ByEzel
2023-01-04 05:07:08 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'Hx1dUnyF.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 05:08:47 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 05:13:09 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 05:15:12 #1529454(rspamd_proxy) <2c773d>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 51814
2023-01-04 05:15:12 #1529454(rspamd_proxy) <2c773d>; milter; rspamd_milter_process_command: got connection from 54.240.4.5:60245
2023-01-04 05:15:12 #1529454(rspamd_proxy) <2c773d>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 05:15:12 #1529454(rspamd_proxy) <f750c0>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 51826
2023-01-04 05:15:35 #1529454(rspamd_proxy) <f750c0>; milter; rspamd_milter_process_command: got connection from 54.240.4.5:50891
2023-01-04 05:15:35 #1529454(rspamd_proxy) <f750c0>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 05:15:38 #1529455(controller) <qbq3yk>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 09:15:38 GMT (http cache based: Wed, 04 Jan 2023 09:15:38 GMT)
2023-01-04 05:19:37 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'G3Pu4WROzaELEp5sFzcOG.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 05:19:57 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 05:23:26 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 05:29:56 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'dnQBcswGvZH1pksEXO.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 05:33:06 #1529455(controller) <dyatkr>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 09:33:06 GMT (http cache based: Wed, 04 Jan 2023 09:33:06 GMT)
2023-01-04 05:33:07 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 05:37:13 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 05:42:46 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 05:45:21 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'Uw9333mJq.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 05:46:46 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 05:47:25 #1529455(controller) <yhcyzt>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 09:47:25 GMT (http cache based: Wed, 04 Jan 2023 09:47:25 GMT)
2023-01-04 05:54:49 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 05:56:23 #1529455(controller) <1u5hdp>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 09:48:04 GMT (http cache based: Wed, 04 Jan 2023 09:48:04 GMT)
2023-01-04 05:57:57 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:01:05 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'PrFaT8rETy.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:07:19 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 06:08:15 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:14:41 #1529454(rspamd_proxy) <5c0ef3>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 60922
2023-01-04 06:14:41 #1529454(rspamd_proxy) <5c0ef3>; milter; rspamd_milter_process_command: got connection from 74.82.47.58:24039
2023-01-04 06:14:41 #1529454(rspamd_proxy) <5c0ef3>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 06:15:10 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'q6ZAI_R1.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:18:04 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:19:17 #1529455(controller) <fdp86m>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 10:19:17 GMT (http cache based: Wed, 04 Jan 2023 10:19:17 GMT)
2023-01-04 06:19:48 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 06:29:33 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:30:00 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'Nr9cvVZOAXFLXGxoKRmijgqe_BKcN.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:32:47 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 06:39:46 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:41:54 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_propagate_success: restoring multi.uribl.com after 23675.9 seconds of downtime, total downtime: 27462.1
2023-01-04 06:41:54 #1529455(controller) <q7onfz>; cfg; rspamd_worker_monitored_on_change: broadcast monitored update for imhkkkzu76dtxr3ajyrpn947zwx9kfa: alive
2023-01-04 06:41:54 #1529454(rspamd_proxy) <q7onfz>; cfg; rspamd_worker_monitored_handler: updated monitored status for imhkkkzu76dtxr3ajyrpn947zwx9kfa: alive
2023-01-04 06:41:54 #1529462(normal) <q7onfz>; cfg; rspamd_worker_monitored_handler: updated monitored status for imhkkkzu76dtxr3ajyrpn947zwx9kfa: alive
2023-01-04 06:44:49 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'S6pmz7HTsSLhoJfdGQ-IV1PRqNpJX.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:48:00 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:48:40 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 06:50:58 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 06:52:08 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 06:52:08 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_propagate_error: invalid return on resolving multi.uribl.com, disable object
2023-01-04 06:52:08 #1529455(controller) <q7onfz>; cfg; rspamd_worker_monitored_on_change: broadcast monitored update for imhkkkzu76dtxr3ajyrpn947zwx9kfa: dead
2023-01-04 06:52:08 #1529454(rspamd_proxy) <q7onfz>; cfg; rspamd_worker_monitored_handler: updated monitored status for imhkkkzu76dtxr3ajyrpn947zwx9kfa: dead
2023-01-04 06:52:08 #1529462(normal) <q7onfz>; cfg; rspamd_worker_monitored_handler: updated monitored status for imhkkkzu76dtxr3ajyrpn947zwx9kfa: dead
2023-01-04 06:55:59 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 06:56:25 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 06:57:38 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'J3HrfHoEghv5t-6liNfqOvs.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:01:39 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 07:07:03 #1529455(controller) <k8f914>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 10:58:44 GMT (http cache based: Wed, 04 Jan 2023 10:58:44 GMT)
2023-01-04 07:09:00 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for '41c0IUxq.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:11:45 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:13:22 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 07:21:35 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 07:24:09 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'sNzYQDHh.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:27:36 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:34:02 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'aJ4hnAP9oRFrMMu0deDuunachU.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:36:59 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 07:38:21 #1529455(controller) <7n3qic>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 11:30:02 GMT (http cache based: Wed, 04 Jan 2023 11:30:02 GMT)
2023-01-04 07:39:12 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:43:13 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'o4Jx9L8B.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:45:53 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 07:50:13 #1529455(controller) <o33omj>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 11:50:13 GMT (http cache based: Wed, 04 Jan 2023 11:50:13 GMT)
2023-01-04 07:53:13 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:58:03 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'dBAoBiudvWsLK06.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 07:59:49 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 08:08:34 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'DaQUNYOF.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 08:09:10 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 08:14:09 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 08:20:26 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'rYwo7bM42IEjTQHPOmwCTYWUcTV.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 08:24:11 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 08:28:19 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 08:34:55 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'lTMwk29RSl_1rHZ.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 08:39:10 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 08:42:43 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 08:43:10 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'NFjeKV0UYqV2SaO9RphJKTb-PrDsMhj.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 08:50:14 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 08:53:48 #1529455(controller) <qamb1r>; map; http_map_finish: need to reread map from https://maps.rspamd.com/rspamd/dmarc_whitelist_new.inc.zst
2023-01-04 08:53:48 #1529455(controller) <qamb1r>; map; http_map_finish: stored map data in a shared memory cache: /rhm.03218bc5f2b5df0b90fc
2023-01-04 08:53:48 #1529455(controller) <qamb1r>; map; http_map_finish: https://maps.rspamd.com/rspamd/dmarc_whitelist_new.inc.zst(88.198.198.21:443): read map data 4170 bytes compressed, 10817 uncompressed, next check at Wed, 04 Jan 2023 12:53:48 GMT
2023-01-04 08:53:48 #1529455(controller) <qamb1r>; map; rspamd_map_save_http_cached_file: saved data from https://maps.rspamd.com/rspamd/dmarc_whitelist_new.inc.zst in /var/lib/rspamd/877aa38dd77ed707d20b2f77d46b905b69a6295a.map, 10857 bytes
2023-01-04 08:53:48 #1529455(controller) <qamb1r>; map; rspamd_map_file_read_callback: rereading map file /etc/rspamd/local.d/maps.d/dmarc_whitelist.inc.local
2023-01-04 08:53:48 #1529455(controller) <qamb1r>; map; read_map_file: /etc/rspamd/local.d/maps.d/dmarc_whitelist.inc.local: map file is not found; it will be read automatically if created
2023-01-04 08:53:48 #1529455(controller) <qamb1r>; map; rspamd_map_file_read_callback: rereading map file /var/lib/rspamd/dmarc_whitelist.inc.local
2023-01-04 08:53:48 #1529455(controller) <qamb1r>; map; read_map_file: /var/lib/rspamd/dmarc_whitelist.inc.local: map file is not found; it will be read automatically if created
2023-01-04 08:53:48 #1529455(controller) <qamb1r>; map; rspamd_kv_list_fin: read hash of 783 elements from https://maps.rspamd.com/rspamd/dmarc_whitelist_new.inc.zst
2023-01-04 08:54:53 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for '8pIHBJgr.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 08:54:56 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 08:58:48 #1529455(controller) <qamb1r>; map; rspamd_map_cache_cb: cached data is now expired (gen mismatch 1 != 2) for https://maps.rspamd.com/rspamd/dmarc_whitelist_new.inc.zst; shm name=/rhm.8b245742d0cca96f2f20; refcount=1
2023-01-04 09:01:38 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:10:31 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for '8dk5gPlz.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:10:56 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 09:14:29 #1529454(rspamd_proxy) <bdf52b>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 40332
2023-01-04 09:14:29 #1529454(rspamd_proxy) <bdf52b>; milter; rspamd_milter_process_command: got connection from 18.134.243.20:21345
2023-01-04 09:14:29 #1529454(rspamd_proxy) <bdf52b>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:14:37 #1529454(rspamd_proxy) <824398>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 59730
2023-01-04 09:14:37 #1529454(rspamd_proxy) <824398>; milter; rspamd_milter_process_command: got connection from 18.134.243.20:21345
2023-01-04 09:14:37 #1529454(rspamd_proxy) <824398>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:15:38 #1529455(controller) <qbq3yk>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 13:15:38 GMT (http cache based: Wed, 04 Jan 2023 13:15:38 GMT)
2023-01-04 09:16:04 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:16:07 #1529454(rspamd_proxy) <17b487>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 44496
2023-01-04 09:16:10 #1529454(rspamd_proxy) <17b487>; milter; rspamd_milter_process_command: got connection from 18.134.243.20:21345
2023-01-04 09:16:10 #1529454(rspamd_proxy) <17b487>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:18:20 #1529454(rspamd_proxy) <7fb433>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 54172
2023-01-04 09:18:20 #1529454(rspamd_proxy) <7fb433>; milter; rspamd_milter_process_command: got connection from 18.134.243.20:21345
2023-01-04 09:18:20 #1529454(rspamd_proxy) <7fb433>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:18:28 #1529454(rspamd_proxy) <f4adb2>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 36336
2023-01-04 09:18:28 #1529454(rspamd_proxy) <f4adb2>; milter; rspamd_milter_process_command: got connection from 18.134.243.20:21345
2023-01-04 09:18:28 #1529454(rspamd_proxy) <f4adb2>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:19:56 #1529454(rspamd_proxy) <f3fc48>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 35568
2023-01-04 09:19:57 #1529454(rspamd_proxy) <f3fc48>; milter; rspamd_milter_process_command: got connection from 18.134.243.20:21345
2023-01-04 09:19:57 #1529454(rspamd_proxy) <f3fc48>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:22:11 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'd29VOirf.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:22:11 #1529454(rspamd_proxy) <44d438>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 53830
2023-01-04 09:22:12 #1529454(rspamd_proxy) <44d438>; milter; rspamd_milter_process_command: got connection from 18.134.243.20:21345
2023-01-04 09:22:12 #1529454(rspamd_proxy) <44d438>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:22:20 #1529454(rspamd_proxy) <116d25>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 59396
2023-01-04 09:22:20 #1529454(rspamd_proxy) <116d25>; milter; rspamd_milter_process_command: got connection from 18.134.243.20:21345
2023-01-04 09:22:20 #1529454(rspamd_proxy) <116d25>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:23:05 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 09:23:48 #1529454(rspamd_proxy) <707222>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 53990
2023-01-04 09:23:48 #1529454(rspamd_proxy) <707222>; milter; rspamd_milter_process_command: got connection from 18.134.243.20:21345
2023-01-04 09:23:48 #1529454(rspamd_proxy) <707222>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:29:15 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:31:34 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'z52V5oSEtef77xWo.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:33:06 #1529455(controller) <dyatkr>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 13:33:06 GMT (http cache based: Wed, 04 Jan 2023 13:33:06 GMT)
2023-01-04 09:34:34 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 09:41:33 #1529454(rspamd_proxy) <6b95cf>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 44954
2023-01-04 09:41:33 #1529454(rspamd_proxy) <6b95cf>; milter; rspamd_milter_process_command: got connection from 127.0.0.1:39156
2023-01-04 09:41:34 #1529454(rspamd_proxy) <6b95cf>; proxy; rspamd_message_parse: loaded message; id: <743e0810547f001512f3534357e66532@arslaniletisim.com.tr>; queue-id: <BECF8C42A6>; size: 345; checksum: <caa31870f4ed82c26430dada87fd457a>
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; lua; greylist.lua:217: skip greylisting for local networks and/or authorized users
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; proxy; dkim_symbol_callback: skip DKIM checks for local networks and authorized users
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; lua; spf.lua:186: skip SPF checks for local networks and authorized users
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; lua; dmarc.lua:349: skip DMARC checks as either SPF or DKIM were not checked
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; proxy; dkim_module_load_key_format: cannot load dkim key /www/server/dkim/arslaniletisim.com.tr/default.private: cannot map key file: '/www/server/dkim/arslaniletisim.com.tr/default.private' Permission denied
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; lua; once_received.lua:102: Skipping once_received for authenticated user or local network
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; proxy; finalize_item: slow rule: SURBL_MULTI(420): 303.28 ms; enable slow timer delay
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of classifier bayes: not enough learns 0; 200 required
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of classifier bayes: not enough learns 0; 200 required
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; proxy; rspamd_stat_classifiers_process: skip statistics as SPAM class is missing
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; lua; greylist.lua:331: Score too low - skip greylisting
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; lua; neural.lua:442: skip ham sample to keep spam/ham balance; probability 1; 0 spam and 1 ham vectors stored
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; lua; neural.lua:69: created new ANN profile for default:default, data stored at prefix rn_default_default_t74qp1qm_0
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; proxy; rspamd_task_write_log: id: <743e0810547f001512f3534357e66532@arslaniletisim.com.tr>, qid: <BECF8C42A6>, ip: 127.0.0.1, user: info@arslaniletisim.com.tr, from: <info@arslaniletisim.com.tr>, (default: F (no action): [-0.10/15.00] [MIME_GOOD(-0.10){text/plain;},ARC_NA(0.00){},FROM_EQ_ENVFROM(0.00){},FROM_NO_DN(0.00){},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 345, time: 2031.081ms, dns req: 4, digest: <caa31870f4ed82c26430dada87fd457a>, rcpts: <info@ezelyasar.com>, mime_rcpts: <info@ezelyasar.com>
2023-01-04 09:41:35 #1529454(rspamd_proxy) <6b95cf>; proxy; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 1 regexps matched, 172 regexps total, 42 regexps cached, 0B scanned using pcre, 334B scanned total
2023-01-04 09:41:35 #1529454(rspamd_proxy) <5941d1>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:43:22 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 09:43:33 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:43:50 #1529454(rspamd_proxy) <a7e2fd>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 43134
2023-01-04 09:43:51 #1529454(rspamd_proxy) <a7e2fd>; milter; rspamd_milter_process_command: got connection from 37.140.190.187:37826
2023-01-04 09:43:51 #1529454(rspamd_proxy) <a7e2fd>; proxy; rspamd_message_parse: loaded message; id: <1032531672825417@mail.yandex.com>; queue-id: <6015FC42A6>; size: 1681; checksum: <62718227f0b0fe5d800946e0ae88d4f7>
2023-01-04 09:43:51 #1529454(rspamd_proxy) <a7e2fd>; proxy; dkim_module_key_handler: stored DKIM key for mail._domainkey.ezelyasar.com in LRU cache for 300 seconds, 1/2000 elements in the cache
2023-01-04 09:43:51 #1529454(rspamd_proxy) <a7e2fd>; proxy; rspamd_spf_record_postprocess: increasing ttl from 29 to 300 as it lower than a limit
2023-01-04 09:43:51 #1529454(rspamd_proxy) <a7e2fd>; proxy; rspamd_spf_maybe_return: stored SPF record for ezelyasar.com (0x81c1d9b4cfd525f7) in LRU cache for 300 seconds, 1/2000 elements in the cache
2023-01-04 09:43:51 #1529454(rspamd_proxy) <a7e2fd>; proxy; finalize_item: slow rule: SPF_CHECK(520): 341.84 ms; enable slow timer delay
2023-01-04 09:43:52 #1529454(rspamd_proxy) <a7e2fd>; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_HAM of classifier bayes: not enough learns 0; 200 required
2023-01-04 09:43:52 #1529454(rspamd_proxy) <a7e2fd>; proxy; rspamd_redis_connected: skip obtaining bayes tokens for BAYES_SPAM of classifier bayes: not enough learns 0; 200 required
2023-01-04 09:43:52 #1529454(rspamd_proxy) <a7e2fd>; proxy; rspamd_stat_classifiers_process: skip statistics as SPAM class is missing
2023-01-04 09:43:52 #1529454(rspamd_proxy) <a7e2fd>; lua; greylist.lua:331: Score too low - skip greylisting
2023-01-04 09:43:52 #1529454(rspamd_proxy) <a7e2fd>; proxy; rspamd_task_write_log: id: <1032531672825417@mail.yandex.com>, qid: <6015FC42A6>, ip: 37.140.190.187, from: <info@ezelyasar.com>, (default: F (no action): [1.05/15.00] [R_MIXED_CHARSET(1.25){subject;},MIME_HTML_ONLY(0.20){},R_DKIM_ALLOW(-0.20){ezelyasar.com:s=mail;},R_SPF_ALLOW(-0.20){+ip4:37.140.190.0/23;},ARC_NA(0.00){},ASN(0.00){asn:13238, ipnet:37.140.128.0/18, country:RU;},DKIM_TRACE(0.00){ezelyasar.com:+;},DMARC_NA(0.00){ezelyasar.com;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},MIME_TRACE(0.00){0:~;},PREVIOUSLY_DELIVERED(0.00){info@arslaniletisim.com.tr;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_FIVE(0.00){5;},RCVD_TLS_LAST(0.00){},RWL_MAILSPIKE_POSSIBLE(0.00){37.140.190.187:from;},TO_DN_EQ_ADDR_ALL(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 1681, time: 697.111ms, dns req: 33, digest: <62718227f0b0fe5d800946e0ae88d4f7>, rcpts: <info@arslaniletisim.com.tr>, mime_rcpts: <info@arslaniletisim.com.tr>
2023-01-04 09:43:52 #1529454(rspamd_proxy) <a7e2fd>; proxy; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 5 regexps matched, 172 regexps total, 77 regexps cached, 0B scanned using pcre, 1.89KiB scanned total
2023-01-04 09:43:52 #1529454(rspamd_proxy) <8cbdc9>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 09:46:19 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for '1wE6UJUYj5iQ90MmiEzu1bknDXAx6.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:47:25 #1529455(controller) <yhcyzt>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 13:47:25 GMT (http cache based: Wed, 04 Jan 2023 13:47:25 GMT)
2023-01-04 09:48:04 #1529455(controller) <1u5hdp>; map; http_map_finish: data is not modified for server maps.rspamd.com, next check at Wed, 04 Jan 2023 13:48:04 GMT (http cache based: Wed, 04 Jan 2023 13:48:04 GMT)
2023-01-04 09:51:45 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 09:54:20 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:56:26 #1529455(controller) <1ccygw>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dwl.dnswl.org while 'no records with this name' was expected when querying for 'H28hK4EU.dwl.dnswl.org'(likely DNS spoofing or BL internal issues)
2023-01-04 09:58:13 #1529454(rspamd_proxy) <d32cb8>; proxy; proxy_accept_socket: accepted milter connection from 127.0.0.1 port 39736
2023-01-04 09:58:14 #1529454(rspamd_proxy) <d32cb8>; milter; rspamd_milter_process_command: got connection from 107.170.226.11:55604
2023-01-04 09:58:14 #1529454(rspamd_proxy) <d32cb8>; proxy; proxy_milter_finish_handler: finished milter connection
2023-01-04 10:05:19 #1529455(controller) <imhkkk>; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume
2023-01-04 10:06:42 #1529455(controller) <prfoy8>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for list.dnswl.org while 'no records with this name' was expected when querying for '1.0.0.127.list.dnswl.org'(likely DNS spoofing or BL internal issues)