2026-07-28 05:50:00 dovecot_login authenticator failed for H=([49.124.151.82]) [187.8.3.230]:51571: 535 Incorrect authentication data (set_id=rece@regente.com.ar) 2026-07-28 05:50:01 SMTP connection from ([49.124.151.82]) [187.8.3.230]:51571 lost D=9s 2026-07-28 05:50:02 dovecot_login authenticator failed for H=(187-8-89-114.customer.tdatabrasil.net.br) [186.238.178.6]:56475: 535 Incorrect authentication data (set_id=contact@lamayor.com.uy) 2026-07-28 05:50:03 SMTP connection from (187-8-89-114.customer.tdatabrasil.net.br) [186.238.178.6]:56475 lost D=11s 2026-07-28 05:50:05 dovecot_login authenticator failed for H=([174.75.211.198]) [31.173.2.33]:39928: 535 Incorrect authentication data (set_id=ttardireservas@regente.com.ar) 2026-07-28 05:50:06 SMTP connection from ([174.75.211.198]) [31.173.2.33]:39928 lost D=7s 2026-07-28 05:50:07 SMTP connection from [200.159.0.218]:34662 (TCP/IP connection count = 9) 2026-07-28 05:50:07 no host name found for IP address 200.159.0.218 2026-07-28 05:50:13 SMTP connection from [89.23.107.236]:40093 (TCP/IP connection count = 10) 2026-07-28 05:50:15 1wodVt-0000000GtVQ-09Xs H=o166.p28.mailjet.com [185.189.239.166]:59505 Warning: "SpamAssassin as plastico detected message as NOT spam (0.6)" 2026-07-28 05:50:15 1wodVt-0000000GtVQ-09Xs <= 6134f7e4.EAAACQhtM7gAAAAAAAAAALUnhU0AARrAeA8AAAAAAAgApABqaG0a@a524452.bnc3.mailjet.com H=o166.p28.mailjet.com [185.189.239.166]:59505 P=esmtps X=TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128 S=94659 id=6134f7e4.EAAACQhtM7gAAAAAAAAAALUnhU0AARrAeA8AAAAAAAgApABqaG0a@mailjet.com T="VERISURE SERVICIOS DE CONTROL. Control de entradas y salidas." for VENTAS@PLASTICOSCENTURION.COM.AR 2026-07-28 05:50:15 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodVt-0000000GtVQ-09Xs 2026-07-28 05:50:15 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:56011 lost D=20s 2026-07-28 05:50:15 SMTP connection from [217.154.235.104]:58046 (TCP/IP connection count = 10) 2026-07-28 05:50:15 1wodVt-0000000GtVQ-09Xs => ventas R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 WDHeC0dtaGqObj0AcoHInw Saved" 2026-07-28 05:50:15 1wodVt-0000000GtVQ-09Xs -> jma (VENTAS@PLASTICOSCENTURION.COM.AR) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 WDHeC0dtaGqObj0AcoHInw:R2 Saved" 2026-07-28 05:50:15 1wodVt-0000000GtVQ-09Xs Completed 2026-07-28 05:50:16 dovecot_login authenticator failed for H=([122.185.68.89]) [200.159.0.218]:34662: 535 Incorrect authentication data (set_id=chloe@lomasdelacarolina.com.ar) 2026-07-28 05:50:16 1wodVq-0000000GtTy-2zfY H=([114.130.180.144]) [114.130.180.144]:36472 Warning: "SpamAssassin as cuartop detected message as spam (19.2)" 2026-07-28 05:50:16 1wodVq-0000000GtTy-2zfY H=([114.130.180.144]) [114.130.180.144]:36472 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:50:17 SMTP connection from ([114.130.180.144]) [114.130.180.144]:36472 lost D=48s 2026-07-28 05:50:17 SMTP connection from ([122.185.68.89]) [200.159.0.218]:34662 lost D=9s 2026-07-28 05:50:23 SMTP connection from [217.66.150.233]:36460 (TCP/IP connection count = 9) 2026-07-28 05:50:24 SMTP connection from [216.229.78.219]:33708 (TCP/IP connection count = 10) 2026-07-28 05:50:24 SMTP connection from [87.253.236.136]:38599 (TCP/IP connection count = 11) 2026-07-28 05:50:24 SMTP connection from [45.177.210.193]:51466 (TCP/IP connection count = 12) 2026-07-28 05:50:27 1wodW1-0000000GtZT-2qDZ H=([0.0.0.0]) [113.99.17.191]:58622 Warning: "SpamAssassin as anam1e7 detected message as spam (13.4)" 2026-07-28 05:50:27 1wodW1-0000000GtZT-2qDZ H=([0.0.0.0]) [113.99.17.191]:58622 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:50:27 SMTP connection from ([0.0.0.0]) [113.99.17.191]:58622 lost D=49s 2026-07-28 05:50:27 SMTP connection from [91.218.163.211]:49379 (TCP/IP connection count = 12) 2026-07-28 05:50:28 no host name found for IP address 91.218.163.211 2026-07-28 05:50:28 H=([46.73.112.236]) [46.73.112.236]:54248 F= rejected RCPT : No Such User Here" 2026-07-28 05:50:28 unexpected disconnection while reading SMTP command from ([46.73.112.236]) [46.73.112.236]:54248 D=40s 2026-07-28 05:50:30 dovecot_login authenticator failed for H=216-229-78-219.fidnet.com ([46.163.189.191]) [216.229.78.219]:33708: 535 Incorrect authentication data (set_id=rece) 2026-07-28 05:50:30 SMTP connection from [167.250.5.78]:49888 (TCP/IP connection count = 12) 2026-07-28 05:50:31 SMTP connection from 216-229-78-219.fidnet.com ([46.163.189.191]) [216.229.78.219]:33708 lost D=6s 2026-07-28 05:50:31 SMTP connection from [152.170.189.6]:63846 (TCP/IP connection count = 12) 2026-07-28 05:50:32 1wodWC-0000000GuAl-3qFS <= admin@bestmeds4you.com H=nb78.servidoraweb.net [167.250.5.78]:49888 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=5045 id=921315.921315@88872.com T="***SPAM*** Best Meds For You!" for pzepeda@gtinternational.com.ar 2026-07-28 05:50:32 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodWC-0000000GuAl-3qFS 2026-07-28 05:50:32 1wodWC-0000000GuAl-3qFS => pzepeda+spam ("pzepeda+spam"@gtinternational.com.ar) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 2HlxD1htaGqObj0AcoHInw Saved" 2026-07-28 05:50:32 1wodWC-0000000GuAl-3qFS Completed 2026-07-28 05:50:32 SMTP connection from nb78.servidoraweb.net [167.250.5.78]:49888 D=1s closed by QUIT 2026-07-28 05:50:33 dovecot_login authenticator failed for H=([193.114.134.130]) [45.177.210.193]:51466: 535 Incorrect authentication data (set_id=intendencia@tejasdelsur3.com) 2026-07-28 05:50:34 SMTP connection from ([193.114.134.130]) [45.177.210.193]:51466 lost D=9s 2026-07-28 05:50:35 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:58046 lost D=20s 2026-07-28 05:50:35 SMTP connection from [217.154.235.104]:60060 (TCP/IP connection count = 10) 2026-07-28 05:50:35 SMTP connection from (MarcosPC) [152.170.189.6]:63846 D=3s closed by QUIT 2026-07-28 05:50:40 SMTP connection from [34.146.217.105]:36098 (TCP/IP connection count = 10) 2026-07-28 05:50:43 SMTP connection from [190.104.254.91]:56880 (TCP/IP connection count = 11) 2026-07-28 05:50:44 1wodWJ-0000000GtmO-1Ee4 H=([185.44.84.88]) [185.44.84.88]:29660 Warning: "SpamAssassin as afservic detected message as spam (15.8)" 2026-07-28 05:50:44 1wodWJ-0000000GtmO-1Ee4 H=([185.44.84.88]) [185.44.84.88]:29660 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:50:44 SMTP connection from ([185.44.84.88]) [185.44.84.88]:29660 lost D=47s 2026-07-28 05:50:48 cwd=/home10/ulamayor/public_html 3 args: /usr/sbin/sendmail -t -i 2026-07-28 05:50:48 SMTP connection from [111.70.29.148]:36040 (TCP/IP connection count = 11) 2026-07-28 05:50:48 1wodWS-0000000GuLY-3NMf <= ulamayor@medusa.servidoraweb.net U=ulamayor P=local S=960 T="Website Form" for lamayorcine@lamayor.com.uy 2026-07-28 05:50:48 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodWS-0000000GuLY-3NMf 2026-07-28 05:50:48 1wodWS-0000000GuLY-3NMf Sender identification U=ulamayor D=lamayor.com.uy S=ulamayor 2026-07-28 05:50:48 1wodWS-0000000GuLY-3NMf SMTP connection outbound 1785228648 1wodWS-0000000GuLY-3NMf lamayor.com.uy lamayorcine@lamayor.com.uy 2026-07-28 05:50:49 dovecot_login authenticator failed for H=105.217.146.34.bc.googleusercontent.com (149.216.209.222.broad.cd.sc.dynamic.163data.com.cn) [34.146.217.105]:36098: 535 Incorrect authentication data (set_id=annie.baricco@regente.com) 2026-07-28 05:50:49 1wodWS-0000000GuLY-3NMf => lamayorcine@lamayor.com.uy R=dkim_lookuphost T=dkim_remote_smtp H=aspmx.l.google.com [74.125.197.26] X=TLS1.2:ECDHE-ECDSA-AES128-GCM-SHA256:128 CV=yes C="250 2.0.0 OK 1785228649 a1e0cc1a2514c-97774f9db92si3989891241.233 - gsmtp" 2026-07-28 05:50:49 1wodWS-0000000GuLY-3NMf Completed 2026-07-28 05:50:50 SMTP connection from 105.217.146.34.bc.googleusercontent.com (149.216.209.222.broad.cd.sc.dynamic.163data.com.cn) [34.146.217.105]:36098 lost D=9s 2026-07-28 05:50:50 TLS error on connection from [190.104.254.91]:56880 SSL_accept: TCP connection closed by peer 2026-07-28 05:50:50 SMTP connection from [170.247.3.12]:42422 (TCP/IP connection count = 10) 2026-07-28 05:50:50 no host name found for IP address 170.247.3.12 2026-07-28 05:50:50 cwd=/home10/ulamayor/public_html 3 args: /usr/sbin/sendmail -t -i 2026-07-28 05:50:50 1wodWU-0000000GuMi-36rw <= ulamayor@medusa.servidoraweb.net U=ulamayor P=local S=986 T="Website Form" for lamayorcine@lamayor.com.uy 2026-07-28 05:50:51 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodWU-0000000GuMi-36rw 2026-07-28 05:50:51 1wodWU-0000000GuMi-36rw Sender identification U=ulamayor D=lamayor.com.uy S=ulamayor 2026-07-28 05:50:51 1wodWU-0000000GuMi-36rw SMTP connection outbound 1785228651 1wodWU-0000000GuMi-36rw lamayor.com.uy lamayorcine@lamayor.com.uy 2026-07-28 05:50:51 1wodWU-0000000GuMi-36rw => lamayorcine@lamayor.com.uy R=dkim_lookuphost T=dkim_remote_smtp H=aspmx.l.google.com [74.125.197.26] X=TLS1.2:ECDHE-ECDSA-AES128-GCM-SHA256:128 CV=yes C="250 2.0.0 OK 1785228651 ada2fe7eead31-75037b43ac6si3569825137.128 - gsmtp" 2026-07-28 05:50:51 1wodWU-0000000GuMi-36rw Completed 2026-07-28 05:50:53 H=(5kknayag.cc) [89.23.107.236]:40093 Warning: "Increment Connection Ratelimit - (5kknayag.cc) [89.23.107.236]:40093 because of RBL match" 2026-07-28 05:50:53 H=(5kknayag.cc) [89.23.107.236]:40093 F= rejected RCPT : "JunkMail rejected - (5kknayag.cc) [89.23.107.236]:40093 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?89.23.107.236" 2026-07-28 05:50:53 SMTP connection from (5kknayag.cc) [89.23.107.236]:40093 D=40s closed by DROP in ACL 2026-07-28 05:50:55 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:60060 lost D=20s 2026-07-28 05:50:55 SMTP connection from [217.154.235.104]:62084 (TCP/IP connection count = 9) 2026-07-28 05:50:58 dovecot_login authenticator failed for H=111-70-29-148.emome-ip.hinet.net ([117.198.99.18]) [111.70.29.148]:36040: 535 Incorrect authentication data (set_id=sbasanez@basanezteam1.com) 2026-07-28 05:50:58 dovecot_login authenticator failed for H=(syn-035-130-111-098.biz.spectrum.com) [170.247.3.12]:42422: 535 Incorrect authentication data (set_id=intendencia) 2026-07-28 05:50:58 SMTP connection from [45.163.86.141]:39519 (TCP/IP connection count = 10) 2026-07-28 05:50:58 no host name found for IP address 45.163.86.141 2026-07-28 05:50:59 SMTP connection from (syn-035-130-111-098.biz.spectrum.com) [170.247.3.12]:42422 lost D=8s 2026-07-28 05:50:59 SMTP connection from 111-70-29-148.emome-ip.hinet.net ([117.198.99.18]) [111.70.29.148]:36040 lost D=10s 2026-07-28 05:51:06 dovecot_login authenticator failed for H=([183.171.61.221]) [45.163.86.141]:39519: 535 Incorrect authentication data (set_id=annie.baricco) 2026-07-28 05:51:07 SMTP connection from ([183.171.61.221]) [45.163.86.141]:39519 lost D=8s 2026-07-28 05:51:08 H=([91.218.163.211]) [91.218.163.211]:49379 F= rejected RCPT : No Such User Here" 2026-07-28 05:51:08 unexpected disconnection while reading SMTP command from ([91.218.163.211]) [91.218.163.211]:49379 D=41s 2026-07-28 05:51:11 1wodWk-0000000Gu70-2VZ4 H=o136.p11.mailjet.com [87.253.236.136]:38599 Warning: "SpamAssassin as plastico detected message as NOT spam (2.1)" 2026-07-28 05:51:11 1wodWk-0000000Gu70-2VZ4 <= a2d55ffb.BAAACQhjKWIAAAAAAAAAALUnhU0AARrAeA8AAAAAAAgApABqaG1Q@a524452.bnc3.mailjet.com H=o136.p11.mailjet.com [87.253.236.136]:38599 P=esmtps X=TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128 S=94623 id=a2d55ffb.BAAACQhjKWIAAAAAAAAAALUnhU0AARrAeA8AAAAAAAgApABqaG1Q@mailjet.com T="VERISURE SERVICIOS DE CONTROL. Control de entradas y salidas." for VENTAS@PLASTICOSCENTURION.COM.AR 2026-07-28 05:51:11 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodWk-0000000Gu70-2VZ4 2026-07-28 05:51:11 1wodWk-0000000Gu70-2VZ4 => ventas R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 UHVYMn9taGqObj0AcoHInw Saved" 2026-07-28 05:51:11 1wodWk-0000000Gu70-2VZ4 -> jma (VENTAS@PLASTICOSCENTURION.COM.AR) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 UHVYMn9taGqObj0AcoHInw:R2 Saved" 2026-07-28 05:51:11 1wodWk-0000000Gu70-2VZ4 Completed 2026-07-28 05:51:14 SMTP connection from [223.210.27.53]:10630 (TCP/IP connection count = 7) 2026-07-28 05:51:14 no host name found for IP address 223.210.27.53 2026-07-28 05:51:14 SMTP connection from [68.7.114.69]:42039 (TCP/IP connection count = 8) 2026-07-28 05:51:15 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:62084 lost D=20s 2026-07-28 05:51:15 SMTP connection from [217.154.235.104]:64103 (TCP/IP connection count = 8) 2026-07-28 05:51:24 dovecot_login authenticator failed for H=([50.217.40.11]) [223.210.27.53]:10630: 535 Incorrect authentication data (set_id=denck@tecnocomp.com.ar) 2026-07-28 05:51:24 dovecot_login authenticator failed for H=ip68-7-114-69.sd.sd.cox.net (217-29-30-135.saimanet.kg) [68.7.114.69]:42039: 535 Incorrect authentication data (set_id=sbasanez) 2026-07-28 05:51:25 SMTP connection from ip68-7-114-69.sd.sd.cox.net (217-29-30-135.saimanet.kg) [68.7.114.69]:42039 lost D=10s 2026-07-28 05:51:26 SMTP connection from ([50.217.40.11]) [223.210.27.53]:10630 lost D=11s 2026-07-28 05:51:27 SMTP connection from [123.144.84.135]:17954 (TCP/IP connection count = 7) 2026-07-28 05:51:27 no host name found for IP address 123.144.84.135 2026-07-28 05:51:32 cwd=/home10/ulamayor/public_html 3 args: /usr/sbin/sendmail -t -i 2026-07-28 05:51:33 1wodXA-0000000Guo7-2yf6 <= ulamayor@medusa.servidoraweb.net U=ulamayor P=local S=994 T="Website Form" for lamayorcine@lamayor.com.uy 2026-07-28 05:51:33 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodXA-0000000Guo7-2yf6 2026-07-28 05:51:33 1wodXA-0000000Guo7-2yf6 Sender identification U=ulamayor D=lamayor.com.uy S=ulamayor 2026-07-28 05:51:33 1wodXA-0000000Guo7-2yf6 SMTP connection outbound 1785228693 1wodXA-0000000Guo7-2yf6 lamayor.com.uy lamayorcine@lamayor.com.uy 2026-07-28 05:51:34 1wodXA-0000000Guo7-2yf6 => lamayorcine@lamayor.com.uy R=dkim_lookuphost T=dkim_remote_smtp H=aspmx.l.google.com [64.233.178.27] X=TLS1.2:ECDHE-ECDSA-AES128-GCM-SHA256:128 CV=yes C="250 2.0.0 OK 1785228694 af79cd13be357-932de76421asi817887285a.527 - gsmtp" 2026-07-28 05:51:34 1wodXA-0000000Guo7-2yf6 Completed 2026-07-28 05:51:35 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:64103 lost D=20s 2026-07-28 05:51:35 SMTP connection from [217.154.235.104]:49820 (TCP/IP connection count = 7) 2026-07-28 05:51:40 SMTP command timeout on connection from [78.37.28.2]:52506 D=3m5s 2026-07-28 05:51:41 SMTP connection from [152.170.189.6]:63849 (TCP/IP connection count = 7) 2026-07-28 05:51:44 SMTP connection from [109.226.27.227]:48098 (TCP/IP connection count = 8) 2026-07-28 05:51:45 SMTP connection from (MarcosPC) [152.170.189.6]:63849 D=3s closed by QUIT 2026-07-28 05:51:46 SMTP connection from [112.232.252.106]:40320 (TCP/IP connection count = 8) 2026-07-28 05:51:47 dovecot_login authenticator failed for H=(sades) [109.226.27.227]:48098: 535 Incorrect authentication data (set_id=hr@mutualsoft.com.ar) 2026-07-28 05:51:48 SMTP connection from (sades) [109.226.27.227]:48098 D=3s closed by QUIT 2026-07-28 05:51:54 SMTP connection from [217.29.20.226]:63809 (TCP/IP connection count = 8) 2026-07-28 05:51:54 SMTP connection from o166.p28.mailjet.com [185.189.239.166]:59505 D=2m23s closed by QUIT 2026-07-28 05:51:55 TLS error on connection from [112.232.252.106]:40320 SSL_accept: TCP connection closed by peer 2026-07-28 05:51:55 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:49820 lost D=20s 2026-07-28 05:51:55 SMTP connection from [217.154.235.104]:51883 (TCP/IP connection count = 6) 2026-07-28 05:52:00 SMTP command timeout on connection from syn-035-130-111-098.biz.spectrum.com (industrianaval.fla.gvt.net.br) [35.130.111.98]:38152 D=2m51s 2026-07-28 05:52:01 SMTP connection from [112.243.140.227]:55337 (TCP/IP connection count = 6) 2026-07-28 05:52:01 SMTP connection from [138.118.215.192]:52747 (TCP/IP connection count = 7) 2026-07-28 05:52:07 SMTP connection from [200.1.116.227]:38310 (TCP/IP connection count = 8) 2026-07-28 05:52:07 SMTP connection from [200.1.116.227]:38324 (TCP/IP connection count = 9) 2026-07-28 05:52:08 SMTP connection from [200.1.116.227]:38334 (TCP/IP connection count = 10) 2026-07-28 05:52:08 1wodXl-0000000GvBo-1aGj <= eventanilla@arca.gob.ar H=mail3.arca.gob.ar [200.1.116.227]:38324 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=2291 id=844564393.666691785228721854.JavaMail.appserv@rembrandt T="ARCA e-Ventanilla: nueva comunicaci\363n del sistema \"Sistema de Cuentas Tributarias - Recordatorio por" for fgremes@bkv.com.ar 2026-07-28 05:52:08 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodXl-0000000GvBo-1aGj 2026-07-28 05:52:08 1wodXl-0000000GvBn-1dR8 <= eventanilla@arca.gob.ar H=mail3.arca.gob.ar [200.1.116.227]:38310 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=2287 id=1301063395.666661785228721850.JavaMail.appserv@rembrandt T="ARCA e-Ventanilla: nueva comunicaci\363n del sistema \"Sistema de Cuentas Tributarias - Recordatorio por" for jpeque@bkv.com.ar 2026-07-28 05:52:08 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodXl-0000000GvBn-1dR8 2026-07-28 05:52:08 1wodXl-0000000GvBo-1aGj => fgremes R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 cNmiLLhtaGqObj0AcoHInw Saved" 2026-07-28 05:52:08 1wodXl-0000000GvBn-1dR8 => jpeque R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 kDzYLbhtaGqObj0AcoHInw Saved" 2026-07-28 05:52:08 1wodXl-0000000GvBn-1dR8 Completed 2026-07-28 05:52:08 SMTP connection from mail3.arca.gob.ar [200.1.116.227]:38324 D=1s closed by QUIT 2026-07-28 05:52:08 1wodXl-0000000GvBo-1aGj => |/usr/local/cpanel/bin/autorespond fgremes@bkv.com.ar /home16/bkvcomar/.autorespond (fgremes@bkv.com.ar) R=virtual_aliases_nostar T=cagefs_virtual_address_pipe 2026-07-28 05:52:08 1wodXl-0000000GvBo-1aGj Completed 2026-07-28 05:52:08 SMTP connection from mail3.arca.gob.ar [200.1.116.227]:38310 D=1s closed by QUIT 2026-07-28 05:52:09 1wodXm-0000000GvCc-1Kes <= eventanilla@arca.gob.ar H=mail3.arca.gob.ar [200.1.116.227]:38334 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=2361 id=1092622239.666951785228722072.JavaMail.appserv@rembrandt T="ARCA e-Ventanilla: nueva comunicaci\363n del sistema \"Sistema de Cuentas Tributarias - Recordatorio por" for administracion@estudionowo.com.ar 2026-07-28 05:52:09 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodXm-0000000GvCc-1Kes 2026-07-28 05:52:09 SMTP connection from [84.54.72.147]:61075 (TCP/IP connection count = 9) 2026-07-28 05:52:09 SMTP connection from mail3.arca.gob.ar [200.1.116.227]:38334 D=1s closed by QUIT 2026-07-28 05:52:09 1wodXm-0000000GvCc-1Kes => administracion R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 kC5GI7ltaGqObj0AcoHInw Saved" 2026-07-28 05:52:09 1wodXm-0000000GvCc-1Kes => |/usr/local/cpanel/bin/autorespond administracion@estudionowo.com.ar /home10/estudion/.autorespond (administracion@estudionowo.com.ar) R=virtual_aliases_nostar T=cagefs_virtual_address_pipe 2026-07-28 05:52:09 1wodXm-0000000GvCc-1Kes Completed 2026-07-28 05:52:11 dovecot_login authenticator failed for H=([49.124.150.250]) [138.118.215.192]:52747: 535 Incorrect authentication data (set_id=lhennawi@iczsa.com.ar) 2026-07-28 05:52:12 SMTP connection from ([49.124.150.250]) [138.118.215.192]:52747 lost D=11s 2026-07-28 05:52:14 SMTP connection from [172.233.115.32]:58114 (TCP/IP connection count = 8) 2026-07-28 05:52:15 SMTP connection from [127.0.0.1]:47976 (TCP/IP connection count = 9) 2026-07-28 05:52:15 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:51883 lost D=20s 2026-07-28 05:52:16 SMTP connection from [217.154.235.104]:54055 (TCP/IP connection count = 9) 2026-07-28 05:52:16 1wodXm-0000000Gukh-0Xi9 H=([0.0.0.0]) [123.144.84.135]:17954 Warning: "SpamAssassin as gastoncr detected message as spam (15.2)" 2026-07-28 05:52:16 1wodXm-0000000Gukh-0Xi9 H=([0.0.0.0]) [123.144.84.135]:17954 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:52:16 SMTP connection from ([0.0.0.0]) [123.144.84.135]:17954 lost D=49s 2026-07-28 05:52:17 SMTP connection from [127.0.0.1]:47976 D=2s closed by QUIT 2026-07-28 05:52:17 SMTP connection from [127.0.0.1]:59920 (TCP/IP connection count = 8) 2026-07-28 05:52:17 SMTP connection from (localhost) [127.0.0.1]:59920 D=0s closed by QUIT 2026-07-28 05:52:26 SMTP connection from [85.193.114.151]:36255 (TCP/IP connection count = 8) 2026-07-28 05:52:26 no host name found for IP address 85.193.114.151 2026-07-28 05:52:28 SMTP connection from [167.250.5.78]:56794 (TCP/IP connection count = 9) 2026-07-28 05:52:29 SMTP connection from [177.7.30.146]:60686 (TCP/IP connection count = 10) 2026-07-28 05:52:29 no host name found for IP address 177.7.30.146 2026-07-28 05:52:29 SMTP connection from [93.241.232.14]:37558 (TCP/IP connection count = 11) 2026-07-28 05:52:29 1wodY6-0000000GvSK-1FYc <= admin@bestmeds4you.com H=nb78.servidoraweb.net [167.250.5.78]:56794 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=5046 id=481654.481654@48890.com T="***SPAM*** Best Meds For You!" for pzepeda@gtinternational.com.ar 2026-07-28 05:52:29 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodY6-0000000GvSK-1FYc 2026-07-28 05:52:30 SMTP connection from nb78.servidoraweb.net [167.250.5.78]:56794 D=1s closed by QUIT 2026-07-28 05:52:30 1wodY6-0000000GvSK-1FYc => pzepeda+spam ("pzepeda+spam"@gtinternational.com.ar) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 mF8SN81taGqObj0AcoHInw Saved" 2026-07-28 05:52:30 1wodY6-0000000GvSK-1FYc Completed 2026-07-28 05:52:31 SMTP connection from [84.54.71.55]:21867 (TCP/IP connection count = 11) 2026-07-28 05:52:31 no host name found for IP address 84.54.71.55 2026-07-28 05:52:31 SMTP connection from [2.76.8.29]:10024 (TCP/IP connection count = 12) 2026-07-28 05:52:36 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:54055 lost D=20s 2026-07-28 05:52:36 SMTP connection from [217.154.235.104]:56221 (TCP/IP connection count = 12) 2026-07-28 05:52:38 dovecot_login authenticator failed for H=p5df1e80e.dip0.t-ipconnect.de ([220.93.167.144]) [93.241.232.14]:37558: 535 Incorrect authentication data (set_id=intendencia@ospiacapital.org.ar) 2026-07-28 05:52:39 SMTP connection from p5df1e80e.dip0.t-ipconnect.de ([220.93.167.144]) [93.241.232.14]:37558 lost D=9s 2026-07-28 05:52:39 1wodYC-0000000Gv20-0r00 H=([217.29.20.226]) [217.29.20.226]:63809 Warning: "SpamAssassin as brcr detected message as spam (21.4)" 2026-07-28 05:52:39 1wodYC-0000000Gv20-0r00 H=([217.29.20.226]) [217.29.20.226]:63809 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:52:39 SMTP connection from ([217.29.20.226]) [217.29.20.226]:63809 lost D=44s 2026-07-28 05:52:41 dovecot_login authenticator failed for H=([125.130.102.172]) [177.7.30.146]:60686: 535 Incorrect authentication data (set_id=cecian@caepsa.com) 2026-07-28 05:52:42 SMTP connection from ([125.130.102.172]) [177.7.30.146]:60686 lost D=13s 2026-07-28 05:52:43 SMTP connection from [167.250.5.78]:57134 (TCP/IP connection count = 10) 2026-07-28 05:52:44 SMTP connection from [84.54.70.117]:20514 (TCP/IP connection count = 11) 2026-07-28 05:52:45 1wodYL-0000000GvdY-1tLs <= admin@bestmeds4you.com H=nb78.servidoraweb.net [167.250.5.78]:57134 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=5046 id=029889.029889@62256.com T="***SPAM*** Best Meds For You!" for pzepeda@gtinternational.com.ar 2026-07-28 05:52:45 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodYL-0000000GvdY-1tLs 2026-07-28 05:52:45 SMTP connection from [194.180.48.81]:52018 (TCP/IP connection count = 12) 2026-07-28 05:52:45 SMTP connection from o136.p11.mailjet.com [87.253.236.136]:38599 D=2m20s closed by QUIT 2026-07-28 05:52:45 no host name found for IP address 194.180.48.81 2026-07-28 05:52:45 SMTP connection from [194.180.48.81]:52018 lost (error: Connection reset by peer) D=0s 2026-07-28 05:52:45 1wodYL-0000000GvdY-1tLs => pzepeda+spam ("pzepeda+spam"@gtinternational.com.ar) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 QI+fE91taGqObj0AcoHInw Saved" 2026-07-28 05:52:45 1wodYL-0000000GvdY-1tLs Completed 2026-07-28 05:52:45 SMTP connection from nb78.servidoraweb.net [167.250.5.78]:57134 D=2s closed by QUIT 2026-07-28 05:52:49 SMTP connection from [84.54.70.86]:63826 (TCP/IP connection count = 10) 2026-07-28 05:52:49 SMTP connection from [95.87.248.223]:39498 (TCP/IP connection count = 11) 2026-07-28 05:52:50 H=([84.54.72.147]) [84.54.72.147]:61075 Warning: "Increment Connection Ratelimit - ([84.54.72.147]) [84.54.72.147]:61075 because of RBL match" 2026-07-28 05:52:50 H=([84.54.72.147]) [84.54.72.147]:61075 F= rejected RCPT : "JunkMail rejected - ([84.54.72.147]) [84.54.72.147]:61075 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?84.54.72.147" 2026-07-28 05:52:50 SMTP connection from ([84.54.72.147]) [84.54.72.147]:61075 D=40s closed by DROP in ACL 2026-07-28 05:52:50 SMTP connection from [152.170.189.6]:63851 (TCP/IP connection count = 11) 2026-07-28 05:52:54 H=out2.jardanimkt.com [172.233.115.32]:58114 Warning: "Increment Connection Ratelimit - out2.jardanimkt.com [172.233.115.32]:58114 because of RBL match" 2026-07-28 05:52:54 H=out2.jardanimkt.com [172.233.115.32]:58114 F= rejected RCPT : "JunkMail rejected - out2.jardanimkt.com [172.233.115.32]:58114 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?172.233.115.32" 2026-07-28 05:52:54 SMTP connection from out2.jardanimkt.com [172.233.115.32]:58114 D=40s closed by DROP in ACL 2026-07-28 05:52:54 SMTP connection from (MarcosPC) [152.170.189.6]:63851 D=3s closed by QUIT 2026-07-28 05:52:56 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:56221 lost D=20s 2026-07-28 05:52:56 SMTP connection from [217.154.235.104]:58457 (TCP/IP connection count = 9) 2026-07-28 05:52:56 SMTP connection from [109.162.200.235]:18442 (TCP/IP connection count = 10) 2026-07-28 05:52:56 no host name found for IP address 109.162.200.235 2026-07-28 05:52:56 dovecot_login authenticator failed for H=95-87-248-223.ip.btc-net.bg [95.87.248.223]:39498: 535 Incorrect authentication data (set_id=contact@tecmec.ar) 2026-07-28 05:52:57 SMTP connection from 95-87-248-223.ip.btc-net.bg [95.87.248.223]:39498 lost D=7s 2026-07-28 05:52:58 SMTP connection from [96.1.40.151]:51223 (TCP/IP connection count = 10) 2026-07-28 05:52:58 1wodYR-0000000Gv6e-2ZvL H=([0.0.0.0]) [112.243.140.227]:55337 Warning: "SpamAssassin as lageneral detected message as spam (15.2)" 2026-07-28 05:52:58 1wodYR-0000000Gv6e-2ZvL H=([0.0.0.0]) [112.243.140.227]:55337 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:52:58 SMTP connection from ([0.0.0.0]) [112.243.140.227]:55337 lost D=57s 2026-07-28 05:53:00 dovecot_login authenticator failed for H=(alliatoc) [109.162.200.235]:18442: 535 Incorrect authentication data (set_id=admin@brcr.com.ar) 2026-07-28 05:53:00 SMTP connection from (alliatoc) [109.162.200.235]:18442 lost D=3s 2026-07-28 05:53:06 dovecot_login authenticator failed for H=96-1-40-151-staticipeast.wireless.telus.com ([78.37.9.103]) [96.1.40.151]:51223: 535 Incorrect authentication data (set_id=intendencia) 2026-07-28 05:53:06 H=([85.193.114.151]) [85.193.114.151]:36255 Warning: "Increment Connection Ratelimit - ([85.193.114.151]) [85.193.114.151]:36255 because of RBL match" 2026-07-28 05:53:06 H=([85.193.114.151]) [85.193.114.151]:36255 F= rejected RCPT : "JunkMail rejected - ([85.193.114.151]) [85.193.114.151]:36255 is in an RBL: " 2026-07-28 05:53:06 SMTP connection from ([85.193.114.151]) [85.193.114.151]:36255 D=40s closed by DROP in ACL 2026-07-28 05:53:07 SMTP connection from [2.55.100.104]:49144 (TCP/IP connection count = 8) 2026-07-28 05:53:07 SMTP connection from 96-1-40-151-staticipeast.wireless.telus.com ([78.37.9.103]) [96.1.40.151]:51223 lost D=9s 2026-07-28 05:53:08 SMTP connection from [2.135.36.187]:57602 (TCP/IP connection count = 8) 2026-07-28 05:53:08 SMTP connection from [213.230.87.23]:9732 (TCP/IP connection count = 9) 2026-07-28 05:53:09 SMTP connection from [206.62.136.65]:55705 (TCP/IP connection count = 10) 2026-07-28 05:53:10 SMTP command timeout on TLS connection from host-233-150-66-217.spbmts.ru [217.66.150.233]:36460 D=2m46s 2026-07-28 05:53:10 SMTP connection from [167.250.4.5]:60368 (TCP/IP connection count = 10) 2026-07-28 05:53:10 SMTP connection from na5.servidoraweb.net (nagios2) [167.250.4.5]:60368 D=0s closed by QUIT 2026-07-28 05:53:11 SMTP connection from [45.164.115.86]:37350 (TCP/IP connection count = 10) 2026-07-28 05:53:11 no host name found for IP address 45.164.115.86 2026-07-28 05:53:12 TLS error on connection from [2.55.100.104]:49144 SSL_accept: TCP connection closed by peer 2026-07-28 05:53:12 H=([84.54.71.55]) [84.54.71.55]:21867 Warning: "Increment Connection Ratelimit - ([84.54.71.55]) [84.54.71.55]:21867 because of RBL match" 2026-07-28 05:53:12 H=([84.54.71.55]) [84.54.71.55]:21867 F= rejected RCPT : "JunkMail rejected - ([84.54.71.55]) [84.54.71.55]:21867 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?84.54.71.55" 2026-07-28 05:53:12 SMTP connection from ([84.54.71.55]) [84.54.71.55]:21867 D=40s closed by DROP in ACL 2026-07-28 05:53:12 H=([2.76.8.29]) [2.76.8.29]:10024 F= rejected RCPT : No Such User Here" 2026-07-28 05:53:13 unexpected disconnection while reading SMTP command from ([2.76.8.29]) [2.76.8.29]:10024 D=41s 2026-07-28 05:53:15 SMTP connection from ([202.165.29.196]) [206.62.136.65]:55705 lost D=5s 2026-07-28 05:53:16 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:58457 lost D=20s 2026-07-28 05:53:16 SMTP connection from [217.154.235.104]:60626 (TCP/IP connection count = 6) 2026-07-28 05:53:17 SMTP connection from [167.250.5.78]:43926 (TCP/IP connection count = 7) 2026-07-28 05:53:18 SMTP connection from [107.85.96.209]:11821 (TCP/IP connection count = 8) 2026-07-28 05:53:18 no host name found for IP address 107.85.96.209 2026-07-28 05:53:18 1wodYt-0000000Gw2a-27mH <= admin@bestmeds4you.com H=nb78.servidoraweb.net [167.250.5.78]:43926 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=5310 id=692273.692273@51434.com T="***SPAM*** Best Meds For You!" for pzepeda@gtinternational.com.ar 2026-07-28 05:53:18 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodYt-0000000Gw2a-27mH 2026-07-28 05:53:18 SMTP connection from nb78.servidoraweb.net [167.250.5.78]:43926 D=1s closed by QUIT 2026-07-28 05:53:18 1wodYt-0000000Gw2a-27mH => pzepeda+spam ("pzepeda+spam"@gtinternational.com.ar) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 kGekMf5taGqObj0AcoHInw Saved" 2026-07-28 05:53:18 1wodYt-0000000Gw2a-27mH Completed 2026-07-28 05:53:22 SMTP connection from [118.232.243.132]:38162 (TCP/IP connection count = 8) 2026-07-28 05:53:23 SMTP connection from [200.106.49.149]:34448 (TCP/IP connection count = 9) 2026-07-28 05:53:23 no host name found for IP address 200.106.49.149 2026-07-28 05:53:23 TLS error on connection from 118-232-243-132.dynamic.kbronet.com.tw [118.232.243.132]:38162 SSL_accept: TCP connection closed by peer 2026-07-28 05:53:23 SMTP connection from [84.54.70.117]:34836 (TCP/IP connection count = 9) 2026-07-28 05:53:24 H=([84.54.70.117]) [84.54.70.117]:20514 F= rejected RCPT : No Such User Here" 2026-07-28 05:53:25 unexpected disconnection while reading SMTP command from ([84.54.70.117]) [84.54.70.117]:20514 D=40s 2026-07-28 05:53:25 SMTP connection from [111.26.101.77]:52910 (TCP/IP connection count = 9) 2026-07-28 05:53:25 no host name found for IP address 111.26.101.77 2026-07-28 05:53:26 SMTP connection from [47.253.106.33]:58492 (TCP/IP connection count = 10) 2026-07-28 05:53:33 dovecot_login authenticator failed for H=([61.105.207.79]) [107.85.96.209]:11821: 535 Incorrect authentication data (set_id=informacion@equinerecovery.com) 2026-07-28 05:53:33 dovecot_login authenticator failed for H=(210.0.90.82.static.nexnet.net.au) [200.106.49.149]:34448: 535 Incorrect authentication data (set_id=jorge.gutierrez@regente.com) 2026-07-28 05:53:34 dovecot_login authenticator failed for H=([218.15.224.102]) [111.26.101.77]:52910: 535 Incorrect authentication data (set_id=nuevosnegocios@brcr.com.ar) 2026-07-28 05:53:34 SMTP connection from (210.0.90.82.static.nexnet.net.au) [200.106.49.149]:34448 lost D=11s 2026-07-28 05:53:35 SMTP connection from ([61.105.207.79]) [107.85.96.209]:11821 lost D=16s 2026-07-28 05:53:36 SMTP connection from ([218.15.224.102]) [111.26.101.77]:52910 lost D=10s 2026-07-28 05:53:36 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:60626 lost D=20s 2026-07-28 05:53:36 SMTP connection from [217.154.235.104]:62876 (TCP/IP connection count = 7) 2026-07-28 05:53:37 SMTP connection from eip-0xid4k8714jksmf2ldj8g.clearoutreach.org [47.253.106.33]:58492 lost D=10s 2026-07-28 05:53:37 SMTP connection from [140.205.208.122]:36272 (TCP/IP connection count = 7) 2026-07-28 05:53:38 SMTP connection from [39.58.18.43]:51400 (TCP/IP connection count = 8) 2026-07-28 05:53:38 no host name found for IP address 39.58.18.43 2026-07-28 05:53:38 1wodZ5-0000000GviI-1tp0 H=([84.54.70.86]) [84.54.70.86]:63826 Warning: "SpamAssassin as maxtrip detected message as spam (15.0)" 2026-07-28 05:53:38 1wodZ5-0000000GviI-1tp0 H=([84.54.70.86]) [84.54.70.86]:63826 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:53:39 SMTP connection from ([84.54.70.86]) [84.54.70.86]:63826 lost D=49s 2026-07-28 05:53:39 SMTP connection from [200.46.177.242]:37491 (TCP/IP connection count = 8) 2026-07-28 05:53:39 no host name found for IP address 200.46.177.242 2026-07-28 05:53:39 SMTP connection from [140.205.208.121]:41415 (TCP/IP connection count = 9) 2026-07-28 05:53:41 SMTP connection from [105.160.112.170]:2331 (TCP/IP connection count = 10) 2026-07-28 05:53:41 no host name found for IP address 105.160.112.170 2026-07-28 05:53:44 cwd=/etc/csf 4 args: /usr/sbin/sendmail -f root -t 2026-07-28 05:53:44 1wodZI-0000000GwKd-1VRG <= root@medusa.servidoraweb.net U=root P=local S=67968 T="lfd on medusa.servidoraweb.net: Suspicious process running under user ospiacap" for servers@servidoraweb.net 2026-07-28 05:53:44 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodZI-0000000GwKd-1VRG 2026-07-28 05:53:44 cwd=/etc/csf 4 args: /usr/sbin/sendmail -f root -t 2026-07-28 05:53:44 1wodZI-0000000GwKd-1VRG Sender identification U=root D=-system- S=root 2026-07-28 05:53:44 1wodZI-0000000GwKs-2Gri <= root@medusa.servidoraweb.net U=root P=local S=67968 T="lfd on medusa.servidoraweb.net: Suspicious process running under user ospiacap" for servers@servidoraweb.net 2026-07-28 05:53:44 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodZI-0000000GwKs-2Gri 2026-07-28 05:53:44 1wodZI-0000000GwKs-2Gri Sender identification U=root D=-system- S=root 2026-07-28 05:53:46 SMTP connection from [186.238.210.226]:57808 (TCP/IP connection count = 11) 2026-07-28 05:53:46 no host name found for IP address 186.238.210.226 2026-07-28 05:53:46 1wodZI-0000000GwKd-1VRG => servers@servidoraweb.net R=dkim_lookuphost T=dkim_remote_smtp H=mailserver.servidoraweb.net [167.250.4.17] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 2.0.0 Ok: queued as F3767A0194" 2026-07-28 05:53:46 1wodZI-0000000GwKd-1VRG Completed 2026-07-28 05:53:46 1wodZI-0000000GwKs-2Gri => servers@servidoraweb.net R=dkim_lookuphost T=dkim_remote_smtp H=mailserver.servidoraweb.net [167.250.4.17] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 2.0.0 Ok: queued as 1F32EA0F6F" 2026-07-28 05:53:46 1wodZI-0000000GwKs-2Gri Completed 2026-07-28 05:53:47 SMTP connection from [45.93.148.2]:47860 (TCP/IP connection count = 12) 2026-07-28 05:53:48 SMTP connection from [192.155.71.46]:52466 (TCP/IP connection count = 13) 2026-07-28 05:53:49 H=2.135.36.187.dynamic.telecom.kz [2.135.36.187]:57602 F= rejected RCPT : No Such User Here" 2026-07-28 05:53:49 unexpected disconnection while reading SMTP command from 2.135.36.187.dynamic.telecom.kz [2.135.36.187]:57602 D=41s 2026-07-28 05:53:50 dovecot_login authenticator failed for H=([174.64.199.92]) [200.46.177.242]:37491: 535 Incorrect authentication data (set_id=gabriela.ferrucci@regente.com) 2026-07-28 05:53:51 SMTP connection from ([174.64.199.92]) [200.46.177.242]:37491 lost D=12s 2026-07-28 05:53:52 SMTP connection from [211.220.156.232]:57350 (TCP/IP connection count = 12) 2026-07-28 05:53:52 no host name found for IP address 211.220.156.232 2026-07-28 05:53:53 TLS error on connection from [211.220.156.232]:57350 (SSL_accept): (TLSv1.2) 2026-07-28 05:53:54 SMTP connection from [115.124.21.135]:35414 (TCP/IP connection count = 12) 2026-07-28 05:53:54 SMTP connection from [140.205.208.118]:47849 (TCP/IP connection count = 13) 2026-07-28 05:53:55 dovecot_login authenticator failed for H=(187-126-105-145.user.vtal.net.br) [186.238.210.226]:57808: 535 Incorrect authentication data (set_id=jorge.gutierrez) 2026-07-28 05:53:56 SMTP connection from [209.14.85.115]:57206 (TCP/IP connection count = 14) 2026-07-28 05:53:56 1wodZO-0000000Gvwd-3OjK H=([213.230.87.23]) [213.230.87.23]:9732 Warning: "SpamAssassin as gastoncr detected message as spam (20.6)" 2026-07-28 05:53:56 1wodZO-0000000Gvwd-3OjK H=([213.230.87.23]) [213.230.87.23]:9732 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:53:56 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:62876 lost D=20s 2026-07-28 05:53:56 SMTP connection from [217.154.235.104]:65035 (TCP/IP connection count = 14) 2026-07-28 05:53:56 SMTP connection from (187-126-105-145.user.vtal.net.br) [186.238.210.226]:57808 lost D=10s 2026-07-28 05:53:56 SMTP connection from ([213.230.87.23]) [213.230.87.23]:9732 lost D=48s 2026-07-28 05:53:59 SMTP connection from [98.47.197.220]:52346 (TCP/IP connection count = 13) 2026-07-28 05:54:00 SMTP connection from [94.16.17.140]:38048 (TCP/IP connection count = 14) 2026-07-28 05:54:00 no host name found for IP address 94.16.17.140 2026-07-28 05:54:00 SMTP connection from [152.170.189.6]:63853 (TCP/IP connection count = 15) 2026-07-28 05:54:01 SMTP connection from [200.1.116.227]:41078 (TCP/IP connection count = 16) 2026-07-28 05:54:02 dovecot_login authenticator failed for H=c-98-47-197-220.hsd1.ca.comcast.net (accul) [98.47.197.220]:52346: 535 Incorrect authentication data (set_id=carlos@altercom.com.ar) 2026-07-28 05:54:02 TLS error (SSL_read): on connection from c-98-47-197-220.hsd1.ca.comcast.net (accul) [98.47.197.220]:52346 error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac 2026-07-28 05:54:02 TLS error (SSL_write): error:140800FF:SSL routines:ssl3_accept:unknown state 2026-07-28 05:54:02 SMTP connection from c-98-47-197-220.hsd1.ca.comcast.net (accul) [98.47.197.220]:52346 lost D=3s 2026-07-28 05:54:02 H=mail3.arca.gob.ar [200.1.116.227]:41078 X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 F= rejected RCPT : No Such User Here" 2026-07-28 05:54:03 SMTP connection from mail3.arca.gob.ar [200.1.116.227]:41078 D=1s closed by QUIT 2026-07-28 05:54:04 H=([84.54.70.117]) [84.54.70.117]:34836 F= rejected RCPT : No Such User Here" 2026-07-28 05:54:04 unexpected disconnection while reading SMTP command from ([84.54.70.117]) [84.54.70.117]:34836 D=40s 2026-07-28 05:54:04 SMTP connection from (MarcosPC) [152.170.189.6]:63853 D=3s closed by QUIT 2026-07-28 05:54:05 SMTP connection from [112.198.4.43]:54831 (TCP/IP connection count = 13) 2026-07-28 05:54:05 SMTP connection from [120.229.203.177]:23234 (TCP/IP connection count = 14) 2026-07-28 05:54:05 no host name found for IP address 112.198.4.43 2026-07-28 05:54:06 no host name found for IP address 120.229.203.177 2026-07-28 05:54:07 dovecot_login authenticator failed for H=([68.71.251.130]) [94.16.17.140]:38048: 535 Incorrect authentication data (set_id=waterski1989@tecnocomp.com.ar) 2026-07-28 05:54:07 dovecot_login authenticator failed for H=(93-122-239-57.orangero.net) [209.14.85.115]:57206: 535 Incorrect authentication data (set_id=info@unigestion.com.ar) 2026-07-28 05:54:08 SMTP connection from ([68.71.251.130]) [94.16.17.140]:38048 lost D=7s 2026-07-28 05:54:09 SMTP connection from (93-122-239-57.orangero.net) [209.14.85.115]:57206 lost D=12s 2026-07-28 05:54:09 SMTP connection from [45.140.132.2]:47780 (TCP/IP connection count = 13) 2026-07-28 05:54:14 cwd=/ 2 args: /usr/sbin/exim -bpc 2026-07-28 05:54:15 SMTP connection from [149.27.165.17]:54245 (TCP/IP connection count = 14) 2026-07-28 05:54:15 SMTP connection from [117.6.178.198]:3515 (TCP/IP connection count = 15) 2026-07-28 05:54:16 no host name found for IP address 117.6.178.198 2026-07-28 05:54:16 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:65035 lost D=20s 2026-07-28 05:54:16 SMTP connection from [217.154.235.104]:50704 (TCP/IP connection count = 15) 2026-07-28 05:54:17 SMTP connection from [110.25.110.135]:46972 (TCP/IP connection count = 16) 2026-07-28 05:54:24 1wodZs-0000000GwG9-3Z5O H=([39.58.18.43]) [39.58.18.43]:51400 Warning: "SpamAssassin as elgaucho detected message as spam (16.9)" 2026-07-28 05:54:24 1wodZs-0000000GwG9-3Z5O H=([39.58.18.43]) [39.58.18.43]:51400 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:54:24 SMTP connection from ([39.58.18.43]) [39.58.18.43]:51400 lost D=45s 2026-07-28 05:54:25 1wodZw-0000000GwGw-04Pc H=out208-121.dm.aliyun.com [140.205.208.121]:41415 Warning: "SpamAssassin as mmconval detected message as spam (6.3)" 2026-07-28 05:54:25 1wodZt-0000000GwFf-2s1B H=out208-122.dm.aliyun.com [140.205.208.122]:36272 Warning: "SpamAssassin as mmconval detected message as spam (7.8)" 2026-07-28 05:54:25 1wodZw-0000000GwGw-04Pc <= random_NjAwMDAwMzQxMjA4OTE3MzUxX2luZm9AY29udHJvbGVzeXZhbHZ1bGFzLmNvbS5hciR2aXA=@vip.twivfluidvalve.ltd H=out208-121.dm.aliyun.com [140.205.208.121]:41415 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=7986 id=b3a76870-dc9d-46f2-95d0-78b182efa2af@alibaba.com T="CHINA BUTTERFLY VALVE FACTORY" for info@controlesyvalvulas.com.ar 2026-07-28 05:54:25 1wodZt-0000000GwFf-2s1B <= random_NjAwMDAwMzQxMjA4OTE3MzUxX2luZm9AY29udmFsLmNvbS5hciR2aXA=@vip.twivfluidvalve.ltd H=out208-122.dm.aliyun.com [140.205.208.122]:36272 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=7932 id=b3a76870-dc9d-46f2-95d0-78b182efa2af@alibaba.com T="CHINA BUTTERFLY VALVE FACTORY" for info@conval.com.ar 2026-07-28 05:54:25 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodZw-0000000GwGw-04Pc 2026-07-28 05:54:25 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodZt-0000000GwFf-2s1B 2026-07-28 05:54:26 dovecot_login authenticator failed for H=110-25-110-135.adsl.fetnet.net ([61.97.17.208]) [110.25.110.135]:46972: 535 Incorrect authentication data (set_id=waterski1989) 2026-07-28 05:54:26 1wodZw-0000000GwGw-04Pc => info+spam ("info+spam"@controlesyvalvulas.com.ar) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 WBZnKkFuaGqObj0AcoHInw Saved" 2026-07-28 05:54:26 1wodZw-0000000GwGw-04Pc Completed 2026-07-28 05:54:26 SMTP connection from out208-121.dm.aliyun.com [140.205.208.121]:41415 D=46s closed by QUIT 2026-07-28 05:54:26 1wodZt-0000000GwFf-2s1B => info+spam ("info+spam"@conval.com.ar) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 Wm4GK0FuaGqLoz0AcoHInw Saved" 2026-07-28 05:54:26 1wodZt-0000000GwFf-2s1B Completed 2026-07-28 05:54:26 1wodZv-0000000GwHi-3Ksn H=([105.160.112.170]) [105.160.112.170]:2331 Warning: "SpamAssassin as caepsa detected message as spam (16.5)" 2026-07-28 05:54:26 1wodZv-0000000GwHi-3Ksn H=([105.160.112.170]) [105.160.112.170]:2331 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:54:27 SMTP connection from ([105.160.112.170]) [105.160.112.170]:2331 lost D=46s 2026-07-28 05:54:27 SMTP connection from out208-122.dm.aliyun.com [140.205.208.122]:36272 D=49s closed by QUIT 2026-07-28 05:54:27 SMTP connection from 110-25-110-135.adsl.fetnet.net ([61.97.17.208]) [110.25.110.135]:46972 lost D=10s 2026-07-28 05:54:28 SMTP connection from out13-256.antispamcloud.com [45.93.148.2]:47860 D=40s closed by QUIT 2026-07-28 05:54:31 1woda1-0000000GwNp-3e3E H=na01lpstfixp02.alarm.com [192.155.71.46]:52466 Warning: "SpamAssassin as lageneral detected message as NOT spam (-0.5)" 2026-07-28 05:54:31 1woda1-0000000GwNp-3e3E <= noreply@adt-worldwide.com H=na01lpstfixp02.alarm.com [192.155.71.46]:52466 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=23123 id=0ba8fe35a9d61be8737f70783e5ab90f@adt-worldwide.com T="Negocio: Panel fue desarmado por LA GENERAL SA LA GENERAL SA a las 05:53" for lageneral@lageneral.com.ar 2026-07-28 05:54:31 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1woda1-0000000GwNp-3e3E 2026-07-28 05:54:31 SMTP connection from na01lpstfixp02.alarm.com [192.155.71.46]:52466 D=43s closed by QUIT 2026-07-28 05:54:32 1woda1-0000000GwNp-3e3E => lageneral R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 sGU6N0duaGqLoz0AcoHInw Saved" 2026-07-28 05:54:32 1woda1-0000000GwNp-3e3E Completed 2026-07-28 05:54:32 SMTP connection from [190.210.104.203]:36090 (TCP/IP connection count = 10) 2026-07-28 05:54:33 SMTP connection from [45.244.47.217]:63119 (TCP/IP connection count = 11) 2026-07-28 05:54:33 no host name found for IP address 45.244.47.217 2026-07-28 05:54:34 1woda6-0000000GwwM-3WZi <= mikrotik@altercom.com.ar H=([190.210.104.203]) [190.210.104.203]:36090 P=esmtpsa X=TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128 A=dovecot_login:mikrotik@altercom.com.ar S=1169 id=2360a08924d2238c1f89bb1d80c5e2fe297bf536-1399@Facimex T="DHCP Report - Facimex #FMX" for mikrotik_metrics@altercom.com.ar 2026-07-28 05:54:34 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1woda6-0000000GwwM-3WZi 2026-07-28 05:54:34 1woda6-0000000GwwM-3WZi => mikrotik_metrics R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 8FiWG0puaGqObj0AcoHInw Saved" 2026-07-28 05:54:34 1woda6-0000000GwwM-3WZi Completed 2026-07-28 05:54:34 SMTP connection from ([190.210.104.203]) [190.210.104.203]:36090 D=2s closed by QUIT 2026-07-28 05:54:35 SMTP connection from [167.250.5.78]:52656 (TCP/IP connection count = 11) 2026-07-28 05:54:36 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:50704 lost D=20s 2026-07-28 05:54:36 SMTP connection from [217.154.235.104]:52781 (TCP/IP connection count = 11) 2026-07-28 05:54:36 1woda9-0000000Gwy9-2gLg <= admin@bestmeds4you.com H=nb78.servidoraweb.net [167.250.5.78]:52656 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=5309 id=983556.983556@80754.com T="***SPAM*** Best Meds For You!" for pzepeda@gtinternational.com.ar 2026-07-28 05:54:36 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1woda9-0000000Gwy9-2gLg 2026-07-28 05:54:37 SMTP connection from nb78.servidoraweb.net [167.250.5.78]:52656 D=1s closed by QUIT 2026-07-28 05:54:37 1woda9-0000000Gwy9-2gLg => pzepeda+spam ("pzepeda+spam"@gtinternational.com.ar) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 +NeKO0xuaGqObj0AcoHInw Saved" 2026-07-28 05:54:37 1woda9-0000000Gwy9-2gLg Completed 2026-07-28 05:54:39 SMTP connection from [149.54.64.252]:49760 (TCP/IP connection count = 11) 2026-07-28 05:54:39 no host name found for IP address 149.54.64.252 2026-07-28 05:54:44 cwd=/etc/csf 4 args: /usr/sbin/sendmail -f root -t 2026-07-28 05:54:44 1wodaB-0000000GwSJ-0tzn H=out21-135.dm.aliyun.com [115.124.21.135]:35414 Warning: "SpamAssassin as mmconval detected message as spam (22.4)" 2026-07-28 05:54:44 1wodaB-0000000GwSJ-0tzn H=out21-135.dm.aliyun.com [115.124.21.135]:35414 X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:54:44 1wodaG-0000000Gx3z-2Mrm <= root@medusa.servidoraweb.net U=root P=local S=67969 T="lfd on medusa.servidoraweb.net: Suspicious process running under user ospiacap" for servers@servidoraweb.net 2026-07-28 05:54:44 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodaG-0000000Gx3z-2Mrm 2026-07-28 05:54:44 1wodaG-0000000Gx3z-2Mrm Sender identification U=root D=-system- S=root 2026-07-28 05:54:44 1wodaA-0000000GwSM-1uTF H=out208-118.dm.aliyun.com [140.205.208.118]:47849 Warning: "SpamAssassin as mmconval detected message as spam (23.9)" 2026-07-28 05:54:44 1wodaA-0000000GwSM-1uTF H=out208-118.dm.aliyun.com [140.205.208.118]:47849 X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:54:45 SMTP connection from out21-135.dm.aliyun.com [115.124.21.135]:35414 D=51s closed by QUIT 2026-07-28 05:54:46 SMTP connection from out208-118.dm.aliyun.com [140.205.208.118]:47849 D=52s closed by QUIT 2026-07-28 05:54:46 1wodaG-0000000Gx3z-2Mrm => servers@servidoraweb.net R=dkim_lookuphost T=dkim_remote_smtp H=mailserver.servidoraweb.net [167.250.4.17] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 2.0.0 Ok: queued as 2A702A0F6F" 2026-07-28 05:54:46 1wodaG-0000000Gx3z-2Mrm Completed 2026-07-28 05:54:48 SMTP connection from [84.54.71.55]:17883 (TCP/IP connection count = 10) 2026-07-28 05:54:48 no host name found for IP address 84.54.71.55 2026-07-28 05:54:50 SMTP connection from out17-256.antispamcloud.com [45.140.132.2]:47780 D=40s closed by QUIT 2026-07-28 05:54:50 1wodaJ-0000000GwdW-2nym H=([112.198.4.46]) [112.198.4.43]:54831 Warning: "SpamAssassin as lageneral detected message as spam (17.9)" 2026-07-28 05:54:50 1wodaJ-0000000GwdW-2nym H=([112.198.4.46]) [112.198.4.43]:54831 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:54:50 SMTP connection from ([112.198.4.46]) [112.198.4.43]:54831 lost D=45s 2026-07-28 05:54:53 1wodaL-0000000Gwdb-0BV4 H=(mailin1.travelers.sk) [120.229.203.177]:23234 Warning: "SpamAssassin as anam1e7 detected message as spam (14.3)" 2026-07-28 05:54:53 1wodaL-0000000Gwdb-0BV4 H=(mailin1.travelers.sk) [120.229.203.177]:23234 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:54:54 SMTP connection from (mailin1.travelers.sk) [120.229.203.177]:23234 D=49s closed by QUIT 2026-07-28 05:54:55 SMTP connection from [180.125.114.40]:9572 (TCP/IP connection count = 8) 2026-07-28 05:54:55 no host name found for IP address 180.125.114.40 2026-07-28 05:54:55 SMTP connection from [45.94.216.229]:53466 (TCP/IP connection count = 9) 2026-07-28 05:54:55 no host name found for IP address 45.94.216.229 2026-07-28 05:54:56 H=([149.27.165.17]) [149.27.165.17]:54245 F= rejected RCPT : No Such User Here" 2026-07-28 05:54:56 unexpected disconnection while reading SMTP command from ([149.27.165.17]) [149.27.165.17]:54245 D=41s 2026-07-28 05:54:56 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:52781 lost D=20s 2026-07-28 05:54:57 SMTP connection from [217.154.235.104]:54860 (TCP/IP connection count = 8) 2026-07-28 05:54:57 H=([117.6.178.198]) [117.6.178.198]:3515 Warning: "Increment Connection Ratelimit - ([117.6.178.198]) [117.6.178.198]:3515 because of RBL match" 2026-07-28 05:54:57 H=([117.6.178.198]) [117.6.178.198]:3515 F= rejected RCPT : "JunkMail rejected - ([117.6.178.198]) [117.6.178.198]:3515 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?117.6.178.198" 2026-07-28 05:54:57 SMTP connection from ([117.6.178.198]) [117.6.178.198]:3515 D=41s closed by DROP in ACL 2026-07-28 05:55:00 SMTP connection from [2.135.223.38]:51082 (TCP/IP connection count = 8) 2026-07-28 05:55:01 SMTP connection from [91.218.161.59]:18153 (TCP/IP connection count = 9) 2026-07-28 05:55:02 SMTP connection from [172.233.115.32]:41977 (TCP/IP connection count = 10) 2026-07-28 05:55:04 SMTP connection from [93.241.232.14]:44825 (TCP/IP connection count = 11) 2026-07-28 05:55:05 SMTP connection from [186.80.230.116]:59196 (TCP/IP connection count = 12) 2026-07-28 05:55:06 SMTP connection from [185.225.27.2]:49034 (TCP/IP connection count = 13) 2026-07-28 05:55:10 SMTP connection from [152.170.189.6]:63854 (TCP/IP connection count = 14) 2026-07-28 05:55:11 dovecot_login authenticator failed for H=p5df1e80e.dip0.t-ipconnect.de ([49.124.149.48]) [93.241.232.14]:44825: 535 Incorrect authentication data (set_id=suscripciones@energiaenmovimiento.com.ar) 2026-07-28 05:55:12 SMTP connection from p5df1e80e.dip0.t-ipconnect.de ([49.124.149.48]) [93.241.232.14]:44825 lost D=7s 2026-07-28 05:55:12 SMTP connection from [167.250.4.5]:34522 (TCP/IP connection count = 14) 2026-07-28 05:55:13 SMTP connection from na5.servidoraweb.net (nagios2) [167.250.4.5]:34522 D=0s closed by QUIT 2026-07-28 05:55:13 SMTP connection from [79.137.176.73]:10747 (TCP/IP connection count = 14) 2026-07-28 05:55:13 no host name found for IP address 79.137.176.73 2026-07-28 05:55:14 dovecot_login authenticator failed for H=([61.32.68.66]) [186.80.230.116]:59196: 535 Incorrect authentication data (set_id=gabriela.ferrucci@regente.com.ar) 2026-07-28 05:55:14 SMTP connection from [103.163.44.10]:45006 (TCP/IP connection count = 15) 2026-07-28 05:55:14 no host name found for IP address 103.163.44.10 2026-07-28 05:55:14 SMTP connection from (MarcosPC) [152.170.189.6]:63854 D=3s closed by QUIT 2026-07-28 05:55:15 SMTP connection from ([61.32.68.66]) [186.80.230.116]:59196 lost D=9s 2026-07-28 05:55:17 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:54860 lost D=20s 2026-07-28 05:55:17 SMTP connection from [217.154.235.104]:56914 (TCP/IP connection count = 13) 2026-07-28 05:55:17 SMTP connection from [82.200.234.26]:51040 (TCP/IP connection count = 14) 2026-07-28 05:55:17 SMTP connection from [74.209.100.246]:51914 (TCP/IP connection count = 15) 2026-07-28 05:55:20 H=([149.54.64.254]) [149.54.64.252]:49760 F= rejected RCPT : No Such User Here" 2026-07-28 05:55:20 unexpected disconnection while reading SMTP command from ([149.54.64.254]) [149.54.64.252]:49760 D=40s 2026-07-28 05:55:20 SMTP connection from [91.218.162.194]:56679 (TCP/IP connection count = 15) 2026-07-28 05:55:20 no host name found for IP address 91.218.162.194 2026-07-28 05:55:21 SMTP connection from [189.217.100.204]:54510 (TCP/IP connection count = 16) 2026-07-28 05:55:21 1wodal-0000000Gwww-27Ng H=([0.0.0.0]) [45.244.47.217]:63119 Warning: "SpamAssassin as tecnosec detected message as spam (15.2)" 2026-07-28 05:55:21 1wodal-0000000Gwww-27Ng H=([0.0.0.0]) [45.244.47.217]:63119 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:55:21 SMTP connection from ([0.0.0.0]) [45.244.47.217]:63119 lost D=48s 2026-07-28 05:55:21 SMTP connection from [98.127.132.178]:36602 (TCP/IP connection count = 16) 2026-07-28 05:55:22 SMTP connection from [201.253.240.178]:53682 (TCP/IP connection count = 17) 2026-07-28 05:55:22 H=out2.jardanimkt.com [172.233.115.32]:41977 temporarily rejected connection in "connect" ACL: "Host is ratelimited (1.8/1h max:1.2)" 2026-07-28 05:55:23 SMTP connection from [98.159.111.66]:33552 (TCP/IP connection count = 17) 2026-07-28 05:55:23 no host name found for IP address 98.159.111.66 2026-07-28 05:55:23 SMTP connection from host178.201-253-240.telecom.net.ar (localhost) [201.253.240.178]:53682 D=1s closed by QUIT 2026-07-28 05:55:24 dovecot_login authenticator failed for H=([45.178.227.128]) [103.163.44.10]:45006: 535 Incorrect authentication data (set_id=info@plasticoscenturion.com.ar) 2026-07-28 05:55:24 SMTP connection from [177.174.16.55]:33570 (TCP/IP connection count = 17) 2026-07-28 05:55:25 dovecot_login authenticator failed for H=(187-126-105-145.user.vtal.net.br) [74.209.100.246]:51914: 535 Incorrect authentication data (set_id=tito.esparza@estudioesparza.com.ar) 2026-07-28 05:55:25 SMTP connection from ([45.178.227.128]) [103.163.44.10]:45006 lost D=10s 2026-07-28 05:55:26 SMTP connection from (187-126-105-145.user.vtal.net.br) [74.209.100.246]:51914 lost D=9s 2026-07-28 05:55:28 SMTP connection from [93.125.47.205]:6263 (TCP/IP connection count = 16) 2026-07-28 05:55:28 no host name found for IP address 93.125.47.205 2026-07-28 05:55:29 H=([84.54.71.55]) [84.54.71.55]:17883 Warning: "Increment Connection Ratelimit - ([84.54.71.55]) [84.54.71.55]:17883 because of RBL match" 2026-07-28 05:55:29 H=([84.54.71.55]) [84.54.71.55]:17883 F= rejected RCPT : "JunkMail rejected - ([84.54.71.55]) [84.54.71.55]:17883 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?84.54.71.55" 2026-07-28 05:55:29 SMTP connection from ([84.54.71.55]) [84.54.71.55]:17883 D=40s closed by DROP in ACL 2026-07-28 05:55:31 dovecot_login authenticator failed for H=([5.140.212.144]) [98.127.132.178]:36602: 535 Incorrect authentication data (set_id=annie.baricco@regente.com) 2026-07-28 05:55:31 SMTP connection from [93.174.70.253]:6167 (TCP/IP connection count = 16) 2026-07-28 05:55:33 SMTP connection from ([5.140.212.144]) [98.127.132.178]:36602 lost D=11s 2026-07-28 05:55:35 dovecot_login authenticator failed for H=([102.210.149.18]) [177.174.16.55]:33570: 535 Incorrect authentication data (set_id=gabriela.ferrucci) 2026-07-28 05:55:36 H=([180.125.114.40]) [180.125.114.40]:9572 Warning: "Increment Connection Ratelimit - ([180.125.114.40]) [180.125.114.40]:9572 because of RBL match" 2026-07-28 05:55:36 H=([180.125.114.40]) [180.125.114.40]:9572 F= rejected RCPT : "JunkMail rejected - ([180.125.114.40]) [180.125.114.40]:9572 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?180.125.114.40" 2026-07-28 05:55:36 SMTP connection from ([180.125.114.40]) [180.125.114.40]:9572 D=41s closed by DROP in ACL 2026-07-28 05:55:36 H=([45.94.216.229]) [45.94.216.229]:53466 Warning: "Increment Connection Ratelimit - ([45.94.216.229]) [45.94.216.229]:53466 because of RBL match" 2026-07-28 05:55:36 H=([45.94.216.229]) [45.94.216.229]:53466 F= rejected RCPT : "JunkMail rejected - ([45.94.216.229]) [45.94.216.229]:53466 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?45.94.216.229" 2026-07-28 05:55:36 SMTP connection from ([45.94.216.229]) [45.94.216.229]:53466 D=40s closed by DROP in ACL 2026-07-28 05:55:36 SMTP connection from ([102.210.149.18]) [177.174.16.55]:33570 lost D=12s 2026-07-28 05:55:37 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:56914 lost D=20s 2026-07-28 05:55:37 SMTP connection from [217.154.235.104]:59164 (TCP/IP connection count = 12) 2026-07-28 05:55:42 H=([91.218.161.59]) [91.218.161.59]:18153 F= rejected RCPT : No Such User Here" 2026-07-28 05:55:42 unexpected disconnection while reading SMTP command from ([91.218.161.59]) [91.218.161.59]:18153 D=41s 2026-07-28 05:55:43 SMTP connection from [111.70.3.122]:44150 (TCP/IP connection count = 12) 2026-07-28 05:55:43 SMTP connection from [187.50.226.182]:44505 (TCP/IP connection count = 13) 2026-07-28 05:55:45 1wodbC-0000000GxEa-2Drw H=([2.135.223.38]) [2.135.223.38]:51082 Warning: "SpamAssassin as elgaucho detected message as spam (20.6)" 2026-07-28 05:55:45 1wodbC-0000000GxEa-2Drw H=([2.135.223.38]) [2.135.223.38]:51082 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:55:45 SMTP connection from ([2.135.223.38]) [2.135.223.38]:51082 lost D=45s 2026-07-28 05:55:51 1wodbI-0000000GxL3-1SXT H=out18-256.antispamcloud.com [185.225.27.2]:49034 Warning: "SpamAssassin as briendsrl detected message as NOT spam (-92.8)" 2026-07-28 05:55:51 1wodbI-0000000GxL3-1SXT <= random_NjAwMDAwMzQxMjA4OTE3MzUxX3ZlbnRhc0BicmllbmRzcmwuY29tJHZpcA==@vip.twivfluidvalve.ltd H=out18-256.antispamcloud.com [185.225.27.2]:49034 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=10524 id=b3a76870-dc9d-46f2-95d0-78b182efa2af@alibaba.com T="CHINA BUTTERFLY VALVE FACTORY" for ventas@briendsrl.com 2026-07-28 05:55:51 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodbI-0000000GxL3-1SXT 2026-07-28 05:55:51 SMTP connection from out18-256.antispamcloud.com [185.225.27.2]:49034 D=45s closed by QUIT 2026-07-28 05:55:51 1wodbI-0000000GxL3-1SXT => ventas R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 qIYeNZduaGqObj0AcoHInw Saved" 2026-07-28 05:55:52 cwd=/home16/briendsrl 3 args: /usr/sbin/sendmail -fventas@briendsrl.com -t 2026-07-28 05:55:52 1wodbM-0000000Gxmw-05ut <= ventas@briendsrl.com U=briendsrl P=local S=2188 id=1785228952.7xVMy2fFORJDTjzY@medusa.servidoraweb.net T="Recibimos su Correo electr\363nico" for lucy@twivfluidvalve.com 2026-07-28 05:55:52 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodbM-0000000Gxmw-05ut 2026-07-28 05:55:52 1wodbI-0000000GxL3-1SXT => |/usr/local/cpanel/bin/autorespond ventas@briendsrl.com /home16/briendsrl/.autorespond (ventas@briendsrl.com) R=virtual_aliases_nostar T=cagefs_virtual_address_pipe 2026-07-28 05:55:52 1wodbI-0000000GxL3-1SXT Completed 2026-07-28 05:55:52 1wodbM-0000000Gxmw-05ut Sender identification U=briendsrl D=briendsrl.com S=ventas@briendsrl.com 2026-07-28 05:55:52 1wodbM-0000000Gxmw-05ut SMTP connection outbound 1785228952 1wodbM-0000000Gxmw-05ut briendsrl.com lucy@twivfluidvalve.com 2026-07-28 05:55:52 dovecot_login authenticator failed for H=(029.191.76.219.static.netvigator.com) [187.50.226.182]:44505: 535 Incorrect authentication data (set_id=debater@myccarteles.com.ar) 2026-07-28 05:55:52 dovecot_login authenticator failed for H=111-70-3-122.emome-ip.hinet.net ([92.101.186.237]) [111.70.3.122]:44150: 535 Incorrect authentication data (set_id=info) 2026-07-28 05:55:53 SMTP connection from 111-70-3-122.emome-ip.hinet.net ([92.101.186.237]) [111.70.3.122]:44150 lost D=9s 2026-07-28 05:55:53 SMTP connection from (029.191.76.219.static.netvigator.com) [187.50.226.182]:44505 lost D=9s 2026-07-28 05:55:54 SMTP connection from [68.225.62.190]:40851 (TCP/IP connection count = 10) 2026-07-28 05:55:56 SMTP connection from [31.180.135.246]:56478 (TCP/IP connection count = 11) 2026-07-28 05:55:57 1wodbM-0000000Gxmw-05ut => lucy@twivfluidvalve.com R=autoreply_dkim_lookuphost T=dkim_remote_smtp H=qiye163mx01.mxmail.netease.com [47.251.84.126] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 2.0.0 Ok: queued as 47dacd6f9" 2026-07-28 05:55:57 1wodbM-0000000Gxmw-05ut Completed 2026-07-28 05:55:57 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:59164 lost D=20s 2026-07-28 05:55:57 SMTP connection from [217.154.235.104]:61526 (TCP/IP connection count = 11) 2026-07-28 05:55:58 H=82.200.234.26.adsl.online.kz [82.200.234.26]:51040 F= rejected RCPT : No Such User Here" 2026-07-28 05:55:58 unexpected disconnection while reading SMTP command from 82.200.234.26.adsl.online.kz [82.200.234.26]:51040 D=41s 2026-07-28 05:55:58 1wodbP-0000000GxPN-3CsV H=([0.0.0.0]) [79.137.176.73]:10747 Warning: "SpamAssassin as brcr detected message as spam (17.2)" 2026-07-28 05:55:58 1wodbP-0000000GxPN-3CsV H=([0.0.0.0]) [79.137.176.73]:10747 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:55:58 SMTP connection from ([0.0.0.0]) [79.137.176.73]:10747 lost D=45s 2026-07-28 05:56:01 dovecot_login authenticator failed for H=wsip-68-225-62-190.pn.at.cox.net (ms5ccba58c.ap.nuro.jp) [68.225.62.190]:40851: 535 Incorrect authentication data (set_id=debater) 2026-07-28 05:56:01 SMTP connection from [200.1.116.227]:48952 (TCP/IP connection count = 10) 2026-07-28 05:56:01 SMTP connection from wsip-68-225-62-190.pn.at.cox.net (ms5ccba58c.ap.nuro.jp) [68.225.62.190]:40851 lost D=6s 2026-07-28 05:56:02 H=([189.217.100.204]) [189.217.100.204]:54510 F= rejected RCPT : No Such User Here" 2026-07-28 05:56:02 unexpected disconnection while reading SMTP command from ([189.217.100.204]) [189.217.100.204]:54510 D=41s 2026-07-28 05:56:03 1wodbX-0000000Gxug-3Fza <= eventanilla@arca.gob.ar H=mail3.arca.gob.ar [200.1.116.227]:48952 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=2316 id=1856797049.679821785228961240.JavaMail.appserv@rembrandt T="ARCA e-Ventanilla: nueva comunicaci\363n del sistema \"Sistema de Cuentas Tributarias - Recordatorio por" for sschulmeister@bkv.com.ar 2026-07-28 05:56:03 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodbX-0000000Gxug-3Fza 2026-07-28 05:56:03 1wodbX-0000000Gxug-3Fza SMTP connection identification D=bkv.com.ar O=sschulmeister@bkv.com.ar E=sschulmeister@sgbcontadores.com.ar M=1wodbX-0000000Gxug-3Fza U=bkvcomar ID=1510 B=redirect_resolver 2026-07-28 05:56:03 1wodbX-0000000Gxug-3Fza Sender identification U=bkvcomar D=bkv.com.ar S=sschulmeister@bkv.com.ar 2026-07-28 05:56:03 1wodbX-0000000Gxug-3Fza SMTP connection outbound 1785228963 1wodbX-0000000Gxug-3Fza bkv.com.ar sschulmeister@sgbcontadores.com.ar 2026-07-28 05:56:03 SMTP connection from mail3.arca.gob.ar [200.1.116.227]:48952 D=1s closed by QUIT 2026-07-28 05:56:03 1wodbX-0000000Gxug-3Fza => |/usr/local/cpanel/bin/autorespond sschulmeister@bkv.com.ar /home11/bkvcomar/.autorespond (sschulmeister@bkv.com.ar) R=virtual_aliases_nostar T=cagefs_virtual_address_pipe 2026-07-28 05:56:03 1wodbX-0000000Gxug-3Fza => |/usr/local/cpanel/bin/autorespond sschulmeister@bkv.com.ar /home10/bkvcomar/.autorespond (sschulmeister@bkv.com.ar) R=virtual_aliases_nostar T=cagefs_virtual_address_pipe 2026-07-28 05:56:03 1wodbX-0000000Gxug-3Fza [52.101.10.6] sgbcontadores-com-ar.mail.protection.outlook.com Received TLS cert (DN: '/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=mail.protection.outlook.com') status response, itself unverifiable: certificate verify error 2026-07-28 05:56:05 SMTP connection from [95.52.199.137]:51769 (TCP/IP connection count = 8) 2026-07-28 05:56:05 no host name found for IP address 95.52.199.137 2026-07-28 05:56:05 1wodbW-0000000GxTU-2ZUC H=([91.218.162.194]) [91.218.162.194]:56679 Warning: "SpamAssassin as gastoncr detected message as spam (20.6)" 2026-07-28 05:56:05 1wodbW-0000000GxTU-2ZUC H=([91.218.162.194]) [91.218.162.194]:56679 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:56:05 SMTP connection from ([91.218.162.194]) [91.218.162.194]:56679 lost D=45s 2026-07-28 05:56:06 TLS error on connection from [95.52.199.137]:51769 SSL_accept: TCP connection closed by peer 2026-07-28 05:56:06 1wodbX-0000000Gxug-3Fza => sschulmeister@sgbcontadores.com.ar (sschulmeister@bkv.com.ar) R=dkim_lookuphost T=dkim_remote_smtp H=sgbcontadores-com-ar.mail.protection.outlook.com [52.101.10.6] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 2.6.0 <1856797049.679821785228961240.JavaMail.appserv@rembrandt> [InternalId=128797479291444, Hostname=RO2PR80MB6626.lamprd80.prod.outlook.com] 16004 bytes in 0.377, 41.434 KB/sec Queued mail for delivery" 2026-07-28 05:56:06 1wodbX-0000000Gxug-3Fza Completed 2026-07-28 05:56:07 1wodbY-0000000GxVB-1tXs H=(irene.criticalst.sa.com) [98.159.111.66]:33552 Warning: "SpamAssassin as artconc detected message as spam (21.6)" 2026-07-28 05:56:07 1wodbY-0000000GxVB-1tXs H=(irene.criticalst.sa.com) [98.159.111.66]:33552 F=<6914-10934-99856-99-jorge=artcon.com.ar@mail.criticalst.sa.com> rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:56:08 SMTP connection from (irene.criticalst.sa.com) [98.159.111.66]:33552 D=44s closed by QUIT 2026-07-28 05:56:09 H=([93.125.47.205]) [93.125.47.205]:6263 F= rejected RCPT : No Such User Here" 2026-07-28 05:56:09 unexpected disconnection while reading SMTP command from ([93.125.47.205]) [93.125.47.205]:6263 D=40s 2026-07-28 05:56:12 SMTP connection from [205.250.25.62]:56568 (TCP/IP connection count = 5) 2026-07-28 05:56:15 dovecot_login authenticator failed for H=(abts-north-static-031.15.160.122.airtelbroadband.in) [45.164.115.86]:37350: 535 Incorrect authentication data 2026-07-28 05:56:17 SMTP connection from (abts-north-static-031.15.160.122.airtelbroadband.in) [45.164.115.86]:37350 lost (error: Interrupted system call) D=3m5s 2026-07-28 05:56:17 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:61526 lost D=20s 2026-07-28 05:56:17 SMTP connection from [217.154.235.104]:63963 (TCP/IP connection count = 4) 2026-07-28 05:56:18 1wodbh-0000000GxaG-38KR H=smtp70253.emailsp.net [93.174.70.253]:6167 Warning: "SpamAssassin as bkvcomar detected message as spam (7.5)" 2026-07-28 05:56:18 1wodbh-0000000GxaG-38KR <= a7f0i5@bounce.emailsp.net H=smtp70253.emailsp.net [93.174.70.253]:6167 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=71838 id=202607281055298054.2866.176095@a7f0i5.emailsp.com T="Curso Internacional \342\200\234CLAUDE IA\342\200\235, Automatizaci\363n Estrat\351gica Empresarial" for cvarone@bkv.com.ar 2026-07-28 05:56:18 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodbh-0000000GxaG-38KR 2026-07-28 05:56:18 1wodbh-0000000GxaG-38KR => cvarone+spam ("cvarone+spam"@bkv.com.ar) R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 ONkmDrJuaGqObj0AcoHInw Saved" 2026-07-28 05:56:18 1wodbh-0000000GxaG-38KR Completed 2026-07-28 05:56:18 SMTP connection from smtp70253.emailsp.net [93.174.70.253]:6167 D=46s closed by QUIT 2026-07-28 05:56:19 SMTP connection from [212.241.12.206]:32782 (TCP/IP connection count = 4) 2026-07-28 05:56:20 dovecot_login authenticator failed for H=([65.20.146.109]) [205.250.25.62]:56568: 535 Incorrect authentication data (set_id=gabrielaferrucci@regente.com) 2026-07-28 05:56:20 SMTP connection from [152.170.189.6]:63855 (TCP/IP connection count = 5) 2026-07-28 05:56:20 SMTP connection from ([65.20.146.109]) [205.250.25.62]:56568 lost D=8s 2026-07-28 05:56:24 SMTP connection from (MarcosPC) [152.170.189.6]:63855 D=3s closed by QUIT 2026-07-28 05:56:37 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:63963 lost D=20s 2026-07-28 05:56:37 SMTP connection from [217.154.235.104]:49921 (TCP/IP connection count = 3) 2026-07-28 05:56:39 SMTP connection from [106.246.89.73]:60079 (TCP/IP connection count = 4) 2026-07-28 05:56:39 no host name found for IP address 106.246.89.73 2026-07-28 05:56:41 SMTP connection from [101.36.104.46]:58336 (TCP/IP connection count = 5) 2026-07-28 05:56:42 no host name found for IP address 101.36.104.46 2026-07-28 05:56:45 dovecot_login authenticator failed for H=(0j0xfua6d1hzcyzs3vm83qkg4xyzj) [101.36.104.46]:58336: 535 Incorrect authentication data (set_id=administracion@gtcargas.com.ar) 2026-07-28 05:56:45 1wodc6-0000000GxqL-3MJc H=([31.180.135.246]) [31.180.135.246]:56478 Warning: "SpamAssassin as lageneral detected message as spam (16.5)" 2026-07-28 05:56:45 1wodc6-0000000GxqL-3MJc H=([31.180.135.246]) [31.180.135.246]:56478 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:56:45 SMTP connection from ([31.180.135.246]) [31.180.135.246]:56478 lost D=48s 2026-07-28 05:56:45 SMTP connection from (0j0xfua6d1hzcyzs3vm83qkg4xyzj) [101.36.104.46]:58336 lost D=3s 2026-07-28 05:56:46 SMTP connection from [24.237.6.67]:59614 (TCP/IP connection count = 4) 2026-07-28 05:56:50 SMTP connection from [106.246.89.73]:60079 lost D=11s 2026-07-28 05:56:54 SMTP connection from [191.37.16.226]:60439 (TCP/IP connection count = 4) 2026-07-28 05:56:55 SMTP connection from [78.37.9.103]:35294 (TCP/IP connection count = 5) 2026-07-28 05:56:55 no host name found for IP address 78.37.9.103 2026-07-28 05:56:57 SMTP connection from [101.13.1.75]:45916 (TCP/IP connection count = 6) 2026-07-28 05:56:57 no host name found for IP address 101.13.1.75 2026-07-28 05:56:57 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:49921 lost D=20s 2026-07-28 05:56:57 SMTP connection from [217.154.235.104]:52271 (TCP/IP connection count = 6) 2026-07-28 05:56:58 SMTP connection from [41.191.75.50]:51698 (TCP/IP connection count = 7) 2026-07-28 05:56:59 SMTP connection from [191.44.118.236]:52062 (TCP/IP connection count = 8) 2026-07-28 05:56:59 no host name found for IP address 191.44.118.236 2026-07-28 05:57:01 dovecot_login authenticator failed for H=67-6-237-24.gci.net ([192.34.164.13]) [24.237.6.67]:59614: 535 Incorrect authentication data (set_id=gabrielaferrucci) 2026-07-28 05:57:02 dovecot_login authenticator failed for H=([70.166.167.50]) [78.37.9.103]:35294: 535 Incorrect authentication data (set_id=admin@regente.com) 2026-07-28 05:57:02 dovecot_login authenticator failed for H=(75hbyc0rown7lg2r8ta6ehhdupijf) [191.44.118.236]:52062: 535 Incorrect authentication data (set_id=pzepeda@gtinternational.com.ar) 2026-07-28 05:57:02 SMTP connection from (75hbyc0rown7lg2r8ta6ehhdupijf) [191.44.118.236]:52062 lost D=2s 2026-07-28 05:57:02 SMTP connection from [193.193.249.106]:58903 (TCP/IP connection count = 8) 2026-07-28 05:57:02 no host name found for IP address 193.193.249.106 2026-07-28 05:57:03 dovecot_login authenticator failed for H=191-37-16-226.rapeedo.net.br ([74.208.177.56]) [191.37.16.226]:60439: 535 Incorrect authentication data (set_id=annie.baricco@regente.com) 2026-07-28 05:57:03 SMTP connection from [75.97.190.237]:35299 (TCP/IP connection count = 9) 2026-07-28 05:57:03 SMTP connection from 67-6-237-24.gci.net ([192.34.164.13]) [24.237.6.67]:59614 lost D=17s 2026-07-28 05:57:03 SMTP connection from ([70.166.167.50]) [78.37.9.103]:35294 lost D=8s 2026-07-28 05:57:04 SMTP connection from 191-37-16-226.rapeedo.net.br ([74.208.177.56]) [191.37.16.226]:60439 lost D=9s 2026-07-28 05:57:05 SMTP connection from [63.78.215.208]:58572 (TCP/IP connection count = 7) 2026-07-28 05:57:05 no host name found for IP address 63.78.215.208 2026-07-28 05:57:06 dovecot_login authenticator failed for H=(molly) [75.97.190.237]:35299: 535 Incorrect authentication data (set_id=hr@sada.org.ar) 2026-07-28 05:57:06 TLS error (SSL_read): on connection from (molly) [75.97.190.237]:35299 error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac 2026-07-28 05:57:06 TLS error (SSL_write): error:140800FF:SSL routines:ssl3_accept:unknown state 2026-07-28 05:57:06 SMTP connection from (molly) [75.97.190.237]:35299 lost D=3s 2026-07-28 05:57:07 dovecot_login authenticator failed for H=(wsip-184-178-172-12.rn.hr.cox.net) [101.13.1.75]:45916: 535 Incorrect authentication data (set_id=aunchalo@fisreco.com.ar) 2026-07-28 05:57:07 1wodcU-0000000Gy71-0Ik9 H=([212.241.4.23]) [212.241.12.206]:32782 Warning: "SpamAssassin as elgaucho detected message as spam (21.9)" 2026-07-28 05:57:07 1wodcU-0000000Gy71-0Ik9 H=([212.241.4.23]) [212.241.12.206]:32782 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:57:07 SMTP connection from ([212.241.4.23]) [212.241.12.206]:32782 lost D=48s 2026-07-28 05:57:09 SMTP connection from (wsip-184-178-172-12.rn.hr.cox.net) [101.13.1.75]:45916 lost D=11s 2026-07-28 05:57:11 SMTP connection from [84.54.71.55]:23150 (TCP/IP connection count = 5) 2026-07-28 05:57:11 no host name found for IP address 84.54.71.55 2026-07-28 05:57:15 dovecot_login authenticator failed for H=(ip-199-102-107-147.hosts.zerolag.com) [63.78.215.208]:58572: 535 Incorrect authentication data (set_id=admin) 2026-07-28 05:57:16 SMTP connection from [222.140.145.129]:20017 (TCP/IP connection count = 6) 2026-07-28 05:57:16 SMTP connection from [127.0.0.1]:58728 (TCP/IP connection count = 7) 2026-07-28 05:57:17 SMTP connection from (ip-199-102-107-147.hosts.zerolag.com) [63.78.215.208]:58572 lost D=11s 2026-07-28 05:57:17 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:52271 lost D=20s 2026-07-28 05:57:17 SMTP connection from [217.154.235.104]:54583 (TCP/IP connection count = 6) 2026-07-28 05:57:18 SMTP connection from [127.0.0.1]:58728 D=2s closed by QUIT 2026-07-28 05:57:18 SMTP connection from [127.0.0.1]:42338 (TCP/IP connection count = 6) 2026-07-28 05:57:18 SMTP connection from (localhost) [127.0.0.1]:42338 D=0s closed by QUIT 2026-07-28 05:57:21 SMTP connection from [178.91.161.146]:22471 (TCP/IP connection count = 6) 2026-07-28 05:57:22 SMTP connection from [177.19.145.25]:60930 (TCP/IP connection count = 7) 2026-07-28 05:57:30 SMTP connection from [152.170.189.6]:63856 (TCP/IP connection count = 8) 2026-07-28 05:57:31 SMTP connection from [185.44.85.131]:25646 (TCP/IP connection count = 9) 2026-07-28 05:57:31 no host name found for IP address 185.44.85.131 2026-07-28 05:57:31 H=[84.54.71.55]:23150 temporarily rejected connection in "connect" ACL: "Host is ratelimited (1.9/1h max:1.2)" 2026-07-28 05:57:32 dovecot_login authenticator failed for H=([187.93.202.22]) [177.19.145.25]:60930: 535 Incorrect authentication data (set_id=aunchalo) 2026-07-28 05:57:33 SMTP connection from [213.179.75.25]:17421 (TCP/IP connection count = 9) 2026-07-28 05:57:33 SMTP connection from ([187.93.202.22]) [177.19.145.25]:60930 lost D=11s 2026-07-28 05:57:34 SMTP connection from (MarcosPC) [152.170.189.6]:63856 D=3s closed by QUIT 2026-07-28 05:57:36 SMTP connection from [185.56.156.49]:44138 (TCP/IP connection count = 8) 2026-07-28 05:57:37 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:54583 lost D=20s 2026-07-28 05:57:37 SMTP connection from [217.154.235.104]:56909 (TCP/IP connection count = 8) 2026-07-28 05:57:38 SMTP connection from [121.189.103.212]:60269 (TCP/IP connection count = 9) 2026-07-28 05:57:38 no host name found for IP address 121.189.103.212 2026-07-28 05:57:39 H=([41.191.75.50]) [41.191.75.50]:51698 F= rejected RCPT : No Such User Here" 2026-07-28 05:57:40 unexpected disconnection while reading SMTP command from ([41.191.75.50]) [41.191.75.50]:51698 D=41s 2026-07-28 05:57:43 H=([193.193.249.106]) [193.193.249.106]:58903 F= rejected RCPT : No Such User Here" 2026-07-28 05:57:43 unexpected disconnection while reading SMTP command from ([193.193.249.106]) [193.193.249.106]:58903 D=40s 2026-07-28 05:57:44 dovecot_login authenticator failed for H=host-185-56-156-49.mywic.eu ([94.16.17.139]) [185.56.156.49]:44138: 535 Incorrect authentication data (set_id=annie.baricco@regente.com) 2026-07-28 05:57:45 SMTP connection from host-185-56-156-49.mywic.eu ([94.16.17.139]) [185.56.156.49]:44138 lost D=8s 2026-07-28 05:57:45 dovecot_login authenticator failed for H=([149.54.40.94]) [121.189.103.212]:60269: 535 Incorrect authentication data (set_id=carlos@altercom.com.ar) 2026-07-28 05:57:46 SMTP connection from ([149.54.40.94]) [121.189.103.212]:60269 lost D=7s 2026-07-28 05:57:51 SMTP connection from [212.132.64.89]:36856 (TCP/IP connection count = 6) 2026-07-28 05:57:51 no host name found for IP address 212.132.64.89 2026-07-28 05:57:51 SMTP connection from [118.40.157.149]:49714 (TCP/IP connection count = 7) 2026-07-28 05:57:51 no host name found for IP address 118.40.157.149 2026-07-28 05:57:52 TLS error on connection from [118.40.157.149]:49714 (SSL_accept): (TLSv1.2) 2026-07-28 05:57:55 SMTP connection from [125.72.150.250]:34552 (TCP/IP connection count = 7) 2026-07-28 05:57:57 dovecot_login authenticator failed for H=([101.13.5.49]) [212.132.64.89]:36856: 535 Incorrect authentication data (set_id=annie.baricco@regente.com) 2026-07-28 05:57:57 H=([0.0.0.0]) [222.140.145.129]:20017 F= rejected RCPT : No Such User Here" 2026-07-28 05:57:57 unexpected disconnection while reading SMTP command from ([0.0.0.0]) [222.140.145.129]:20017 D=41s 2026-07-28 05:57:57 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:56909 lost D=20s 2026-07-28 05:57:58 SMTP connection from ([101.13.5.49]) [212.132.64.89]:36856 lost D=6s 2026-07-28 05:57:58 SMTP connection from [217.154.235.104]:59197 (TCP/IP connection count = 5) 2026-07-28 05:57:58 SMTP connection from [180.125.114.40]:9051 (TCP/IP connection count = 6) 2026-07-28 05:57:58 no host name found for IP address 180.125.114.40 2026-07-28 05:57:59 SMTP connection from [51.116.117.203]:16639 (TCP/IP connection count = 7) 2026-07-28 05:57:59 no host name found for IP address 51.116.117.203 2026-07-28 05:58:00 SMTP connection from [31.173.66.222]:58584 (TCP/IP connection count = 8) 2026-07-28 05:58:00 no host name found for IP address 31.173.66.222 2026-07-28 05:58:02 H=178.91.161.146.dynamic.telecom.kz [178.91.161.146]:22471 F= rejected RCPT : No Such User Here" 2026-07-28 05:58:02 unexpected disconnection while reading SMTP command from 178.91.161.146.dynamic.telecom.kz [178.91.161.146]:22471 D=40s 2026-07-28 05:58:03 SMTP connection from [222.140.145.129]:20398 (TCP/IP connection count = 8) 2026-07-28 05:58:05 dovecot_login authenticator failed for H=([74.119.144.57]) [51.116.117.203]:16639: 535 Incorrect authentication data (set_id=vcacciatore@joinup.com.ar) 2026-07-28 05:58:06 SMTP connection from ([74.119.144.57]) [51.116.117.203]:16639 lost D=7s 2026-07-28 05:58:07 dovecot_login authenticator failed for H=([98.178.72.4]) [31.173.66.222]:58584: 535 Incorrect authentication data (set_id=annie.baricco) 2026-07-28 05:58:08 SMTP connection from ([98.178.72.4]) [31.173.66.222]:58584 lost D=7s 2026-07-28 05:58:12 SMTP connection from [199.91.128.98]:58574 (TCP/IP connection count = 7) 2026-07-28 05:58:13 SMTP connection from [23.242.28.103]:59028 (TCP/IP connection count = 8) 2026-07-28 05:58:14 SMTP connection from [2.55.85.196]:55370 (TCP/IP connection count = 9) 2026-07-28 05:58:18 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:59197 lost D=20s 2026-07-28 05:58:18 SMTP connection from [217.154.235.104]:61415 (TCP/IP connection count = 9) 2026-07-28 05:58:18 dovecot_login authenticator failed for H=(213-66-196-11-no2550.tbcn.telia.com) [199.91.128.98]:58574: 535 Incorrect authentication data (set_id=vcacciatore) 2026-07-28 05:58:18 1woddd-0000000Gz5C-1uRW H=([185.44.85.131]) [185.44.85.131]:25646 Warning: "SpamAssassin as tejas3 detected message as spam (16.5)" 2026-07-28 05:58:18 1woddd-0000000Gz5C-1uRW H=([185.44.85.131]) [185.44.85.131]:25646 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:58:18 H=[180.125.114.40]:9051 temporarily rejected connection in "connect" ACL: "Host is ratelimited (1.7/1h max:1.2)" 2026-07-28 05:58:19 SMTP connection from ([185.44.85.131]) [185.44.85.131]:25646 lost D=47s 2026-07-28 05:58:19 1woddf-0000000Gz6S-0pR8 H=amor.smspica.com [213.179.75.25]:17421 Warning: "SpamAssassin as mauro2 detected message as NOT spam (3.8)" 2026-07-28 05:58:19 1woddf-0000000Gz6S-0pR8 <= sm.26004787764.0dbac88cc58ebcc701-commercial=safecreative.org@smgrid.com H=amor.smspica.com [213.179.75.25]:17421 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 S=37640 id=26004787764.28989133@smgrid.com26004787764 T="Acredite el intento de MASC y proteja la PI de sus clientes" for info@comignani.com 2026-07-28 05:58:19 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1woddf-0000000Gz6S-0pR8 2026-07-28 05:58:19 SMTP connection from amor.smspica.com [213.179.75.25]:17421 D=46s closed by QUIT 2026-07-28 05:58:19 SMTP connection from (213-66-196-11-no2550.tbcn.telia.com) [199.91.128.98]:58574 lost D=6s 2026-07-28 05:58:19 1woddf-0000000Gz6S-0pR8 => info R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 WH7CEStvaGqObj0AcoHInw Saved" 2026-07-28 05:58:19 1woddf-0000000Gz6S-0pR8 Completed 2026-07-28 05:58:20 dovecot_login authenticator failed for H=([184.170.245.145]) [23.242.28.103]:59028: 535 Incorrect authentication data (set_id=gabrielaferrucci@regente.com) 2026-07-28 05:58:21 SMTP connection from ([184.170.245.145]) [23.242.28.103]:59028 lost D=8s 2026-07-28 05:58:21 SMTP connection from [91.218.162.194]:57313 (TCP/IP connection count = 5) 2026-07-28 05:58:21 dovecot_login authenticator failed for H=([207.188.158.216]) [2.55.85.196]:55370: 535 Incorrect authentication data (set_id=institucional@fundacionsipas.org.ar) 2026-07-28 05:58:21 no host name found for IP address 91.218.162.194 2026-07-28 05:58:22 SMTP connection from ([207.188.158.216]) [2.55.85.196]:55370 lost D=8s 2026-07-28 05:58:25 SMTP connection from [213.230.87.43]:19436 (TCP/IP connection count = 5) 2026-07-28 05:58:29 SMTP connection from [105.160.112.170]:2218 (TCP/IP connection count = 6) 2026-07-28 05:58:29 no host name found for IP address 105.160.112.170 2026-07-28 05:58:29 SMTP connection from [187.9.247.58]:51179 (TCP/IP connection count = 7) 2026-07-28 05:58:29 SMTP connection from [187.8.64.94]:52587 (TCP/IP connection count = 8) 2026-07-28 05:58:35 SMTP connection from [178.91.95.86]:58812 (TCP/IP connection count = 9) 2026-07-28 05:58:35 no host name found for IP address 178.91.95.86 2026-07-28 05:58:38 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:61415 lost D=20s 2026-07-28 05:58:38 SMTP connection from [217.154.235.104]:63621 (TCP/IP connection count = 9) 2026-07-28 05:58:38 dovecot_login authenticator failed for H=(vipturbo.com.br) [187.8.64.94]:52587: 535 Incorrect authentication data (set_id=gabrielaferrucci) 2026-07-28 05:58:38 dovecot_login authenticator failed for H=([197.219.208.38]) [187.9.247.58]:51179: 535 Incorrect authentication data (set_id=institucional) 2026-07-28 05:58:39 SMTP connection from ([197.219.208.38]) [187.9.247.58]:51179 lost D=10s 2026-07-28 05:58:39 SMTP connection from (vipturbo.com.br) [187.8.64.94]:52587 lost D=10s 2026-07-28 05:58:40 SMTP connection from [152.170.189.6]:63857 (TCP/IP connection count = 8) 2026-07-28 05:58:44 SMTP connection from [176.64.22.240]:45519 (TCP/IP connection count = 9) 2026-07-28 05:58:44 no host name found for IP address 176.64.22.240 2026-07-28 05:58:44 H=([0.0.0.0]) [222.140.145.129]:20398 F= rejected RCPT : No Such User Here" 2026-07-28 05:58:44 unexpected disconnection while reading SMTP command from ([0.0.0.0]) [222.140.145.129]:20398 D=41s 2026-07-28 05:58:44 SMTP connection from (MarcosPC) [152.170.189.6]:63857 D=3s closed by QUIT 2026-07-28 05:58:45 SMTP connection from [133.232.78.150]:38904 (TCP/IP connection count = 8) 2026-07-28 05:58:45 SMTP connection from [174.166.153.20]:40846 (TCP/IP connection count = 9) 2026-07-28 05:58:49 dovecot_login authenticator failed for H=c-174-166-153-20.hsd1.nj.comcast.net (unhist) [174.166.153.20]:40846: 535 Incorrect authentication data (set_id=admin@qboimagen.com) 2026-07-28 05:58:49 SMTP connection from [190.104.254.91]:49299 (TCP/IP connection count = 10) 2026-07-28 05:58:49 SMTP connection from c-174-166-153-20.hsd1.nj.comcast.net (unhist) [174.166.153.20]:40846 D=3s closed by QUIT 2026-07-28 05:58:51 SMTP connection from [84.54.71.46]:40510 (TCP/IP connection count = 10) 2026-07-28 05:58:51 no host name found for IP address 84.54.71.46 2026-07-28 05:58:51 SMTP connection from [193.116.226.254]:53754 (TCP/IP connection count = 11) 2026-07-28 05:58:52 SMTP connection from [85.51.235.230]:54160 (TCP/IP connection count = 12) 2026-07-28 05:58:52 SMTP connection from [122.226.38.134]:52689 (TCP/IP connection count = 13) 2026-07-28 05:58:52 no host name found for IP address 122.226.38.134 2026-07-28 05:58:52 TLS error on connection from 193-116-226-254.tpgi.com.au [193.116.226.254]:53754 (SSL_accept): (TLSv1.2) 2026-07-28 05:58:55 SMTP connection from [206.62.136.65]:56320 (TCP/IP connection count = 13) 2026-07-28 05:58:56 TLS error on connection from [190.104.254.91]:49299 SSL_accept: TCP connection closed by peer 2026-07-28 05:58:58 SMTP connection from [213.230.92.244]:2045 (TCP/IP connection count = 13) 2026-07-28 05:58:58 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:63621 lost D=20s 2026-07-28 05:58:58 SMTP connection from [217.154.235.104]:49382 (TCP/IP connection count = 13) 2026-07-28 05:58:59 dovecot_login authenticator failed for H=([211.220.156.232]) [85.51.235.230]:54160: 535 Incorrect authentication data (set_id=sbasanez@basanezteam1.com) 2026-07-28 05:59:00 SMTP connection from ([211.220.156.232]) [85.51.235.230]:54160 lost D=7s 2026-07-28 05:59:02 SMTP connection from [120.197.69.10]:13909 (TCP/IP connection count = 13) 2026-07-28 05:59:02 SMTP connection from [177.27.76.210]:56877 (TCP/IP connection count = 14) 2026-07-28 05:59:04 SMTP connection from [79.135.251.82]:56770 (TCP/IP connection count = 15) 2026-07-28 05:59:04 no host name found for IP address 79.135.251.82 2026-07-28 05:59:04 no host name found for IP address 120.197.69.10 2026-07-28 05:59:07 H=([213.230.87.43]) [213.230.87.43]:19436 F= rejected RCPT : No Such User Here" 2026-07-28 05:59:07 unexpected disconnection while reading SMTP command from ([213.230.87.43]) [213.230.87.43]:19436 D=41s 2026-07-28 05:59:08 dovecot_login authenticator failed for H=([65.20.138.3]) [206.62.136.65]:56320: 535 Incorrect authentication data (set_id=gregorio@enguelberg.com.ar) 2026-07-28 05:59:08 1wodeR-0000000Gzbf-1vOe H=([91.218.162.194]) [91.218.162.194]:57313 Warning: "SpamAssassin as gastoncr detected message as spam (20.6)" 2026-07-28 05:59:08 1wodeR-0000000Gzbf-1vOe H=([91.218.162.194]) [91.218.162.194]:57313 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:59:09 SMTP connection from ([91.218.162.194]) [91.218.162.194]:57313 lost D=47s 2026-07-28 05:59:09 SMTP connection from ([65.20.138.3]) [206.62.136.65]:56320 lost D=13s 2026-07-28 05:59:10 SMTP connection from [167.250.4.5]:40832 (TCP/IP connection count = 13) 2026-07-28 05:59:11 SMTP connection from [27.24.141.122]:59966 (TCP/IP connection count = 14) 2026-07-28 05:59:11 no host name found for IP address 27.24.141.122 2026-07-28 05:59:11 SMTP connection from na5.servidoraweb.net (nagios2) [167.250.4.5]:40832 D=0s closed by QUIT 2026-07-28 05:59:11 dovecot_login authenticator failed for H=(188-122-37-97.xdsl.5gdsl.com) [177.27.76.210]:56877: 535 Incorrect authentication data (set_id=ttardireservas@regente.com.ar) 2026-07-28 05:59:11 SMTP connection from [13.75.44.102]:37427 (TCP/IP connection count = 14) 2026-07-28 05:59:12 SMTP connection from (188-122-37-97.xdsl.5gdsl.com) [177.27.76.210]:56877 lost D=10s 2026-07-28 05:59:12 H=() [122.226.38.134]:52689 rejected MAIL : HELO required before MAIL 2026-07-28 05:59:13 SMTP connection from () [122.226.38.134]:52689 lost D=20s 2026-07-28 05:59:13 SMTP connection from [82.194.3.122]:62664 (TCP/IP connection count = 13) 2026-07-28 05:59:13 no host name found for IP address 82.194.3.122 2026-07-28 05:59:14 SMTP connection from [186.158.30.89]:62091 (TCP/IP connection count = 14) 2026-07-28 05:59:14 dovecot_login authenticator failed for H=(48.211.41.34.bc.googleusercontent.com) [79.135.251.82]:56770: 535 Incorrect authentication data (set_id=sbasanez) 2026-07-28 05:59:15 SMTP connection from (48.211.41.34.bc.googleusercontent.com) [79.135.251.82]:56770 lost D=11s 2026-07-28 05:59:16 H=([178.91.95.86]) [178.91.95.86]:58812 Warning: "Increment Connection Ratelimit - ([178.91.95.86]) [178.91.95.86]:58812 because of RBL match" 2026-07-28 05:59:16 H=([178.91.95.86]) [178.91.95.86]:58812 F= rejected RCPT : "JunkMail rejected - ([178.91.95.86]) [178.91.95.86]:58812 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?178.91.95.86" 2026-07-28 05:59:16 SMTP connection from ([178.91.95.86]) [178.91.95.86]:58812 D=41s closed by DROP in ACL 2026-07-28 05:59:16 SMTP connection from [87.241.156.192]:24455 (TCP/IP connection count = 13) 2026-07-28 05:59:16 no host name found for IP address 87.241.156.192 2026-07-28 05:59:16 SMTP connection from [189.217.100.204]:55325 (TCP/IP connection count = 14) 2026-07-28 05:59:17 dovecot_login authenticator failed for H=(localhost) [186.158.30.89]:62091: 535 Incorrect authentication data (set_id=fabrica@myccarteles.com.ar) 2026-07-28 05:59:17 SMTP connection from [94.16.17.141]:50072 (TCP/IP connection count = 15) 2026-07-28 05:59:17 no host name found for IP address 94.16.17.141 2026-07-28 05:59:17 SMTP connection from (localhost) [186.158.30.89]:62091 D=3s closed by QUIT 2026-07-28 05:59:17 1wodeZ-0000000Gzgy-2MCR H=([105.160.112.170]) [105.160.112.170]:2218 Warning: "SpamAssassin as caepsa detected message as spam (15.0)" 2026-07-28 05:59:17 1wodeZ-0000000Gzgy-2MCR H=([105.160.112.170]) [105.160.112.170]:2218 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:59:17 SMTP connection from ([105.160.112.170]) [105.160.112.170]:2218 lost D=48s 2026-07-28 05:59:17 SMTP connection from [45.74.252.188]:54703 (TCP/IP connection count = 14) 2026-07-28 05:59:18 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:49382 lost D=20s 2026-07-28 05:59:18 SMTP connection from [111.70.3.106]:59851 (TCP/IP connection count = 14) 2026-07-28 05:59:18 SMTP connection from [217.154.235.104]:51585 (TCP/IP connection count = 15) 2026-07-28 05:59:23 dovecot_login authenticator failed for H=([70.166.167.33]) [27.24.141.122]:59966: 535 Incorrect authentication data (set_id=gregorio) 2026-07-28 05:59:24 dovecot_login authenticator failed for H=(cpc145672-oxfd28-2-0-cust818.4-3.cable.virginm.net) [94.16.17.141]:50072: 535 Incorrect authentication data (set_id=denck@tecnocomp.com.ar) 2026-07-28 05:59:24 SMTP connection from ([70.166.167.33]) [27.24.141.122]:59966 lost D=13s 2026-07-28 05:59:25 SMTP connection from (cpc145672-oxfd28-2-0-cust818.4-3.cable.virginm.net) [94.16.17.141]:50072 lost D=8s 2026-07-28 05:59:26 SMTP connection from [208.96.233.67]:51546 (TCP/IP connection count = 14) 2026-07-28 05:59:26 SMTP connection from [185.144.24.198]:43624 (TCP/IP connection count = 15) 2026-07-28 05:59:28 SMTP connection from [87.241.156.192]:24510 (TCP/IP connection count = 16) 2026-07-28 05:59:28 no host name found for IP address 87.241.156.192 2026-07-28 05:59:29 dovecot_login authenticator failed for H=111-70-3-106.emome-ip.hinet.net ([218.13.214.18]) [111.70.3.106]:59851: 535 Incorrect authentication data (set_id=jorge.gutierrez@regente.com) 2026-07-28 05:59:30 dovecot_login authenticator failed for H=208-96-233-67.resi.cgocable.ca ([24.249.199.9]) [208.96.233.67]:51546: 535 Incorrect authentication data (set_id=admin@adrianagaraban.com.ar) 2026-07-28 05:59:30 SMTP connection from 208-96-233-67.resi.cgocable.ca ([24.249.199.9]) [208.96.233.67]:51546 lost D=4s 2026-07-28 05:59:30 SMTP connection from 111-70-3-106.emome-ip.hinet.net ([218.13.214.18]) [111.70.3.106]:59851 lost D=12s 2026-07-28 05:59:31 1wodeo-0000000Gzpa-0PNB H=([176.64.22.240]) [176.64.22.240]:45519 Warning: "SpamAssassin as tecnosec detected message as spam (14.6)" 2026-07-28 05:59:31 1wodeo-0000000Gzpa-0PNB H=([176.64.22.240]) [176.64.22.240]:45519 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:59:31 H=([84.54.71.46]) [84.54.71.46]:40510 F= rejected RCPT : No Such User Here" 2026-07-28 05:59:32 SMTP connection from ([176.64.22.240]) [176.64.22.240]:45519 lost D=47s 2026-07-28 05:59:32 unexpected disconnection while reading SMTP command from ([84.54.71.46]) [84.54.71.46]:40510 D=41s 2026-07-28 05:59:32 SMTP connection from [190.210.104.203]:36092 (TCP/IP connection count = 13) 2026-07-28 05:59:33 dovecot_login authenticator failed for H=(nsg-corporate-50.101.185.122.airtel.in) [185.144.24.198]:43624: 535 Incorrect authentication data (set_id=denck) 2026-07-28 05:59:34 1wodew-0000000H0JJ-497f <= mikrotik@altercom.com.ar H=([190.210.104.203]) [190.210.104.203]:36092 P=esmtpsa X=TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128 A=dovecot_login:mikrotik@altercom.com.ar S=1169 id=f9e8f48eacb8e9bbe21f58465f74273251484d0f-1400@Facimex T="DHCP Report - Facimex #FMX" for mikrotik_metrics@altercom.com.ar 2026-07-28 05:59:34 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1wodew-0000000H0JJ-497f 2026-07-28 05:59:34 1wodew-0000000H0JJ-497f => mikrotik_metrics R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 uI/FGnZvaGqObj0AcoHInw Saved" 2026-07-28 05:59:34 1wodew-0000000H0JJ-497f Completed 2026-07-28 05:59:34 SMTP connection from (nsg-corporate-50.101.185.122.airtel.in) [185.144.24.198]:43624 lost D=7s 2026-07-28 05:59:34 SMTP connection from ([190.210.104.203]) [190.210.104.203]:36092 D=2s closed by QUIT 2026-07-28 05:59:38 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:51585 lost D=20s 2026-07-28 05:59:38 SMTP connection from [217.154.235.104]:53816 (TCP/IP connection count = 11) 2026-07-28 05:59:39 H=([213.230.92.244]) [213.230.92.244]:2045 Warning: "Increment Connection Ratelimit - ([213.230.92.244]) [213.230.92.244]:2045 because of RBL match" 2026-07-28 05:59:39 H=([213.230.92.244]) [213.230.92.244]:2045 F= rejected RCPT : "JunkMail rejected - ([213.230.92.244]) [213.230.92.244]:2045 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?213.230.92.244" 2026-07-28 05:59:39 SMTP connection from ([213.230.92.244]) [213.230.92.244]:2045 D=40s closed by DROP in ACL 2026-07-28 05:59:39 SMTP connection from [200.149.213.242]:41149 (TCP/IP connection count = 11) 2026-07-28 05:59:39 no host name found for IP address 200.149.213.242 2026-07-28 05:59:41 SMTP connection from [213.230.92.244]:32179 (TCP/IP connection count = 12) 2026-07-28 05:59:45 H=([120.239.177.68]) [120.197.69.10]:13909 F= rejected RCPT : No Such User Here" 2026-07-28 05:59:45 unexpected disconnection while reading SMTP command from ([120.239.177.68]) [120.197.69.10]:13909 D=43s 2026-07-28 05:59:46 dovecot_login authenticator failed for H=([119.204.60.250]) [200.149.213.242]:41149: 535 Incorrect authentication data (set_id=admin) 2026-07-28 05:59:47 SMTP connection from ([119.204.60.250]) [200.149.213.242]:41149 lost D=8s 2026-07-28 05:59:49 SMTP connection from [103.157.211.197]:64611 (TCP/IP connection count = 11) 2026-07-28 05:59:49 no host name found for IP address 103.157.211.197 2026-07-28 05:59:50 SMTP connection from [152.170.189.6]:63859 (TCP/IP connection count = 12) 2026-07-28 05:59:54 SMTP connection from (MarcosPC) [152.170.189.6]:63859 D=3s closed by QUIT 2026-07-28 05:59:56 SMTP connection from [39.76.239.71]:19825 (TCP/IP connection count = 12) 2026-07-28 05:59:56 no host name found for IP address 39.76.239.71 2026-07-28 05:59:57 H=([0.0.0.0]) [87.241.156.192]:24455 Warning: "Increment Connection Ratelimit - ([0.0.0.0]) [87.241.156.192]:24455 because of RBL match" 2026-07-28 05:59:57 H=([0.0.0.0]) [87.241.156.192]:24455 F= rejected RCPT : "JunkMail rejected - ([0.0.0.0]) [87.241.156.192]:24455 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?87.241.156.192" 2026-07-28 05:59:57 SMTP connection from ([0.0.0.0]) [87.241.156.192]:24455 D=40s closed by DROP in ACL 2026-07-28 05:59:58 H=urban.iweslie.com [45.74.252.188]:54703 Warning: "Increment Connection Ratelimit - urban.iweslie.com [45.74.252.188]:54703 because of RBL match" 2026-07-28 05:59:58 H=urban.iweslie.com [45.74.252.188]:54703 X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 F= rejected RCPT : "JunkMail rejected - urban.iweslie.com [45.74.252.188]:54703 is in an RBL: Blocked - see https://www.spamcop.net/bl.shtml?45.74.252.188" 2026-07-28 05:59:58 SMTP connection from urban.iweslie.com [45.74.252.188]:54703 D=40s closed by DROP in ACL 2026-07-28 05:59:58 SMTP connection from ip217.154.235-104.pbiaas.com [217.154.235.104]:53816 lost D=20s 2026-07-28 05:59:58 H=([189.217.100.204]) [189.217.100.204]:55325 F= rejected RCPT : No Such User Here" 2026-07-28 05:59:58 SMTP connection from [217.154.235.104]:56049 (TCP/IP connection count = 10) 2026-07-28 05:59:58 1wodfH-0000000H08c-2hOv H=([82.194.3.122]) [82.194.3.122]:62664 Warning: "SpamAssassin as gastoncr detected message as spam (20.6)" 2026-07-28 05:59:58 1wodfH-0000000H08c-2hOv H=([82.194.3.122]) [82.194.3.122]:62664 F= rejected after DATA: "The mail server detected your message as spam and has prevented delivery (100)." 2026-07-28 05:59:59 SMTP connection from ([82.194.3.122]) [82.194.3.122]:62664 lost D=45s 2026-07-28 05:59:59 unexpected disconnection while reading SMTP command from ([189.217.100.204]) [189.217.100.204]:55325 D=42s