssjh postfix/cleanup[27543]: 234E2BE60024:
message-id=<20100215035350.234E2BE60024@ssjh.sk>
Feb 15 04:53:51 ssjh MailScanner[4863]: New Batch: Scanning 2 messages, 3912 bytes
Feb 15 04:53:51 ssjh MailScanner[4863]: Saved archive copies of 234E2BE60024.A2964
1E070BE60025.AF93C
Feb 15 04:53:51 ssjh MailScanner[4863]: Virus and Content Scanning: Starting
Feb 15 04:53:54 ssjh MailScanner[4863]: Requeue: 234E2BE60024.A2964 to 11892BE60026
Feb 15 04:53:54 ssjh MailScanner[4863]: Requeue: 1E070BE60025.AF93C to 412ACBE60024
Feb 15 04:53:54 ssjh MailScanner[4863]: Uninfected: Delivered 2 messages
Feb 15 04:53:54 ssjh postfix/qmgr[32428]: 11892BE60026: from=, size=3079,
nrcpt=1 (queue active)
Feb 15 04:53:54 ssjh postfix/qmgr[32428]: 412ACBE60024: from=, size=355, nrcpt=1
(queue active)
Feb 15 04:53:54 ssjh amavis[32302]: (32302-19) ESMTP::10024
/var/amavis/amavis-20100214T232015-32302: -> SIZE=355
Received: from ssjh.sk ([127.0.0.1]) by localhost (mail.ssjh.sk [127.0.0.1]) (amavisd-new,
port 10024) with ESMTP for ; Mon, 15 Feb 2010 04:53:54 +0100 (CET)
Feb 15 04:53:54 ssjh amavis[6421]: (06421-19) ESMTP::10024
/var/amavis/amavis-20100214T235905-06421: -> SIZE=3079
Received: from ssjh.sk ([127.0.0.1]) by localhost (mail.ssjh.sk [127.0.0.1]) (amavisd-new,
port 10024) with ESMTP for ; Mon, 15 Feb 2010 04:53:54 +0100 (CET)
Feb 15 04:53:54 ssjh amavis[32302]: (32302-19) Actual message size 827 B greater than the
declared 355 B
Feb 15 04:53:54 ssjh amavis[32302]: (32302-19) Checking: UuBTaOdPsuw7 ->
Feb 15 04:53:54 ssjh amavis[6421]: (06421-19) Actual message size 3550 B greater than the
declared 3079 B
Feb 15 04:53:54 ssjh amavis[32302]: (32302-19) p001 1 Content-Type: text/plain, size: 215 B,
name:
Feb 15 04:53:54 ssjh amavis[6421]: (06421-19) Checking: 2cQ0QMrj96Bq ->
Feb 15 04:53:54 ssjh amavis[6421]: (06421-19) p001 1 Content-Type: text/plain, size: 2901 B,
name:
Feb 15 04:53:55 ssjh MailScanner[4863]: Deleted 2 messages from processing-database
Feb 15 04:53:57 ssjh postfix/smtpd[27582]: connect from ssjh.sk[127.0.0.1]
Feb 15 04:53:57 ssjh milter-greylist: (unknown id): skipping greylist because address
127.0.0.1 is whitelisted, (from=, rcpt=,
addr=ssjh.sk[127.0.0.1]) ACL 134(none)
Feb 15 04:53:57 ssjh postfix/smtpd[27582]: B72CABE60025: client=ssjh.sk[127.0.0.1]
Feb 15 04:53:57 ssjh postfix/cleanup[27543]: B72CABE60025:
message-id=<20100215035350.234E2BE60024@ssjh.sk>
Feb 15 04:53:57 ssjh postfix/qmgr[32428]: B72CABE60025: from=, size=3970,
nrcpt=1 (queue active)
Feb 15 04:53:57 ssjh amavis[6421]: (06421-19) FWD via SMTP: ->
,BODY=7BIT 250 2.6.0 Ok, id=06421-19, from MTA([127.0.0.1]:10025): 250
2.0.0 Ok: queued as B72CABE60025
Feb 15 04:53:57 ssjh postfix/smtpd[27582]: disconnect from ssjh.sk[127.0.0.1]
Feb 15 04:53:57 ssjh amavis[6421]: (06421-19) Passed CLEAN, ->
, Message-ID: <20100215035350.234E2BE60024@ssjh.sk>, mail_id: 2cQ0QMrj96Bq,
Hits: -100.001, size: 3550, queued_as: B72CABE60025, 3461 ms
Feb 15 04:53:57 ssjh amavis[6421]: (06421-19) TIMING [total 3466 ms] - SMTP greeting: 2 (0%)0,
SMTP EHLO: 1 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush: 2 (0%)0, SMTP DATA: 42 (1%)1,
check_init: 1 (0%)1, digest_hdr: 0 (0%)1, digest_body: 0 (0%)1, gen_mail_id: 1 (0%)1,
mime_decode: 8 (0%)2, get-file-type1: 19 (1%)2, decompose_part: 1 (0%)2, parts_decode: 0
(0%)2, check_header: 2 (0%)2, AV-scan-1: 1628 (47%)49, spam-wb-list: 2 (0%)49, SA msg read: 1
(0%)49, SA parse: 2 (0%)49, SA check: 1502 (43%)93, update_cache: 6 (0%)93,
decide_mail_destiny: 1 (0%)93, fwd-connect: 158 (5%)97, fwd-mail-pip: 7 (0%)98, fwd-rcpt-pip:
0 (0%)98, fwd-data-chkpnt: 0 (0%)98, write-header: 1 (0%)98, fwd-data-contents: 0 (0%)98,
fwd-end-chkpnt: 68 (2%)100, prepare-dsn: 1 (0%)100, main_log_entry: 8 (0%)100, update_snmp: 2
(0%)100, SMTP pre-response: 1 (0%)100, SMTP response: 1 (0%)100, unlink-1-files: 0 (0%)100,
rundown: 0 (0%)100
Feb 15 04:53:57 ssjh postfix/smtp[27576]: 11892BE60026: to=,
orig_to=, relay=127.0.0.1[127.0.0.1]:10024, delay=7.7, delays=4.2/0.02/0/3.5,
dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as B72CABE60025)
Feb 15 04:53:57 ssjh postfix/smtpd[27582]: connect from ssjh.sk[127.0.0.1]
Feb 15 04:53:58 ssjh milter-greylist: (unknown id): skipping greylist because address
127.0.0.1 is whitelisted, (from=, rcpt=,
addr=ssjh.sk[127.0.0.1]) ACL 134(none)
Feb 15 04:53:58 ssjh postfix/qmgr[32428]: 11892BE60026: removed
Feb 15 04:53:58 ssjh postfix/local[27585]: B72CABE60025: to=, relay=local,
delay=0.11, delays=0.07/0.01/0/0.03, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 15 04:53:58 ssjh postfix/qmgr[32428]: B72CABE60025: removed
Feb 15 04:53:58 ssjh postfix/smtpd[27582]: D16E7BE60026: client=ssjh.sk[127.0.0.1]
Feb 15 04:53:58 ssjh postfix/cleanup[27543]: D16E7BE60026:
message-id=<20100215035350.1E070BE60025@ssjh.sk>
Feb 15 04:53:58 ssjh postfix/qmgr[32428]: D16E7BE60026: from=, size=1246,
nrcpt=1 (queue active)
Feb 15 04:53:58 ssjh postfix/smtpd[27582]: disconnect from ssjh.sk[127.0.0.1]
Feb 15 04:53:58 ssjh amavis[32302]: (32302-19) FWD via SMTP: ->
,BODY=7BIT 250 2.6.0 Ok, id=32302-19, from MTA([127.0.0.1]:10025): 250
2.0.0 Ok: queued as D16E7BE60026
Feb 15 04:53:58 ssjh postfix/local[27585]: D16E7BE60026: to=, relay=local,
delay=0.12, delays=0.1/0/0/0.02, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 15 04:53:58 ssjh amavis[32302]: (32302-19) Passed CLEAN, ->
, Message-ID: <20100215035350.1E070BE60025@ssjh.sk>, mail_id: UuBTaOdPsuw7,
Hits: -100.001, size: 827, queued_as: D16E7BE60026, 3613 ms
Feb 15 04:53:58 ssjh postfix/qmgr[32428]: D16E7BE60026: removed
Feb 15 04:53:58 ssjh postfix/smtp[27577]: 412ACBE60024: to=,
orig_to=, relay=127.0.0.1[127.0.0.1]:10024, delay=7.9,
delays=4.2/0.02/0.01/3.6, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as D16E7BE60026)
Feb 15 04:53:58 ssjh amavis[32302]: (32302-19) TIMING [total 3658 ms] - SMTP greeting: 2
(0%)0, SMTP EHLO: 2 (0%)0, SMTP pre-MAIL: 0 (0%)0, SMTP pre-DATA-flush: 2 (0%)0, SMTP DATA: 40
(1%)1, check_init: 1 (0%)1, digest_hdr: 0 (0%)1, digest_body: 0 (0%)1, gen_mail_id: 1 (0%)1,
mime_decode: 8 (0%)2, get-file-type1: 77 (2%)4, decompose_part: 1 (0%)4, parts_decode: 0
(0%)4, check_header: 2 (0%)4, AV-scan-1: 1990 (54%)58, spam-wb-list: 2 (0%)58, SA msg read: 0
(0%)58, SA parse: 1 (0%)58, SA check: 1342 (37%)95, update_cache: 6 (0%)95,
decide_mail_destiny: 1 (0%)95, fwd-connect: 8 (0%)95, fwd-mail-pip: 79 (2%)97, fwd-rcpt-pip: 0
(0%)97, fwd-data-chkpnt: 0 (0%)97, write-header: 1 (0%)97, fwd-data-contents: 0 (0%)97,
fwd-end-chkpnt: 41 (1%)99, prepare-dsn: 1 (0%)99, main_log_entry: 30 (1%)99, update_snmp: 2
(0%)99, SMTP pre-response: 0 (0%)99, SMTP response: 1 (0%)100, unlink-1-files: 0 (0%)100,
rundown: 18 (0%)100
Feb 15 04:53:58 ssjh postfix/qmgr[32428]: 412ACBE60024: removed
Feb 15 04:54:12 ssjh clamd.amavisd[3029]: SelfCheck: Database status OK.
Feb 15 04:54:23 ssjh update.phishing.sites: Delaying cron job up to 600 seconds
Feb 15 04:58:46 ssjh update.phishing.sites: Phishing safe sites list updated
Feb 15 04:58:46 ssjh update_spamassassin: Delaying cron job up to 600 seconds
--
Tato sprava bola prehladana na vyskyt virusov
a nebezpecneho obsahu antivirovym systemom
Spojenej skoly Juraja Henischa v Bardejove
a zda sa byt cista.
Spojená škola Juraja Henischa,
Slovenská 5 Bardejov, Rdeň NEWS,
František Haluška, HTML5
