SARU.PL - MAIL LOG TODAY

Jun 2 00:08:43 (07493-09) spam-tag, <udmylpr@axertione.click> -> <r.kozlakowski@maktronik.com.pl>, Yes, score=8.585 tagged_above=-9999 required=6.5 tests=[AC_BR_BONANZA=1, BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, HTML_FONT_LOW_CONTRAST=0.001, HTML_IMAGE_ONLY_20=0.7, HTML_IMAGE_RATIO_08=0.001, HTML_MESSAGE=0.001, KAM_OTHER_BAD_TLD=0.75, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_RU=0.5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.143, T_TVD_MIME_EPI=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 00:45:19 (444017-16) spam-tag, <undelivered@services.ovhcloud.com> -> <st+ovh@bromberg.pl>, Yes, score=7.672 tagged_above=-9999 required=6.5 tests=[AM.WBL=1.5, BOTNET_SERVERWORDS=-0.001, DCC_CHECK=1.1, DKIMWL_WL_HIGH=-0.445, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, KAM_SHORT=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_RCVD_TLD_L2=5, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_UCEPROTECT2=0.5, RCVD_IN_UCEPROTECT3=0.25, RELAYCOUNTRY_FR=0.25, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.009, T_REMOTE_IMAGE=0.01, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 02:57:33 NOQUEUE: reject: RCPT from mail.567331.xyz[209.159.159.32]: 554 5.7.1 Service unavailable; Client host [209.159.159.32] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?209.159.159.32; from=<messaging-noreply@linkedin.com> to=<serwis@maktronik.com.pl> proto=ESMTP helo=<mail.567331.xyz>
Jun 2 05:31:22 NOQUEUE: reject: RCPT from server.ezcom.hu[91.227.139.243]: 550 5.7.23 <office@maktronik.com.pl>: Recipient address rejected: Message rejected due to: SPF fail - not authorized.; from=<kamila.kozlowska@pkobp.pl> to=<office@maktronik.com.pl> proto=ESMTP helo=<server.ezcom.hu>
Jun 2 05:39:48 NOQUEUE: reject: RCPT from out162-62-58-211.mail.qq.com[162.62.58.211]: 554 5.7.1 Service unavailable; Client host [162.62.58.211] blocked using dynamic.rbl.tld; Dynamic/residential IP; spam source (dial-up or DSL line). Please use your ISP's SMTP; from=<bbchaokeai6@qq.com> to=<transport@maktronik.com.pl> proto=ESMTP helo=<out162-62-58-211.mail.qq.com>
Jun 2 05:41:14 NOQUEUE: reject: RCPT from out203-205-221-236.mail.qq.com[203.205.221.236]: 554 5.7.1 Service unavailable; Client host [203.205.221.236] blocked using dynamic.rbl.tld; Dynamic/residential IP; spam source (dial-up or DSL line). Please use your ISP's SMTP; from=<bbchaokeai6@qq.com> to=<transport@maktronik.com.pl> proto=ESMTP helo=<out203-205-221-236.mail.qq.com>
Jun 2 05:43:57 (21305-05) spam-tag, <bbchaokeai6@qq.com> -> <transport@maktronik.com.pl>, Yes, score=8.243 tagged_above=-9999 required=6.5 tests=[BOTNET_IPINHOSTNAME=0.001, BOTNET_SERVERWORDS=-0.001, DCC_CHECK=1.1, DEAR_FRIEND=2.604, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, GB_FREEMAIL_DISPTO=0.499, HELO_STATIC_HOST=-0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, NO_FM_NAME_IP_HOSTN=2.05, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_BAD=0.003, RELAYCOUNTRY_CN=2.5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=-0.257, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 06:05:25 (21304-06) header_edits_for_quar: <paweljablo001@gmail.com> -> <marecki@bromberg.pl>, Yes, score=11115292461.895 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, FORGED_GMAIL_RCVD=1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_LESS200=0.1, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.5, RELAYCOUNTRY_US=0.025, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TVD_SPACE_RATIO=0.001, TXREP=11115292458.421, T_FREEMAIL_DOC_PDF=0.01] autolearn=no autolearn_force=no
Jun 2 06:29:24 (580129-05) spam-tag, <biuro@fastmail24.pl> -> <buuu@bromberg.pl>, Yes, score=7.745 tagged_above=-9999 required=6.5 tests=[BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_RCVD_TLD_L2=5, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=0.362, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 07:41:00 (580130-07) spam-tag, <nr285@rp.verbraucher-smartshopping24.de> -> <andrzej@bromberg.pl>, Yes, score=10.886 tagged_above=-9999 required=6.5 tests=[DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_RCVD_TLD_L2=5, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, RAZOR2_CF_RANGE_51_100=2.43, RAZOR2_CHECK=1.729, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_DE=0.001, RELAYCOUNTRY_GOOD=-0.2, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=1.229, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 08:14:20 NOQUEUE: reject: RCPT from vps.toptel.kylos.net.pl[91.241.62.234]: 550 5.1.1 <a.krol@maktronik.com.pl>: Recipient address rejected: User unknown; from=<reklamacje@toptel.pl> to=<a.krol@maktronik.com.pl> proto=ESMTP helo=<vps.toptel.kylos.net.pl>
Jun 2 08:23:43 (21304-12) header_edits_for_quar: <reports@e100.pro> -> <transport@maktronik.com.pl>, Yes, score=25.749 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_NOT_SPAM03=9, LR_MW_OFERTA01=0.001, LR_MW_OFERTA02=0.001, LR_MW_OFERTA03=0.1, LR_MW_SPF_OK=-0.01, LR_MW_ZAPYTANIE02=0.001, LR_MW_ZAPYTANIE06j=1, P0F_LINUX=-0.1, PDS_PRO_TLD=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_PL=0.001, RELAYCOUNTRY_US=0.025, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=16.127, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 08:35:44 NOQUEUE: reject: RCPT from email.snw.at[83.219.160.14]: 550 5.1.1 <j.wodzki@maktronik.com.pl>: Recipient address rejected: User unknown; from=<ketty@gransol.eu> to=<j.wodzki@maktronik.com.pl> proto=ESMTP helo=<email.snw.at>
Jun 2 08:47:09 NOQUEUE: reject: RCPT from mail.tirex.sk[84.245.69.245]: 550 5.1.1 <office@maktronik.com.pl>: Recipient address rejected: User unknown; from=<prvs=6064e9a6c=glasa@tirex.sk> to=<office@maktronik.com.pl> proto=ESMTP helo=<mail.tirex.sk>
Jun 2 09:03:09 NOQUEUE: reject: RCPT from vps.toptel.kylos.net.pl[91.241.62.234]: 550 5.1.1 <jacek@bromberg.pl>: Recipient address rejected: User unknown; from=<reklamacje@toptel.pl> to=<jacek@bromberg.pl> proto=ESMTP helo=<vps.toptel.kylos.net.pl>
Jun 2 09:03:42 (21305-14) header_edits_for_quar: <bounces+28225628-443b-k.bryll=maktronik.com.pl@em6677.magnus.eu> -> <k.bryll@maktronik.com.pl>, Yes, score=379.115 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, HTML_MESSAGE=0.001, KAM_EU=0.5, LR_MW_DMARC_PASS=-0.001, LR_MW_OFERTA01=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIME_HTML_ONLY=0.1, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_US=0.025, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=377.896, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 09:04:19 (580130-14) spam-tag, <mateusz.brandt@kide-energy.pl> -> <a.firlej@maktronik.com.pl>, Yes, score=8.946 tagged_above=-9999 required=6.5 tests=[BOTNET_SOHO=0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_NOT_SPAM06b=9, LR_MW_OFERTA01=0.001, LR_MW_OFERTA02=0.001, LR_MW_OFERTA03=0.1, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, RELAYCOUNTRY_FR=0.25, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=0.299, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 09:04:31 (580129-15) header_edits_for_quar: <a.firlej@maktronik.com.pl> -> <smolanska@arka-mega.pl>, Yes, score=10.578 tag=9999 tag2=6 kill=10 tests=[ALL_TRUSTED=-1, AM.WBL=-2, DKIM_INVALID=0.1, DKIM_SIGNED=0.001, HTML_MESSAGE=0.001, KAM_MARKSPAM=4, LR_MW_DKIM_SIGNED_INVALID=0.25, LR_MW_DMARC_PASS=-0.001, LR_MW_NOT_SPAM06b=9, LR_MW_OFERTA01=0.001, LR_MW_OFERTA02=0.001, LR_MW_OFERTA03=0.1, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, SPF_HELO_NONE=0.001, TXREP=0.229, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 09:07:31 NOQUEUE: reject: RCPT from vps.toptel.kylos.net.pl[91.241.62.234]: 550 5.1.1 <joanna@bromberg.pl>: Recipient address rejected: User unknown; from=<reklamacje@toptel.pl> to=<joanna@bromberg.pl> proto=ESMTP helo=<vps.toptel.kylos.net.pl>
Jun 2 09:08:36 (21305-15) header_edits_for_quar: <bounces+28225628-c1df-m.hryniewicz=maktronik.com.pl@em6677.magnus.eu> -> <m.hryniewicz@maktronik.com.pl>, Yes, score=252.485 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, HTML_MESSAGE=0.001, KAM_EU=0.5, LR_MW_DMARC_PASS=-0.001, LR_MW_OFERTA01=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIME_HTML_ONLY=0.1, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_US=0.025, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=252.366, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 09:10:36 NOQUEUE: reject: RCPT from esa1.hc69-91.eu.iphmx.com[207.54.67.178]: 550 5.1.1 <j.wodzki@maktronik.com.pl>: Recipient address rejected: User unknown; from=<g.vazquez@transped.at> to=<j.wodzki@maktronik.com.pl> proto=ESMTP helo=<esa1.hc69-91.eu.iphmx.com>
Jun 2 09:14:38 NOQUEUE: reject: RCPT from vps15797.awhost.cloud[31.3.218.136]: 550 5.1.1 <kontakt@maktronik.com.pl>: Recipient address rejected: User unknown; from=<tomasz@handel-pojazdy.biz.pl> to=<kontakt@maktronik.com.pl> proto=ESMTP helo=<vps15797.awhost.cloud>
Jun 2 09:33:54 (580130-19) spam-tag, <bounce-1@bounce.mailing.ebroker.pl> -> <Arkadiusz.firlej@wolfsklepy.pl>, Yes, score=11.03 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, P0F_LINUX=-0.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.373, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 09:38:13 (580129-19) header_edits_for_quar: <roman@almar-sport.pl> -> <j.szmiel@maktronik.com.pl>, Yes, score=139.102 tag=-9999 tag2=6.5 kill=12.3 tests=[DCC_CHECK=1.1, DKIM_INVALID=0.1, DKIM_SIGNED=0.001, DMARC_PASS=-0.001, HTML_MESSAGE=0.001, LEMAT_10=99, LR_MW_DKIM_SIGNED_INVALID=0.25, LR_MW_DMARC_PASS=-0.001, LR_MW_NOT_SPAM06b=9, LR_MW_OFERTA01=0.001, LR_MW_OFERTA02=0.001, LR_MW_OFERTA03=0.1, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_YES_NO_01=3.5, LR_MW_YES_NO_01p=9, LR_MW_YES_NO_03=3.5, LR_MW_ZAPYTANIE01o=9, LR_MW_ZAPYTANIE02=0.001, LR_MW_ZAPYTANIE06d=9, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=-2.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.452, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 09:38:46 NOQUEUE: reject: RCPT from esa2.hc69-91.eu.iphmx.com[207.54.65.89]: 550 5.1.1 <j.wodzki@maktronik.com.pl>: Recipient address rejected: User unknown; from=<n.lopez@transped.at> to=<j.wodzki@maktronik.com.pl> proto=ESMTP helo=<esa2.hc69-91.eu.iphmx.com>
Jun 2 09:49:12 NOQUEUE: reject: RCPT from z4.sare25.com[212.91.27.197]: 554 5.7.1 Service unavailable; Helo command [z4.sare25.com] blocked using revdns.rbl.tld; Network sare25.com blocked for spam; from=<sare0215725126-office=maktronik.com.pl@z.empub.pl> to=<office@maktronik.com.pl> proto=ESMTP helo=<z4.sare25.com>
Jun 2 10:09:26 NOQUEUE: reject: RCPT from mail15.perfect-logistik.at[45.142.177.166]: 550 5.1.1 <a.miszkowiak@maktronik.com.pl>: Recipient address rejected: User unknown; from=<reinhold@perfect-logistik.at> to=<a.miszkowiak@maktronik.com.pl> proto=ESMTP helo=<mail15.perfect-logistik.at>
Jun 2 10:28:34 NOQUEUE: reject: RCPT from mailgw.hostex.lt[92.61.46.29]: 554 5.7.1 <mailgw.hostex.lt[92.61.46.29]>: Client host rejected: We dont like SPAM.; from=<Log3@wextras.lt> to=<transport@maktronik.com.pl> proto=ESMTP helo=<mailgw.hostex.lt>
Jun 2 10:32:30 BB0415DE04: to=<contract4@mildnik.com>, relay=mail.mildnik.com[89.44.80.231]:25, delay=0.46, delays=0/0.02/0.4/0.04, dsn=5.1.1, status=undeliverable (host mail.mildnik.com[89.44.80.231] said: 550 5.1.1 <contract4@mildnik.com>: Recipient address rejected: User unknown in virtual mailbox table (in reply to RCPT TO command))
Jun 2 10:32:32 NOQUEUE: reject: RCPT from mildnik.com[89.44.80.146]: 550 5.1.7 <contract4@mildnik.com>: Sender address rejected: undeliverable address: Sender address verification; from=<contract4@mildnik.com> to=<serwis@maktronik.com.pl> proto=ESMTP helo=<mail.mildnik.com>
Jun 2 10:49:43 NOQUEUE: reject: RCPT from out208-134.dm.aliyun.com[140.205.208.134]: 554 5.7.1 Service unavailable; Client host [140.205.208.134] blocked using chikor.rbl.tld; IP 140.205.208.134 was sending spam/viruses and requires your IT investigation & remediation; from=<random_NjAwMDAwMzE4MDU4NjA1MDI3X2tvbnRha3RAc2lsb3duaWFieWRnb3N6Y3oucGwkdmlw@vip0.clampfactory.ltd> to=<kontakt@silowniabydgoszcz.pl> proto=ESMTP helo=<out208-134.dm.aliyun.com>
Jun 2 10:56:23 (09258-05) header_edits_for_quar: <bounces+28225628-443b-k.bryll=maktronik.com.pl@em6677.magnus.eu> -> <k.bryll@maktronik.com.pl>, Yes, score=12.741 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, HTML_MESSAGE=0.001, KAM_EU=0.5, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIME_HTML_ONLY=0.1, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_US=0.025, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=12.624] autolearn=no autolearn_force=no
Jun 2 11:01:41 (09258-06) header_edits_for_quar: <f.abramczyk@podatki-kadry.pl> -> <transport@maktronik.com.pl>, Yes, score=17.419 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_OFERTA01=0.001, LR_MW_OFERTA02=0.001, LR_MW_OFERTA03=0.1, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_FI=0.001, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=18.011, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 11:04:33 NOQUEUE: reject: RCPT from dedicated-aff119.rev.nazwa.pl[77.55.135.119]: 550 5.1.1 <office@maktronik.com.pl>: Recipient address rejected: User unknown; from=<kadrowy@server867922.nazwa.pl> to=<office@maktronik.com.pl> proto=ESMTP helo=<dedicated-aff119.rev.nazwa.pl>
Jun 2 11:07:02 (700993-09) header_edits_for_quar: <sm.22627616272.k659j8s334yshado67-kfc=kfc.pl@emlgrid.com> -> <arkadiusz.firlej@wolfsklepy.pl>, Yes, score=x tag=-9999 tag2=6.5 kill=12.3 BLACKLISTED tests=[] autolearn=unavailable
Jun 2 11:08:51 (701109-08) spam-tag, <sm.26214999125.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <m.hryniewicz@maktronik.com.pl>, Yes, score=7.297 tagged_above=-9999 required=6.5 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, MW_HDR_O=0.5, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.639, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 11:08:53 (09258-07) header_edits_for_quar: <sm.26214999132.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <m.witkowska@maktronik.com.pl>, Yes, score=154.494 tag=-9999 tag2=6.5 kill=12.3 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, MW_HDR_O=0.5, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=-1.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=145.829, T_KAM_HTML_FONT_INVALID=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 11:09:49 (701109-09) spam-tag, <sm.26215019771.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <transport@maktronik.com.pl>, Yes, score=7.364 tagged_above=-9999 required=6.5 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, MW_HDR_O=0.5, P0F_LINUX=-0.1, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.708, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 11:10:56 (700993-11) spam-tag, <sm.26215070632.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <a.firlej@maktronik.com.pl>, Yes, score=8.663 tagged_above=-9999 required=6.5 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, MW_HDR_O=0.5, P0F_LINUX=-0.1, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=2.007, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 11:10:59 (09258-08) header_edits_for_quar: <sm.26215069584.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <k.bryll@maktronik.com.pl>, Yes, score=157.078 tag=-9999 tag2=6.5 kill=12.3 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, MW_HDR_O=0.5, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=-2.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=149.413, T_KAM_HTML_FONT_INVALID=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 11:11:00 (10228-08) header_edits_for_quar: <sm.26215070604.tuxs9zdccja4cio802-newsletter=transcards.eu@smgrid.pl> -> <k.hetzig@maktronik.com.pl>, Yes, score=107.087 tag=-9999 tag2=6.5 kill=12.3 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, MW_HDR_O=0.5, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=100.422, T_KAM_HTML_FONT_INVALID=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 11:11:05 (09258-09) header_edits_for_quar: <a.firlej@maktronik.com.pl> -> <smolanska@arka-mega.pl>, Yes, score=55.239 tag=9999 tag2=6 kill=10 tests=[AM.WBL=-2, DCC_CHECK=1.1, DKIM_INVALID=0.1, DKIM_SIGNED=0.001, DMARC_QUAR=5, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, KAM_MARKSPAM=4, LR_MW_DKIM_SIGNED_INVALID=0.25, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, MW_HDR_O=0.5, P0F_LINUX=-0.1, SPF_HELO_NONE=0.001, TXREP=35.125, T_KAM_HTML_FONT_INVALID=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Jun 2 11:23:18 NOQUEUE: reject: RCPT from vps-456014e1.vps.ovh.net[141.95.41.4]: 550 5.1.1 <iveco@maktronik.com.pl>: Recipient address rejected: User unknown; from=<info@opinie-spis.pl> to=<iveco@maktronik.com.pl> proto=ESMTP helo=<send.opinie-spis.pl>
Jun 2 11:32:13 NOQUEUE: reject: RCPT from smtp35.send24.pl[91.230.36.108]: 554 5.7.1 <smtp35.send24.pl[91.230.36.108]>: Client host rejected: We dont like SPAM from REDLINK.; from=<4x63789.177414521.644154261@news.send360.pl> to=<serwis@maktronik.com.pl> proto=ESMTP helo=<smtp35.send24.pl>
Jun 2 12:52:45 (09258-19) spam-tag, <nbounce-7178-1543240-592915340-6b5b4-1f0eef83@nl.drinuniforma.ro> -> <gabinet@osteomika.pl>, Yes, score=7.14 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_OFERTA01=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_HOSTKARMA_BL=3, RELAYCOUNTRY_RO=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=3.535, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 12:54:42 NOQUEUE: reject: RCPT from smtp18.send360.pl[91.230.36.171]: 554 5.7.1 <smtp18.send360.pl[91.230.36.171]>: Client host rejected: We dont like SPAM from REDLINK.; from=<12x65769.2833751.540959780@news.send360.pl> to=<serwis@maktronik.com.pl> proto=ESMTP helo=<smtp18.send360.pl>
Jun 2 13:08:07 NOQUEUE: reject: RCPT from cpl.tuva.su[37.48.73.214]: 554 5.7.1 Service unavailable; Client host [37.48.73.214] blocked using chikor.rbl.tld; IP 37.48.73.214 was sending spam/viruses and requires your IT investigation & remediation; from=<ilxadjn@remonserio.coupons> to=<a.slowikowski@maktronik.com.pl> proto=ESMTP helo=<cpl.tuva.su>
Jun 2 13:09:18 NOQUEUE: reject: RCPT from unknown[185.176.220.142]: 554 5.7.1 Service unavailable; Client host [185.176.220.142] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?185.176.220.142; from=<nzdkz@fanytaerw.shop> to=<stk2008@bromberg.pl> proto=ESMTP helo=<fanytaerw.shop>
Jun 2 13:11:06 NOQUEUE: reject: RCPT from b13-rem.shop[89.252.185.35]: 554 5.7.1 Service unavailable; Client host [89.252.185.35] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?89.252.185.35; from=<sales@b13-rem.shop> to=<office@whitemorning.pl> proto=ESMTP helo=<b13-rem.shop>
Jun 2 13:40:46 (31253-01) header_edits_for_quar: <cargo9@tirola.lt> -> <z.murawski@maktronik.com.pl>, Yes, score=16.041 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, HTML_MESSAGE=0.001, LR_MW_SPF_OK=-0.01, MISSING_HEADERS=1.207, P0F_WINNT=0.5, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.5, RELAYCOUNTRY_US=0.025, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=15.218, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 13:48:32 NOQUEUE: reject: RCPT from esa2.hc69-91.eu.iphmx.com[207.54.65.89]: 550 5.1.1 <j.wodzki@maktronik.com.pl>: Recipient address rejected: User unknown; from=<g.vazquez@transped.at> to=<j.wodzki@maktronik.com.pl> proto=ESMTP helo=<esa2.hc69-91.eu.iphmx.com>
Jun 2 13:51:50 NOQUEUE: reject: RCPT from cpl.tuva.su[37.48.73.214]: 554 5.7.1 Service unavailable; Client host [37.48.73.214] blocked using chikor.rbl.tld; IP 37.48.73.214 was sending spam/viruses and requires your IT investigation & remediation; from=<ysfajym@remonserio.coupons> to=<l.nowak@maktronik.com.pl> proto=ESMTP helo=<cpl.tuva.su>
Jun 2 13:55:57 (31253-02) header_edits_for_quar: <orders@trenchers-midlands.co.uk> -> <serwis@maktronik.com.pl>, Yes, score=16.023 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET=0.1, BOTNET_CLIENT=0.001, BOTNET_CLIENTWORDS=0.001, BOTNET_IPINHOSTNAME=0.001, BOTNET_OTHER=0.5, DCC_CHECK=1.1, DMARC_QUAR=5, HTML_MESSAGE=0.001, KAM_COUK=0.85, LR_MW_DMARC_FAIL=5, LR_MW_TLSCERT_FAIL=0.001, MIME_HTML_ONLY=0.1, NO_FM_NAME_IP_HOSTN=2.05, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.5, RCVD_IN_UCEPROTECT2=0.5, RCVD_IN_UCEPROTECT3=0.25, RDNS_DYNAMIC=0.363, RELAYCOUNTRY_GB=0.05, SPF_HELO_NONE=0.001, SPF_NEUTRAL=0.652, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 13:59:35 (30012-03) header_edits_for_quar: <sm.26216519580.tuxs9zdccja4cio802-kontakt=bonabanco.com@smgrid.pl> -> <m.hryniewicz@maktronik.com.pl>, Yes, score=40.574 tag=-9999 tag2=6.5 kill=12.3 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=34.409, T_KAM_HTML_FONT_INVALID=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 13:59:35 (31253-03) header_edits_for_quar: <sm.26216519587.tuxs9zdccja4cio802-kontakt=bonabanco.com@smgrid.pl> -> <m.witkowska@maktronik.com.pl>, Yes, score=42.426 tag=-9999 tag2=6.5 kill=12.3 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=-1.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=34.261, T_KAM_HTML_FONT_INVALID=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 14:00:08 (758007-04) spam-tag, <sm.26216540150.tuxs9zdccja4cio802-kontakt=bonabanco.com@smgrid.pl> -> <transport@maktronik.com.pl>, Yes, score=7.008 tagged_above=-9999 required=6.5 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.850, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 14:04:27 (30012-04) header_edits_for_quar: <sm.26216589783.tuxs9zdccja4cio802-kontakt=bonabanco.com@smgrid.pl> -> <k.bryll@maktronik.com.pl>, Yes, score=61.799 tag=-9999 tag2=6.5 kill=12.3 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=-2.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=54.634, T_KAM_HTML_FONT_INVALID=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 14:04:36 (755075-07) spam-tag, <sm.26216590802.tuxs9zdccja4cio802-kontakt=bonabanco.com@smgrid.pl> -> <k.hetzig@maktronik.com.pl>, Yes, score=7 tagged_above=-9999 required=6.5 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, P0F_LINUX=-0.1, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.844, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 14:04:39 (31253-04) header_edits_for_quar: <sm.26216590830.tuxs9zdccja4cio802-kontakt=bonabanco.com@smgrid.pl> -> <a.firlej@maktronik.com.pl>, Yes, score=43.456 tag=-9999 tag2=6.5 kill=12.3 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=37.291, T_KAM_HTML_FONT_INVALID=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 14:10:17 NOQUEUE: reject: RCPT from smtp06.send24.pl[91.230.36.141]: 554 5.7.1 <smtp06.send24.pl[91.230.36.141]>: Client host rejected: We dont like SPAM from REDLINK.; from=<1x633.311209722.1532054062@news.send360.pl> to=<jola@bromberg.pl> proto=ESMTP helo=<smtp06.send24.pl>
Jun 2 14:16:13 (31253-06) header_edits_for_quar: <bounces+28225628-c1df-m.hryniewicz=maktronik.com.pl@em6677.magnus.eu> -> <m.hryniewicz@maktronik.com.pl>, Yes, score=72.753 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, HTML_MESSAGE=0.001, KAM_EU=0.5, KAM_NUMSUBJECT=0.5, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIME_HTML_ONLY=0.1, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_US=0.025, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, SUBJ_ALL_CAPS=0.5, TXREP=70.535, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 14:23:08 (758007-10) spam-tag, <evdacvq@timix.online> -> <a.olszewski@maktronik.com.pl>, Yes, score=9.113 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, BOTNET_SOHO=0.001, DMARC_MISSING=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, FSL_BULK_SIG=0.001, HTML_IMAGE_ONLY_16=1.048, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIXED_HREF_CASE=1.999, MW_BODY_N=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RELAYCOUNTRY_NL=0.001, RELAYCOUNTRY_RU=0.5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=1.173, T_TVD_MIME_EPI=0.01, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 14:35:23 NOQUEUE: reject: RCPT from mailgw.hostex.lt[92.61.46.29]: 554 5.7.1 <mailgw.hostex.lt[92.61.46.29]>: Client host rejected: We dont like SPAM.; from=<log2@wextras.lt> to=<k.bryll@maktronik.com.pl> proto=ESMTP helo=<mailgw.hostex.lt>
Jun 2 15:51:25 (31253-13) header_edits_for_quar: <bounces+28225628-c1df-m.hryniewicz=maktronik.com.pl@em6677.magnus.eu> -> <m.hryniewicz@maktronik.com.pl>, Yes, score=38.595 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, HTML_IMAGE_ONLY_20=0.7, HTML_MESSAGE=0.001, KAM_EU=0.5, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIME_HTML_ONLY=0.1, P0F_LINUX=-0.1, RELAYCOUNTRY_US=0.025, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=37.768, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 15:52:26 NOQUEUE: reject: RCPT from cpl.tuva.su[37.48.73.214]: 554 5.7.1 Service unavailable; Client host [37.48.73.214] blocked using chikor.rbl.tld; IP 37.48.73.214 was sending spam/viruses and requires your IT investigation & remediation; from=<iknownl@remonserio.coupons> to=<a.olszewski@maktronik.com.pl> proto=ESMTP helo=<cpl.tuva.su>
Jun 2 15:55:08 (755075-20) header_edits_for_quar: <piotr.g@sollver-kancelaria.pl> -> <a.firlej@maktronik.com.pl>, Yes, score=13.913 tag=-9999 tag2=6.5 kill=12.3 tests=[DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_NOT_SPAM06b=9, LR_MW_OFERTA01=0.001, LR_MW_OFERTA02=0.001, LR_MW_OFERTA03=0.1, LR_MW_RCVD_TLD_L2=5, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_DE=0.001, RELAYCOUNTRY_FR=0.25, RELAYCOUNTRY_GOOD=-0.2, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=0.265, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 16:06:12 (796685-01) spam-tag, <sm.20943417443.m9f0c8k9bh6zheoe05-coatingsexpo=warsawexpo.eu@emsgrid.com> -> <r.kozlakowski@maktronik.com.pl>, Yes, score=7.174 tagged_above=-9999 required=6.5 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_OFERTA01=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_HOSTKARMA_W=-0.001, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.016, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 16:06:43 (758007-19) spam-tag, <sm.20943417565.m9f0c8k9bh6zheoe05-coatingsexpo=warsawexpo.eu@emsgrid.com> -> <a.smolinska@maktronik.com.pl>, Yes, score=7.17 tagged_above=-9999 required=6.5 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, DMARC_PASS=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, LR_MW_DMARC_PASS=-0.001, LR_MW_OFERTA01=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_URIBL_TLD04=10, MIME_HTML_MOSTLY=0.285, MPART_ALT_DIFF=0.724, P0F_LINUX=-0.1, RCVD_IN_HOSTKARMA_W=-0.001, RCVD_IN_MSPIKE_H5=-3.5, RCVD_IN_MSPIKE_WL=-2.1, RELAYCOUNTRY_GOOD=-0.2, RELAYCOUNTRY_PL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.014, UNPARSEABLE_RELAY=0.001, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 16:21:34 NOQUEUE: reject: RCPT from v23657674.sin01.serveradd.com[74.91.223.30]: 550 5.1.1 <t.grzelak@maktronik.com.pl>: Recipient address rejected: User unknown; from=<admin@championtime.com> to=<t.grzelak@maktronik.com.pl> proto=ESMTP helo=<v23657674.sin01.serveradd.com>
Jun 2 16:56:25 NOQUEUE: reject: RCPT from cpl.tuva.su[37.48.73.214]: 554 5.7.1 Service unavailable; Client host [37.48.73.214] blocked using chikor.rbl.tld; IP 37.48.73.214 was sending spam/viruses and requires your IT investigation & remediation; from=<yrriblq@remonserio.coupons> to=<a.smolinska@maktronik.com.pl> proto=ESMTP helo=<cpl.tuva.su>
Jun 2 16:56:43 NOQUEUE: reject: RCPT from mail20.perfect-logistik.at[167.235.245.72]: 550 5.1.1 <j.wodzki@maktronik.com.pl>: Recipient address rejected: User unknown; from=<julian@perfect-logistik.at> to=<j.wodzki@maktronik.com.pl> proto=ESMTP helo=<mail20.perfect-logistik.at>
Jun 2 17:02:02 (796685-05) spam-tag, <enjitvd@timix.online> -> <k.hetzig@maktronik.com.pl>, Yes, score=9.115 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, BOTNET_SOHO=0.001, DMARC_MISSING=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, FSL_BULK_SIG=0.001, HTML_IMAGE_ONLY_16=1.048, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIXED_HREF_CASE=1.999, MW_BODY_N=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RELAYCOUNTRY_NL=0.001, RELAYCOUNTRY_RU=0.5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=1.175, T_TVD_MIME_EPI=0.01, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 17:05:23 (799734-03) spam-tag, <esnejyy@axertione.click> -> <z.murawski@maktronik.com.pl>, Yes, score=8.091 tagged_above=-9999 required=6.5 tests=[AC_BR_BONANZA=1, BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, DMARC_MISSING=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, FSL_BULK_SIG=0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_IMAGE_ONLY_20=0.7, HTML_MESSAGE=0.001, KAM_OTHER_BAD_TLD=0.75, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RELAYCOUNTRY_NL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.145, T_TVD_MIME_EPI=0.01, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 17:07:55 NOQUEUE: reject: RCPT from mail20.perfect-logistik.at[167.235.245.72]: 550 5.1.1 <r.rygielski@maktronik.com.pl>: Recipient address rejected: User unknown; from=<julian@perfect-logistik.at> to=<r.rygielski@maktronik.com.pl> proto=ESMTP helo=<mail20.perfect-logistik.at>
Jun 2 17:22:13 (30012-18) spam-tag, <ebbopqp@timix.online> -> <k.kolodziejczyk@maktronik.com.pl>, Yes, score=8.441 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, HTML_IMAGE_ONLY_16=1.048, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIXED_HREF_CASE=1.999, MW_BODY_N=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_RU=0.5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=-0.595, T_TVD_MIME_EPI=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 17:44:19 (796685-07) spam-tag, <yqlorjz@timix.online> -> <a.smolinska@maktronik.com.pl>, Yes, score=9.119 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, BOTNET_SOHO=0.001, DMARC_MISSING=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, HTML_IMAGE_ONLY_16=1.048, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIXED_HREF_CASE=1.999, MW_BODY_N=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_NL=0.001, RELAYCOUNTRY_RU=0.5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=1.178, T_TVD_MIME_EPI=0.01, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 18:10:05 (29323-01) spam-tag, <uysyztj@timix.online> -> <a.slowikowski@maktronik.com.pl>, Yes, score=8.445 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, FSL_BULK_SIG=0.001, HTML_IMAGE_ONLY_16=1.048, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIXED_HREF_CASE=1.999, MW_BODY_N=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RELAYCOUNTRY_RU=0.5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=-0.591, T_TVD_MIME_EPI=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 19:39:52 NOQUEUE: reject: RCPT from cpl.tuva.su[37.48.73.214]: 554 5.7.1 Service unavailable; Client host [37.48.73.214] blocked using chikor.rbl.tld; IP 37.48.73.214 was sending spam/viruses and requires your IT investigation & remediation; from=<emlobhw@remonserio.coupons> to=<k.kolodziejczyk@maktronik.com.pl> proto=ESMTP helo=<cpl.tuva.su>
Jun 2 19:42:03 NOQUEUE: reject: RCPT from cpl.tuva.su[37.48.73.214]: 554 5.7.1 Service unavailable; Client host [37.48.73.214] blocked using chikor.rbl.tld; IP 37.48.73.214 was sending spam/viruses and requires your IT investigation & remediation; from=<imyurnh@remonserio.coupons> to=<k.szmiel@maktronik.com.pl> proto=ESMTP helo=<cpl.tuva.su>
Jun 2 20:00:36 NOQUEUE: reject: RCPT from sendera189.zohocrm.com[135.84.80.189]: 550 5.1.1 <m.gibaszek@maktronik.com.pl>: Recipient address rejected: User unknown; from=<bounces+779c64c0-5eac-11f1-9cbe-765e7256bde4_vt1@sender.zohocrm.com> to=<m.gibaszek@maktronik.com.pl> proto=ESMTP helo=<sendera189.zohocrm.com>
Jun 2 20:19:23 (799734-10) spam-tag, <apzijfm@timix.online> -> <k.szmiel@maktronik.com.pl>, Yes, score=10.222 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, DMARC_MISSING=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, FSL_BULK_SIG=0.001, HTML_IMAGE_ONLY_16=1.048, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIXED_HREF_CASE=1.999, MW_BODY_N=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RELAYCOUNTRY_NL=0.001, RELAYCOUNTRY_RU=0.5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=1.181, T_TVD_MIME_EPI=0.01, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 20:34:58 NOQUEUE: reject: RCPT from email.way-interactive.com[167.86.91.48]: 554 5.7.1 Service unavailable; Client host [167.86.91.48] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?167.86.91.48; from=<signalements@vast-new-telecom.com> to=<yq@saru.pl> proto=ESMTP helo=<email.way-interactive.com>
Jun 2 20:48:13 (29323-06) spam-tag, <ompiyrs@timix.online> -> <l.nowak@maktronik.com.pl>, Yes, score=8.45 tagged_above=-9999 required=6.5 tests=[BOTNET_SERVERWORDS=-0.001, BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, FSL_BULK_SIG=0.001, HTML_IMAGE_ONLY_16=1.048, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIXED_HREF_CASE=1.999, MW_BODY_N=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RELAYCOUNTRY_RU=0.5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=-0.586, T_TVD_MIME_EPI=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 20:59:20 (799734-12) spam-tag, <ehzuchr@axertione.click> -> <sklep@maktronik.com.pl>, Yes, score=8.09 tagged_above=-9999 required=6.5 tests=[AC_BR_BONANZA=1, BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, DMARC_MISSING=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, FSL_BULK_SIG=0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_IMAGE_ONLY_20=0.7, HTML_MESSAGE=0.001, KAM_OTHER_BAD_TLD=0.75, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RELAYCOUNTRY_NL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.144, T_TVD_MIME_EPI=0.01, URIBL_AB_SURBL=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled
Jun 2 21:17:50 NOQUEUE: reject: RCPT from unknown[130.12.181.11]: 554 5.7.1 Service unavailable; Client host [130.12.181.11] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?130.12.181.11; from=<nica.yeh@kuehne-nagel.com> to=<serwis@maktronik.com.pl> proto=ESMTP helo=<kuehne-nagel.com>
Jun 2 21:50:36 (00801-08) header_edits_for_quar: <bounces-183425146-126689870@nowe.oferty-biznesowe.pl> -> <serwis@maktronik.com.pl>, Yes, score=31.213 tag=-9999 tag2=6.5 kill=12.3 tests=[DCC_CHECK=1.1, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VERIFIED=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, KAM_REALLYHUGEIMGSRC=1.1, LR_MW_DMARC_PASS=-0.001, LR_MW_OFERTA01=0.001, LR_MW_OFERTA02=0.001, LR_MW_OFERTA03=0.1, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, LR_MW_YES_NO_01l=1, MIME_HTML_ONLY=0.1, P0F_LINUX=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_US=0.025, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TXREP=28.183, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 22:32:28 (29323-10) spam-tag, <nobody@relay-test.detectors-testing.com> -> <nobody@relay-test.detectors-testing.com>, Yes, score=8.86 tagged_above=9999 required=6 tests=[AM.WBL=5, ALL_TRUSTED=-1, LR_MW_LESS200=0.1, MISSING_HEADERS=1.207, MISSING_SUBJECT=1.767, PYZOR_CHECK=1.985, SPF_HELO_NONE=0.001, TVD_SPACE_RATIO=0.001, TXREP=-0.201] autolearn=no autolearn_force=no
Jun 2 22:39:14 NOQUEUE: reject: RCPT from cpl.tuva.su[37.48.73.214]: 554 5.7.1 Service unavailable; Client host [37.48.73.214] blocked using chikor.rbl.tld; IP 37.48.73.214 was sending spam/viruses and requires your IT investigation & remediation; from=<ilnijqn@remonserio.coupons> to=<k.hetzig@maktronik.com.pl> proto=ESMTP helo=<cpl.tuva.su>
Jun 2 22:42:44 (00801-10) header_edits_for_quar: <ib_bounces-rules=bromberg.pl@ibm.uber.com> -> <rules@bromberg.pl>, Yes, score=24.455 tag=-9999 tag2=6.5 kill=12.3 tests=[BOTNET_SERVERWORDS=-0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, DKIM_SIGNED=0.001, DKIM_VALID=-0.1, DKIM_VERIFIED=-0.1, HTML_IMAGE_RATIO_06=0.001, HTML_MESSAGE=0.001, KAM_NUMSUBJECT=0.5, KAM_REALLYHUGEIMGSRC=1.1, KAM_TRACKIMAGE=0.2, LR_MW_DMARC_PASS=-0.001, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, MIME_HTML_ONLY=0.1, MIME_HTML_ONLY_MULTI=0.001, MPART_ALT_DIFF=0.724, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_AU=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=26.549, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=no autolearn_force=no
Jun 2 22:55:23 (00801-11) spam-tag, <otdamhm@axertione.click> -> <transport@maktronik.com.pl>, Yes, score=9.447 tagged_above=-9999 required=6.5 tests=[AC_BR_BONANZA=1, BOTNET_SOHO=0.001, DATE_IN_PAST_03_06=1.076, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, HTML_FONT_LOW_CONTRAST=0.001, HTML_IMAGE_ONLY_20=0.7, HTML_MESSAGE=0.001, KAM_OTHER_BAD_TLD=0.75, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_RU=0.5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=-0.070, T_TVD_MIME_EPI=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 23:38:32 (29323-13) spam-tag, <irvutwz@axertione.click> -> <j.szmiel@maktronik.com.pl>, Yes, score=8.582 tagged_above=-9999 required=6.5 tests=[AC_BR_BONANZA=1, BOTNET_SOHO=0.001, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, HTML_FONT_LOW_CONTRAST=0.001, HTML_IMAGE_ONLY_20=0.7, HTML_MESSAGE=0.001, KAM_OTHER_BAD_TLD=0.75, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_RU=0.5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=0.141, T_TVD_MIME_EPI=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Jun 2 23:51:06 (01978-03) spam-tag, <ozxektl@axertione.click> -> <r.kozlakowski@maktronik.com.pl>, Yes, score=10.719 tagged_above=-9999 required=6.5 tests=[AC_BR_BONANZA=1, BOTNET_SOHO=0.001, DATE_IN_PAST_03_06=1.076, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.001, DMARC_MISSING=0.001, FROM_SUSPICIOUS_NTLD=0.5, FROM_SUSPICIOUS_NTLD_FP=1.999, HTML_FONT_LOW_CONTRAST=0.001, HTML_IMAGE_ONLY_20=0.7, HTML_MESSAGE=0.001, KAM_OTHER_BAD_TLD=0.75, LR_MW_SPF_OK=-0.01, LR_MW_TLSCERT_FAIL=0.001, P0F_LINUX=-0.1, PYZOR_CHECK=1.985, RCVD_IN_DNSWL_BLOCKED=0.001, RELAYCOUNTRY_NL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TXREP=1.696, T_TVD_MIME_EPI=0.01, URIBL_AB_SURBL=0.001, URIBL_BLOCKED=0.001, URIBL_OB_SURBL=0.001, URIBL_SC_SURBL=0.001, URIBL_WS_SURBL=0.001] autolearn=disabled