SARU.PL - MAIL LOG TODAY

Aug 31 00:03:50 NOQUEUE: reject: RCPT from b4-kimi.shop[45.74.178.213]: 550 5.7.23 <kontakt@silowniabydgoszcz.pl>: Recipient address rejected: Message rejected due to: SPF fail - not authorized.; from=<kontakt@silowniabydgoszcz.pl> to=<kontakt@silowniabydgoszcz.pl> proto=ESMTP helo=<b4-kimi.shop>
Aug 31 00:25:09 (1157621-17) header_edits_for_quar: <> -> <admin@saru.pl>,<kontakt@silowniabydgoszcz.pl>, Yes, score=13.945 tag=-9999 tag2=6.5 kill=12.3 tests=[DMARC_PASS=-0.001, DMARC_QUAR=5, LR_MW_DMARC_FAIL=5, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_HOSTKARMA_BL=3, RCVD_IN_UCEPROTECT1=1, RELAYCOUNTRY_CA=0.05, SPF_HELO_PASS=-0.001, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 06:36:27 NOQUEUE: reject: RCPT from vps-bca453df.vps.ovh.net[141.95.51.216]: 550 5.1.1 <iveco@maktronik.com.pl>: Recipient address rejected: User unknown; from=<info@trafny-biznes.pl> to=<iveco@maktronik.com.pl> proto=ESMTP helo=<send.trafny-biznes.pl>
Aug 31 07:03:52 NOQUEUE: reject: RCPT from wps.onthewifi.com[37.48.73.214]: 554 5.7.1 Service unavailable; Client host [37.48.73.214] blocked using chikor.rbl.tld; IP 37.48.73.214 was sending spam/viruses and requires your IT investigation & remediation; from=<ehkecbs@motor-shop.tech> to=<k.hetzig@maktronik.com.pl> proto=ESMTP helo=<wps.onthewifi.com>
Aug 31 07:21:28 (1508931-03) spam-tag, <bounce-1@bounce.mailing.ebroker.pl> -> <Arkadiusz.firlej@wolfsklepy.pl>, Yes, score=11.231 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, BOTNET_SOHO=0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, KAM_TRACKIMAGE=0.2, LR_MW_DMARC_PASS=-0.001, LR_MW_OFERTA01=0.001, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, LR_MW_ZAPYTANIE02=0.001, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.370, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 08:31:40 (1767482-12) header_edits_for_quar: <bounce-1@bounce.mailing.ebroker.pl> -> <Arkadiusz.firlej@wolfsklepy.pl>, Yes, score=13.703 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, KAM_TRACKIMAGE=0.2, LR_MW_DMARC_PASS=-0.001, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, P0F_LINUX=-0.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.997, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 08:31:40 (1767482-12) spam-tag, <bounce-1@bounce.mailing.ebroker.pl> -> <Arkadiusz.firlej@wolfsklepy.pl>, Yes, score=13.703 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, KAM_TRACKIMAGE=0.2, LR_MW_DMARC_PASS=-0.001, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, P0F_LINUX=-0.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.997, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 09:00:49 NOQUEUE: reject: RCPT from smtp35.send24.pl[91.230.36.108]: 554 5.7.1 <smtp35.send24.pl[91.230.36.108]>: Client host rejected: We dont like SPAM from REDLINK.; from=<4x63789.177703583.645958284@news.send360.pl> to=<serwis@maktronik.com.pl> proto=ESMTP helo=<smtp35.send24.pl>
Aug 31 09:17:09 NOQUEUE: reject: RCPT from o34.ptr1441.service.tiktok.com[149.72.94.165]: 554 5.7.1 Service unavailable; Client host [149.72.94.165] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?149.72.94.165; from=<bounces+36941951-06f3-buuu=bromberg.pl@em9481.i.service.tiktok.com> to=<buuu@bromberg.pl> proto=ESMTP helo=<o34.ptr1441.service.tiktok.com>
Aug 31 09:39:09 NOQUEUE: reject: RCPT from mail-northeuropeazon11020132.outbound.protection.outlook.com[52.101.84.132]: 550 5.1.1 <d.harasimowicz@maktronik.com.pl>: Recipient address rejected: User unknown; from=<cs@bravologistik.com> to=<d.harasimowicz@maktronik.com.pl> proto=ESMTP helo=<DB3PR0202CU003.outbound.protection.outlook.com>
Aug 31 09:41:47 NOQUEUE: reject: RCPT from z27a.sare25.com[128.204.218.129]: 554 5.7.1 Service unavailable; Helo command [z27a.sare25.com] blocked using revdns.rbl.tld; Network sare25.com blocked for spam; from=<sare004231527-m.szekls=maktronik.com.pl@z.news360.pl> to=<m.szekls@maktronik.com.pl> proto=ESMTP helo=<z27a.sare25.com>
Aug 31 09:47:13 NOQUEUE: reject: RCPT from mx0b-002b6701.pphosted.com[148.163.154.184]: 550 5.1.1 <a.miszkowiak@maktronik.com.pl>: Recipient address rejected: User unknown; from=<prvs=4703e4e71f=att.transportistas@xpo.com> to=<a.miszkowiak@maktronik.com.pl> proto=ESMTP helo=<mx0b-002b6701.pphosted.com>
Aug 31 09:47:53 NOQUEUE: reject: RCPT from mail-westeuropeazon11021117.outbound.protection.outlook.com[52.101.70.117]: 550 5.1.1 <a.miszkowiak@maktronik.com.pl>: Recipient address rejected: User unknown; from=<europa@siracargo.com> to=<a.miszkowiak@maktronik.com.pl> proto=ESMTP helo=<AS8PR04CU009.outbound.protection.outlook.com>
Aug 31 09:50:40 (2014714-14) spam-tag, <prowadzeniefanpage@server564048.nazwa.pl> -> <transport@maktronik.com.pl>, Yes, score=8.597 tagged_above=-9999 required=6.5 tests=[AM.WBL=1, BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.293, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, FSL_BULK_SIG=1, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_OFERTA01=0.001, LR_MW_RCVD_TLD_L3=1.5, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.392, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=1, RCVD_IN_VALIDITY_RPBL_BLOCKED=1, RCVD_IN_VALIDITY_SAFE_BLOCKED=1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.013, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 09:57:57 NOQUEUE: reject: RCPT from mailmxout-25-15.mailmx.agnat.pl[153.92.25.15]: 550 5.1.1 <office@maktronik.com.pl>: Recipient address rejected: User unknown; from=<rezerwacja@hotelkuznia.pl> to=<office@maktronik.com.pl> proto=ESMTP helo=<mailmxout-25-15.mailmx.agnat.pl>
Aug 31 10:00:54 NOQUEUE: reject: RCPT from v5236.v57ae4e16.euw1.send.eu.mailgun.net[161.38.204.236]: 554 5.7.1 Service unavailable; Client host [161.38.204.236] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?161.38.204.236; from=<bounce+6dd50c.3e844-drim=edrim.pl@mg.innasiec.pl> to=<drim@edrim.pl> proto=ESMTP helo=<v5236.v57ae4e16.euw1.send.eu.mailgun.net>
Aug 31 10:02:49 (2046874-04) header_edits_for_quar: <sm.26716483549.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <m.witkowska@maktronik.com.pl>, Yes, score=12.502 tag=-9999 tag2=6.5 kill=12.3 tests=[DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=1.023, MPART_ALT_DIFF=0.79, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=-1.5, RCVD_IN_MSPIKE_WL=-2.1, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=1, RCVD_IN_VALIDITY_RPBL_BLOCKED=1, RCVD_IN_VALIDITY_SAFE_BLOCKED=1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.889, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 10:03:48 (1508931-17) spam-tag, <sm.26716504030.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <transport@maktronik.com.pl>, Yes, score=7.066 tagged_above=-9999 required=6.5 tests=[DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=1.023, MPART_ALT_DIFF=0.79, P0F_LINUX=-0.1, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.205, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 10:05:14 (2046874-05) spam-tag, <sm.26716554113.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <a.firlej@maktronik.com.pl>, Yes, score=7.667 tagged_above=-9999 required=6.5 tests=[DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=1.023, MPART_ALT_DIFF=0.79, P0F_LINUX=-0.1, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.056, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 10:05:15 (2014714-17) spam-tag, <sm.26716553054.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <k.bryll@maktronik.com.pl>, Yes, score=7.837 tagged_above=-9999 required=6.5 tests=[DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=1.023, MPART_ALT_DIFF=0.79, P0F_LINUX=-0.1, RCVD_IN_MSPIKE_H4=-2.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.226, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 10:05:28 (1508930-19) spam-tag, <sm.26716554085.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <k.hetzig@maktronik.com.pl>, Yes, score=7.064 tagged_above=-9999 required=6.5 tests=[DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=1.023, MPART_ALT_DIFF=0.79, P0F_LINUX=-0.1, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.203, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=no autolearn_force=no
Aug 31 10:05:28 (1508931-18) header_edits_for_quar: <a.firlej@maktronik.com.pl> -> <smolanska@arka-mega.pl>, Yes, score=21.617 tag=9999 tag2=6 kill=10 tests=[AM.WBL=-2, DKIM_INVALID=0.1, DKIM_SIGNED=0.001, DMARC_QUAR=5, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, KAM_MARKSPAM=4, LR_MW_DKIM_SIGNED_INVALID=0.25, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=1.023, MPART_ALT_DIFF=0.79, P0F_LINUX=-0.1, SPF_HELO_NONE=0.001, TXREP=2.304, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=spam autolearn_force=no