2021-03-31 21:02:31 #1346597(rspamd_proxy) <4b6eee>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-03-31 21:02:31 #1346597(rspamd_proxy) <4b6eee>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:53303 2021-03-31 21:02:31 #1346597(rspamd_proxy) <4b6eee>; proxy; rspamd_message_parse: loaded message; id: ; queue-id: <7C21015C019D>; size: 47488; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-03-31 21:02:31 #1346597(rspamd_proxy) <4b6eee>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-03-31 21:02:31 #1346597(rspamd_proxy) <4b6eee>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-03-31 21:02:31 #1346597(rspamd_proxy) <4b6eee>; proxy; dkim_module_key_handler: stored DKIM key for key1._domainkey.s19.move-hosting.ru in LRU cache for 86264 seconds, 207/2000 elements in the cache 2021-03-31 21:02:31 #1346597(rspamd_proxy) <4b6eee>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy2.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-03-31 21:02:31 #1346597(rspamd_proxy) <4b6eee>; proxy; rspamd_spf_maybe_return: stored record for s19.move-hosting.ru (0x9310d1a2a8112367) in LRU cache for 86259 seconds, 222/2000 elements in the cache 2021-03-31 21:02:32 #1346597(rspamd_proxy) <4b6eee>; lua; greylist.lua:318: Score too low - skip greylisting 2021-03-31 21:02:32 #1346597(rspamd_proxy) <4b6eee>; proxy; rspamd_task_write_log: id: , qid: <7C21015C019D>, ip: 82.114.253.74, from: , (default: F (no action): [-4.00/10.00] [BAYES_HAM(-3.00){100.00%;},DMARC_POLICY_ALLOW(-0.50){s19.move-hosting.ru;reject;},R_DKIM_ALLOW(-0.20){s19.move-hosting.ru:s=key1;},R_SPF_ALLOW(-0.20){+a;},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s19.move-hosting.ru:+;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s19.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47488, time: 328.387ms, dns req: 26, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-03-31 21:02:32 #1346597(rspamd_proxy) <4b6eee>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-03-31 21:02:32 #1346597(rspamd_proxy) <35eb15>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-03-31 23:13:36 #1346597(rspamd_proxy) ; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-03-31 23:13:37 #1346597(rspamd_proxy) ; milter; rspamd_milter_process_command: got connection from 82.114.253.74:41587 2021-03-31 23:13:37 #1346597(rspamd_proxy) ; proxy; rspamd_message_parse: loaded message; id: ; queue-id: ; size: 47488; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-03-31 23:13:37 #1346597(rspamd_proxy) ; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-03-31 23:13:37 #1346597(rspamd_proxy) ; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-03-31 23:13:37 #1346597(rspamd_proxy) ; lua; spf.lua:159: use cached record for s19.move-hosting.ru (0x9310d1a2a8112367) in LRU cache for 78394 seconds 2021-03-31 23:13:37 #1346597(rspamd_proxy) ; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy1.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-03-31 23:13:37 #1346597(rspamd_proxy) ; lua; greylist.lua:318: Score too low - skip greylisting 2021-03-31 23:13:37 #1346597(rspamd_proxy) ; proxy; rspamd_task_write_log: id: , qid: , ip: 82.114.253.74, from: , (default: F (no action): [-4.00/10.00] [BAYES_HAM(-3.00){100.00%;},DMARC_POLICY_ALLOW(-0.50){s19.move-hosting.ru;reject;},R_DKIM_ALLOW(-0.20){s19.move-hosting.ru:s=key1;},R_SPF_ALLOW(-0.20){+a:c;},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s19.move-hosting.ru:+;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s19.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},RWL_MAILSPIKE_POSSIBLE(0.00){82.114.253.74:from;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47488, time: 319.282ms, dns req: 19, di gest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-03-31 23:13:37 #1346597(rspamd_proxy) ; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-03-31 23:13:37 #1346597(rspamd_proxy) <2d588e>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 01:55:05 #1346597(rspamd_proxy) <02dd94>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:54286 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; proxy; rspamd_message_parse: loaded message; id: ; queue-id: <080C115C019D>; size: 47479; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; proxy; dkim_module_key_handler: stored DKIM key for key1._domainkey.s5.move-hosting.ru in LRU cache for 70626 seconds, 209/2000 elements in the cache 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy1.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; proxy; rspamd_spf_maybe_return: stored record for s5.move-hosting.ru (0x8b8854ca18613dcd) in LRU cache for 70625 seconds, 223/2000 elements in the cache 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; lua; greylist.lua:318: Score too low - skip greylisting 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; proxy; rspamd_task_write_log: id: , qid: <080C115C019D>, ip: 82.114.253.74, from: , (default: F (no action): [-4.00/10.00] [BAYES_HAM(-3.00){100.00%;},DMARC_POLICY_ALLOW(-0.50){s5.move-hosting.ru;reject;},R_DKIM_ALLOW(-0.20){s5.move-hosting.ru:s=key1;},R_SPF_ALLOW(-0.20){+a;},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s5.move-hosting.ru:+;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s5.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},RWL_MAILSPIKE_POSSIBLE(0.00){82.114.253.74:from;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47479, time: 317.430ms, dns req: 26, digest: <5 ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-01 01:55:06 #1346597(rspamd_proxy) <02dd94>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.62KiB scanned using pcre, 113.62KiB scanned total 2021-04-01 01:55:06 #1346597(rspamd_proxy) <689a1b>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 07:06:43 #1346597(rspamd_proxy) <6b5d76>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-01 07:06:43 #1346597(rspamd_proxy) <6b5d76>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:33012 2021-04-01 07:06:44 #1346597(rspamd_proxy) <6b5d76>; proxy; rspamd_message_parse: loaded message; id: <1ede638c68958adcfc8eafaa1607c80c@s13.move-hosting.ru>; queue-id: ; size: 47487; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-01 07:06:44 #1346597(rspamd_proxy) <6b5d76>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 07:06:44 #1346597(rspamd_proxy) <6b5d76>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 07:06:44 #1346597(rspamd_proxy) <6b5d76>; proxy; dkim_module_key_handler: stored DKIM key for key1._domainkey.s13.move-hosting.ru in LRU cache for 61420 seconds, 210/2000 elements in the cache 2021-04-01 07:06:44 #1346597(rspamd_proxy) <6b5d76>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy1.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 07:06:44 #1346597(rspamd_proxy) <6b5d76>; proxy; rspamd_spf_maybe_return: stored record for s13.move-hosting.ru (0x9310d1a2a8112367) in LRU cache for 59222 seconds, 226/2000 elements in the cache 2021-04-01 07:06:44 #1346597(rspamd_proxy) <6b5d76>; lua; greylist.lua:318: Score too low - skip greylisting 2021-04-01 07:06:44 #1346597(rspamd_proxy) <6b5d76>; proxy; rspamd_task_write_log: id: <1ede638c68958adcfc8eafaa1607c80c@s13.move-hosting.ru>, qid: , ip: 82.114.253.74, from: , (default: F (no action): [-4.00/10.00] [BAYES_HAM(-3.00){100.00%;},DMARC_POLICY_ALLOW(-0.50){s13.move-hosting.ru;reject;},R_DKIM_ALLOW(-0.20){s13.move-hosting.ru:s=key1;},R_SPF_ALLOW(-0.20){+a;},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s13.move-hosting.ru:+;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s13.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47487, time: 357.844ms, dns req: 26, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-01 07:06:44 #1346597(rspamd_proxy) <6b5d76>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-04-01 07:06:44 #1346597(rspamd_proxy) ; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:55804 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; proxy; rspamd_message_parse: loaded message; id: <80ad8c139196c1286a422de2a235e509@s19.move-hosting.ru>; queue-id: <6093C15C019D>; size: 47487; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; lua; spf.lua:159: use cached record for s19.move-hosting.ru (0x9310d1a2a8112367) in LRU cache for 37522 seconds 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy2.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; lua; greylist.lua:318: Score too low - skip greylisting 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; proxy; rspamd_task_write_log: id: <80ad8c139196c1286a422de2a235e509@s19.move-hosting.ru>, qid: <6093C15C019D>, ip: 82.114.253.74, from: , (default: F (no action): [-1.99/10.00] [BAYES_HAM(-3.00){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s19.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s19.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s19.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s19.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a:c;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47487, time: 329.113ms , dns req: 19, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-01 10:34:49 #1346597(rspamd_proxy) <904a44>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-04-01 10:34:50 #1346597(rspamd_proxy) <0aa9b5>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 10:42:46 #1346599(controller) <02d7b0>; csession; fuzzy_check_io_callback: got error on IO with server fuzzy1.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 10:43:07 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-01 10:43:07 #1346599(controller) ; csession; rspamd_message_parse: loaded message; id: <80ad8c139196c1286a422de2a235e509@s19.move-hosting.ru>; queue-id: ; size: 47018; checksum: 2021-04-01 10:43:07 #1346599(controller) ; csession; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 10:43:07 #1346599(controller) ; csession; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 10:43:07 #1346599(controller) ; csession; rspamd_controller_learn_fin_task: <127.0.0.1> learned message as spam: 80ad8c139196c1286a422de2a235e509@s19.move-hosting.ru 2021-04-01 10:43:10 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-01 10:43:32 #1346597(rspamd_proxy) <27751b>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 -- 2021-04-01 13:25:50 #1346597(rspamd_proxy) <85e48f>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-01 13:25:50 #1346597(rspamd_proxy) <85e48f>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:43652 2021-04-01 13:25:50 #1346597(rspamd_proxy) <85e48f>; proxy; rspamd_message_parse: loaded message; id: ; queue-id: ; size: 47487; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-01 13:25:50 #1346597(rspamd_proxy) <85e48f>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 13:25:50 #1346597(rspamd_proxy) <85e48f>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 13:25:51 #1346597(rspamd_proxy) <85e48f>; proxy; dkim_module_key_handler: stored DKIM key for key1._domainkey.s11.move-hosting.ru in LRU cache for 30323 seconds, 216/2000 elements in the cache 2021-04-01 13:25:51 #1346597(rspamd_proxy) <85e48f>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy2.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 13:25:51 #1346597(rspamd_proxy) <85e48f>; proxy; rspamd_spf_maybe_return: stored record for s11.move-hosting.ru (0x20f46a68509e70fc) in LRU cache for 30319 seconds, 234/2000 elements in the cache 2021-04-01 13:25:51 #1346597(rspamd_proxy) <85e48f>; proxy; rspamd_symcache_finalize_item: slow rule: MSBL_EBL(257): 540.39 ms; enable slow timer delay 2021-04-01 13:25:51 #1346597(rspamd_proxy) <85e48f>; lua; greylist.lua:318: Score too low - skip greylisting 2021-04-01 13:25:51 #1346597(rspamd_proxy) <85e48f>; lua; neural.lua:311: skip ham sample to keep spam/ham balance; probability 0.03703703703703709; 156 spam and 161 ham vectors stored 2021-04-01 13:25:51 #1346597(rspamd_proxy) <85e48f>; proxy; rspamd_task_write_log: id: , qid: , ip: 82.114.253.74, from: , (default: F (no action): [-1.99/10.00] [BAYES_HAM(-3.00){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s11.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s11.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s11.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s11.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47487, time: 667.709ms, dns req: 26, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-01 13:25:51 #1346597(rspamd_proxy) <85e48f>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-04-01 13:25:51 #1346597(rspamd_proxy) <64c1d4>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 17:09:33 #1346597(rspamd_proxy) <203d8b>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-01 17:09:33 #1346597(rspamd_proxy) <203d8b>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:60115 2021-04-01 17:09:34 #1346597(rspamd_proxy) <203d8b>; proxy; rspamd_message_parse: loaded message; id: ; queue-id: ; size: 47478; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-01 17:09:34 #1346597(rspamd_proxy) <203d8b>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 17:09:34 #1346597(rspamd_proxy) <203d8b>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 17:09:34 #1346597(rspamd_proxy) <203d8b>; proxy; dkim_module_key_handler: stored DKIM key for key1._domainkey.s3.move-hosting.ru in LRU cache for 18151 seconds, 218/2000 elements in the cache 2021-04-01 17:09:34 #1346597(rspamd_proxy) <203d8b>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy1.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 17:09:34 #1346597(rspamd_proxy) <203d8b>; proxy; rspamd_spf_maybe_return: stored record for s3.move-hosting.ru (0xc29a967e316f66db) in LRU cache for 12938 seconds, 237/2000 elements in the cache 2021-04-01 17:09:34 #1346597(rspamd_proxy) <203d8b>; lua; greylist.lua:318: Score too low - skip greylisting 2021-04-01 17:09:34 #1346597(rspamd_proxy) <203d8b>; proxy; rspamd_task_write_log: id: , qid: , ip: 82.114.253.74, from: , (default: F (no action): [-1.99/10.00] [BAYES_HAM(-3.00){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s3.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s3.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s3.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s3.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47478, time: 342.274ms, dns re q: 26, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-01 17:09:34 #1346597(rspamd_proxy) <203d8b>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.62KiB scanned using pcre, 113.62KiB scanned total 2021-04-01 17:09:34 #1346597(rspamd_proxy) <0d36da>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 17:22:44 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-01 17:22:49 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-01 17:22:49 #1346599(controller) <126b32>; csession; rspamd_message_parse: loaded message; id: ; queue-id: ; size: 47007; checksum: 2021-04-01 17:22:49 #1346599(controller) <126b32>; csession; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 17:22:49 #1346599(controller) <126b32>; csession; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 17:22:49 #1346599(controller) <126b32>; csession; rspamd_controller_learn_fin_task: <127.0.0.1> learned message as spam: b582d7e8b86443ec5688ecb9ffd79c68@s3.move-hosting.ru 2021-04-01 17:22:50 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-01 17:22:56 #1346599(controller) ; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume -- 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:34081 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; rspamd_message_parse: loaded message; id: ; queue-id: <5F70415C0166>; size: 47478; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; dkim_module_key_handler: stored DKIM key for key1._domainkey.s6.move-hosting.ru in LRU cache for 12613 seconds, 219/2000 elements in the cache 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy2.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; rspamd_spf_maybe_return: stored record for s6.move-hosting.ru (0x8b8854ca18613dcd) in LRU cache for 12612 seconds, 240/2000 elements in the cache 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; lua; greylist.lua:417: greylisted until "Thu, 01 Apr 2021 17:41:08 GMT", new record 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; rspamd_add_passthrough_result: : set pre-result to 'soft reject' (no score): 'Try again later' from greylist(1) 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; rspamd_task_write_log: id: , qid: <5F70415C0166>, ip: 82.114.253.74, from: , (default: F (soft reject): [6.10/10.00] [BAYES_SPAM(5.10){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s6.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s6.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GREYLIST(0.00){greylisted;Thu, 01 Apr 2021 17:41:08 GMT;new record;},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s6.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s6.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0. 00){}]), len: 47478, time: 304.672ms, dns req: 26, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: , forced: soft reject "Try again later"; score=nan (set by greylist) 2021-04-01 19:36:08 #1346597(rspamd_proxy) <48d054>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.62KiB scanned using pcre, 113.62KiB scanned total 2021-04-01 19:36:08 #1346597(rspamd_proxy) <49af65>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 20:06:09 #1346597(rspamd_proxy) <293675>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-01 20:06:09 #1346597(rspamd_proxy) <293675>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:33957 2021-04-01 20:06:09 #1346597(rspamd_proxy) <293675>; proxy; rspamd_message_parse: loaded message; id: ; queue-id: ; size: 47478; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-01 20:06:09 #1346597(rspamd_proxy) <293675>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 20:06:09 #1346597(rspamd_proxy) <293675>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 20:06:09 #1346597(rspamd_proxy) <293675>; lua; spf.lua:159: use cached record for s6.move-hosting.ru (0x8b8854ca18613dcd) in LRU cache for 10811 seconds 2021-04-01 20:06:09 #1346597(rspamd_proxy) <293675>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy2.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 20:06:10 #1346597(rspamd_proxy) <293675>; lua; greylist.lua:391: greylisting pass (body) until Fri, 02 Apr 2021 18:06:10 GMT 2021-04-01 20:06:10 #1346597(rspamd_proxy) <293675>; proxy; rspamd_task_write_log: id: , qid: , ip: 82.114.253.74, from: , (default: T (add header): [6.10/10.00] [BAYES_SPAM(5.10){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s6.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s6.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GREYLIST(0.00){pass;body;},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s6.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s6.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a:c;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 4 7478, time: 342.224ms, dns req: 19, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-01 20:06:10 #1346597(rspamd_proxy) <293675>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.62KiB scanned using pcre, 113.62KiB scanned total 2021-04-01 20:06:10 #1346597(rspamd_proxy) <66519b>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 23:17:23 #1346597(rspamd_proxy) ; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; milter; rspamd_milter_process_command: got connection from 82.114.253.74:41636 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; proxy; rspamd_message_parse: loaded message; id: <7647cdac63e6b8890964caae55c40f94@s12.move-hosting.ru>; queue-id: <08FE715C0166>; size: 47487; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; proxy; dkim_module_key_handler: stored DKIM key for key1._domainkey.s12.move-hosting.ru in LRU cache for 86330 seconds, 221/2000 elements in the cache 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy2.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; proxy; rspamd_spf_maybe_return: stored record for s12.move-hosting.ru (0x20f46a68509e70fc) in LRU cache for 80346 seconds, 242/2000 elements in the cache 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; lua; greylist.lua:417: greylisted until "Thu, 01 Apr 2021 21:22:24 GMT", new record 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; proxy; rspamd_add_passthrough_result: <7647cdac63e6b8890964caae55c40f94@s12.move-hosting.ru>: set pre-result to 'soft reject' (no score): 'Try again later' from greylist(1) 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; proxy; rspamd_task_write_log: id: <7647cdac63e6b8890964caae55c40f94@s12.move-hosting.ru>, qid: <08FE715C0166>, ip: 82.114.253.74, from: , (default: F (soft reject): [6.10/10.00] [BAYES_SPAM(5.10){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s12.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s12.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GREYLIST(0.00){greylisted;Thu, 01 Apr 2021 21:22:24 GMT;new record;},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s12.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s12.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ ALL(0.00){}]), len: 47487, time: 376.230ms, dns req: 26, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: , forced: soft reject "Try again later"; score=nan (set by greylist) 2021-04-01 23:17:24 #1346597(rspamd_proxy) ; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-04-01 23:17:24 #1346597(rspamd_proxy) <327ca4>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:56315 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; proxy; rspamd_message_parse: loaded message; id: <7647cdac63e6b8890964caae55c40f94@s12.move-hosting.ru>; queue-id: <653D115C0166>; size: 47487; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; lua; spf.lua:159: use cached record for s12.move-hosting.ru (0x20f46a68509e70fc) in LRU cache for 78545 seconds 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy1.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; lua; greylist.lua:391: greylisting pass (body) until Fri, 02 Apr 2021 21:47:25 GMT 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; proxy; rspamd_task_write_log: id: <7647cdac63e6b8890964caae55c40f94@s12.move-hosting.ru>, qid: <653D115C0166>, ip: 82.114.253.74, from: , (default: T (add header): [6.10/10.00] [BAYES_SPAM(5.10){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s12.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s12.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GREYLIST(0.00){pass;body;},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s12.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s12.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a:c;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47487, time: 331.617ms, dns req: 19, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-01 23:47:25 #1346597(rspamd_proxy) <1ffa18>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-04-01 23:47:25 #1346597(rspamd_proxy) <97c03b>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-01 23:52:35 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-01 23:52:39 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-01 23:52:39 #1346599(controller) <658201>; csession; rspamd_message_parse: loaded message; id: <7647cdac63e6b8890964caae55c40f94@s12.move-hosting.ru>; queue-id: ; size: 47030; checksum: 2021-04-01 23:52:39 #1346599(controller) <658201>; csession; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 23:52:39 #1346599(controller) <658201>; csession; rspamd_mime_part_detect_language: detected part language: ru 2021-04-01 23:52:39 #1346599(controller) <658201>; csession; rspamd_task_process: skip learning: <7647cdac63e6b8890964caae55c40f94@s12.move-hosting.ru> is skipped for bayes classifier: already in class spam; probability 100.00% 2021-04-01 23:52:47 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-02 00:00:06 #1346599(controller) ; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume -- 2021-04-02 04:10:54 #1346597(rspamd_proxy) <7a4a58>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-02 04:10:54 #1346597(rspamd_proxy) <7a4a58>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:57052 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; proxy; rspamd_message_parse: loaded message; id: ; queue-id: ; size: 47478; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; proxy; dkim_module_key_handler: stored DKIM key for key1._domainkey.s2.move-hosting.ru in LRU cache for 79886 seconds, 222/2000 elements in the cache 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy1.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; proxy; rspamd_spf_maybe_return: stored record for s2.move-hosting.ru (0xc29a967e316f66db) in LRU cache for 69576 seconds, 244/2000 elements in the cache 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; lua; greylist.lua:417: greylisted until "Fri, 02 Apr 2021 02:15:55 GMT", new record 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; proxy; rspamd_add_passthrough_result: : set pre-result to 'soft reject' (no score): 'Try again later' from greylist(1) 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; proxy; rspamd_task_write_log: id: , qid: , ip: 82.114.253.74, from: , (default: F (soft reject): [6.10/10.00] [BAYES_SPAM(5.10){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s2.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s2.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GREYLIST(0.00){greylisted;Fri, 02 Apr 2021 02:15:55 GMT;new record;},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s2.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s2.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0. 00){}]), len: 47478, time: 375.133ms, dns req: 26, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: , forced: soft reject "Try again later"; score=nan (set by greylist) 2021-04-02 04:10:55 #1346597(rspamd_proxy) <7a4a58>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.62KiB scanned using pcre, 113.62KiB scanned total 2021-04-02 04:10:55 #1346597(rspamd_proxy) <70b29f>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-02 04:40:55 #1346597(rspamd_proxy) <1c68ea>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-02 04:40:55 #1346597(rspamd_proxy) <1c68ea>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:42397 2021-04-02 04:40:55 #1346597(rspamd_proxy) <1c68ea>; proxy; rspamd_message_parse: loaded message; id: ; queue-id: ; size: 47478; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-02 04:40:55 #1346597(rspamd_proxy) <1c68ea>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 04:40:55 #1346597(rspamd_proxy) <1c68ea>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 04:40:55 #1346597(rspamd_proxy) <1c68ea>; lua; spf.lua:159: use cached record for s2.move-hosting.ru (0xc29a967e316f66db) in LRU cache for 67776 seconds 2021-04-02 04:40:55 #1346597(rspamd_proxy) <1c68ea>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy1.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-02 04:40:56 #1346597(rspamd_proxy) <1c68ea>; lua; greylist.lua:391: greylisting pass (body) until Sat, 03 Apr 2021 02:40:56 GMT 2021-04-02 04:40:56 #1346597(rspamd_proxy) <1c68ea>; proxy; rspamd_task_write_log: id: , qid: , ip: 82.114.253.74, from: , (default: T (add header): [6.10/10.00] [BAYES_SPAM(5.10){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s2.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s2.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GREYLIST(0.00){pass;body;},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s2.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s2.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a:c;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 4 7478, time: 338.144ms, dns req: 19, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-02 04:40:56 #1346597(rspamd_proxy) <1c68ea>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.62KiB scanned using pcre, 113.62KiB scanned total 2021-04-02 04:40:56 #1346597(rspamd_proxy) <3d17d7>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-02 08:39:30 #1346597(rspamd_proxy) <3bf6f0>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:52983 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; proxy; rspamd_message_parse: loaded message; id: <415a024d185d6021d7812cc5a6548401@s19.move-hosting.ru>; queue-id: <1A77515C0037>; size: 47487; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; proxy; dkim_module_key_handler: stored DKIM key for key1._domainkey.s19.move-hosting.ru in LRU cache for 44047 seconds, 222/2000 elements in the cache 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy2.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; proxy; rspamd_spf_maybe_return: stored record for s19.move-hosting.ru (0x8b8854ca18613dcd) in LRU cache for 43983 seconds, 245/2000 elements in the cache 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; lua; greylist.lua:417: greylisted until "Fri, 02 Apr 2021 06:44:31 GMT", new record 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; proxy; rspamd_add_passthrough_result: <415a024d185d6021d7812cc5a6548401@s19.move-hosting.ru>: set pre-result to 'soft reject' (no score): 'Try again later' from greylist(1) 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; proxy; rspamd_task_write_log: id: <415a024d185d6021d7812cc5a6548401@s19.move-hosting.ru>, qid: <1A77515C0037>, ip: 82.114.253.74, from: , (default: F (soft reject): [6.10/10.00] [BAYES_SPAM(5.10){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s19.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s19.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GREYLIST(0.00){greylisted;Fri, 02 Apr 2021 06:44:31 GMT;new record;},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s19.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s19.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ ALL(0.00){}]), len: 47487, time: 355.723ms, dns req: 26, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: , forced: soft reject "Try again later"; score=nan (set by greylist) 2021-04-02 08:39:31 #1346597(rspamd_proxy) <3bf6f0>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-04-02 08:39:31 #1346597(rspamd_proxy) <9702c0>; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:33075 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; proxy; rspamd_message_parse: loaded message; id: <415a024d185d6021d7812cc5a6548401@s19.move-hosting.ru>; queue-id: <3446E15C0037>; size: 47487; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; lua; spf.lua:159: use cached record for s19.move-hosting.ru (0x8b8854ca18613dcd) in LRU cache for 42182 seconds 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy2.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; lua; greylist.lua:391: greylisting pass (body) until Sat, 03 Apr 2021 07:09:32 GMT 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; proxy; rspamd_task_write_log: id: <415a024d185d6021d7812cc5a6548401@s19.move-hosting.ru>, qid: <3446E15C0037>, ip: 82.114.253.74, from: , (default: T (add header): [6.10/10.00] [BAYES_SPAM(5.10){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s19.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s19.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GREYLIST(0.00){pass;body;},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s19.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s19.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a:c;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47487, time: 263.041ms, dns req: 19, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-02 09:09:32 #1346597(rspamd_proxy) <6645f0>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-04-02 09:09:32 #1346597(rspamd_proxy) ; proxy; proxy_milter_finish_handler: finished milter connection -- 2021-04-02 09:24:16 #1346599(controller) ; monitored; rspamd_monitored_dns_cb: DNS query blocked on multi.uribl.com (127.0.0.1 returned), possibly due to high volume 2021-04-02 09:24:20 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-02 09:24:20 #1346599(controller) <806b8c>; csession; rspamd_message_parse: loaded message; id: <415a024d185d6021d7812cc5a6548401@s19.move-hosting.ru>; queue-id: ; size: 47030; checksum: 2021-04-02 09:24:20 #1346599(controller) <806b8c>; csession; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 09:24:20 #1346599(controller) <806b8c>; csession; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 09:24:20 #1346599(controller) <806b8c>; csession; rspamd_task_process: skip learning: <415a024d185d6021d7812cc5a6548401@s19.move-hosting.ru> is skipped for bayes classifier: already in class spam; probability 100.00% 2021-04-02 09:24:23 #1346599(controller) rspamd_controller_check_password: using password as enable_password for a privileged command 2021-04-02 09:27:52 #1346597(rspamd_proxy) ; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 -- 2021-04-02 12:15:55 #1346597(rspamd_proxy) <28bc43>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/rspamd.sock port 0 2021-04-02 12:15:55 #1346597(rspamd_proxy) <28bc43>; milter; rspamd_milter_process_command: got connection from 82.114.253.74:60923 2021-04-02 12:15:55 #1346597(rspamd_proxy) <28bc43>; proxy; rspamd_message_parse: loaded message; id: <15eec93dc63f4fa834f1caf9dc07da16@s12.move-hosting.ru>; queue-id: <7E7E215C0037>; size: 47487; checksum: <5ba0c4585e7b98424c5ebb70bd4321ac> 2021-04-02 12:15:55 #1346597(rspamd_proxy) <28bc43>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 12:15:55 #1346597(rspamd_proxy) <28bc43>; proxy; rspamd_mime_part_detect_language: detected part language: ru 2021-04-02 12:15:55 #1346597(rspamd_proxy) <28bc43>; lua; spf.lua:159: use cached record for s12.move-hosting.ru (0x20f46a68509e70fc) in LRU cache for 33635 seconds 2021-04-02 12:15:55 #1346597(rspamd_proxy) <28bc43>; proxy; fuzzy_check_io_callback: got error on IO with server fuzzy1.rspamd.com:11335(88.99.142.95:11335), on read, 113, No route to host 2021-04-02 12:15:56 #1346597(rspamd_proxy) <28bc43>; lua; greylist.lua:391: greylisting pass (meta) until Sat, 03 Apr 2021 10:15:56 GMT 2021-04-02 12:15:56 #1346597(rspamd_proxy) <28bc43>; proxy; rspamd_task_write_log: id: <15eec93dc63f4fa834f1caf9dc07da16@s12.move-hosting.ru>, qid: <7E7E215C0037>, ip: 82.114.253.74, from: , (default: T (add header): [6.10/10.00] [BAYES_SPAM(5.10){100.00%;},RBL_MAILSPIKE_BAD(1.00){82.114.253.74:from;},BAD_REP_POLICIES(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:48607, ipnet:82.114.253.0/24, country:RU;},DKIM_TRACE(0.00){s12.move-hosting.ru:+;},DMARC_POLICY_ALLOW(0.00){s12.move-hosting.ru;reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GREYLIST(0.00){pass;meta;},HAS_PHPMAILER_SIG(0.00){},HAS_REPLYTO(0.00){info@s12.move-hosting.ru;},MID_RHS_MATCH_FROM(0.00){},MIME_TRACE(0.00){0:+;1:+;2:~;},NEURAL_HAM(0.00){-0.705;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},REPLYTO_EQ_FROM(0.00){},R_DKIM_ALLOW(0.00){s12.move-hosting.ru:s=key1;},R_SPF_ALLOW(0.00){+a:c;},TO_DN_NONE(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 47487, time: 329.662ms, dns req: 19, digest: <5ba0c4585e7b98424c5ebb70bd4321ac>, rcpts: , mime_rcpts: 2021-04-02 12:15:56 #1346597(rspamd_proxy) <28bc43>; proxy; rspamd_protocol_http_reply: regexp statistics: 57 pcre regexps scanned, 5 regexps matched, 174 regexps total, 11 regexps cached, 113.64KiB scanned using pcre, 113.64KiB scanned total 2021-04-02 12:15:56 #1346597(rspamd_proxy) <7c896f>; proxy; proxy_milter_finish_handler: finished milter connection