diff --git a/.github/PR_TEMPLATES/pr_bugfix.yml b/.github/PR_TEMPLATES/pr_bugfix.yml new file mode 100644 index 0000000..8c03169 --- /dev/null +++ b/.github/PR_TEMPLATES/pr_bugfix.yml @@ -0,0 +1,73 @@ + + +# 🐞 Bug Summary +_Short description of the bug + user severity/impact._ + +Severity: (critical / high / medium / low) + +# πŸ” Reproduction +_Minimal steps to reproduce_ + +1. … +2. … +3. … + +**Actual result:** +_What actually happens_ + +**Expected result:** +_What should happen_ + +# 🌍 Runtime Context +- Affected version(s): +- Environment(s): (local / staging / prod) +- OS: +- Python: +- Logs/trace ID (if applicable): + +# πŸ•΅οΈ Analysis & Root Cause +_What is the root cause? How did you confirm it? Links to traces._ + +- Confirmed root cause: + +# βœ… Applied Fix +_Describe the fix precisely and why it addresses the root cause. Rejected alternatives._ + +- Affected modules: +- Risks/side effects: + +# πŸ§ͺ Tests (including regression) +- [ ] Unit test covering the case +- [ ] Integration/E2E test +- [ ] Non-regression test (bug does not reappear) + +**Manual validation procedure:** +1. … +2. … +3. Expected result: … + +# πŸš€ Deployment & Rollback +- Deployment steps: +- Rollback plan: +- Backport needed? (versions/LTS): + +# πŸ”— Links +Closes # _main issue_ +Related: _Related PR/Issues_ + +# πŸ–ΌοΈ Evidence +_Screenshots, videos, relevant logs (no secrets), minimal requests_ +- Screenshots: +- Log excerpts: + +--- + +# βœ… Project checklist +- [ ] All my commits are **signed (GPG/SSH)** in accordance with the [contribution guide](../blob/main/docs/CONTRIBUTING.md) +- [ ] `lint` passes locally and in CI +- [ ] No sensitive data exposed (credentials, tokens) +- [ ] Manual validation completed +- [ ] The added/covered tests are relevant for the feature +- [ ] User/developer documentation is up to date (where applicable) +- [ ] Security/performance impacts have been reviewed +- [ ] I have described a clear manual validation procedure \ No newline at end of file diff --git a/.github/PR_TEMPLATES/pr_ci-cd.yml b/.github/PR_TEMPLATES/pr_ci-cd.yml new file mode 100644 index 0000000..78882b6 --- /dev/null +++ b/.github/PR_TEMPLATES/pr_ci-cd.yml @@ -0,0 +1,86 @@ + + +# 🎯 Goals + +_Summarize in 2–3 sentences **why** this CI/CD PR exists and what it changes._ + +# πŸ”§ Scope of changes + +- [ ] CI/CD workflow modification (GitHub Actions) +- [ ] Template modification +- [ ] Addition/modification of tests + +## Modified CI/CD workflows and/or templates + +_If applicable, list the modified GitHub Actions workflows or templates_ + +# πŸ§ͺ Tests + +# Tests added/modified + +- [ ] Unit tests +- [ ] Integration tests +- [ ] Regression tests + +**Details:** +_Describe the test scenarios covered_ + +# Code coverage + +- [ ] Code coverage maintained or improved +- [ ] Current coverage: __% +- [ ] New coverage: __% + +# Local execution + +- [ ] Tests pass locally (`pytest` or equivalent) +- [ ] Application runs correctly locally + +# Version compatibility + +- [ ] Postfix: +- [ ] Python: +- [ ] Journald: +- [ ] Syslog: +- [ ] Debian: + +# πŸ”’ Security & permissions + +- Does this PR reduce/maintain/increase permissions? + - [ ] Reduce + - [ ] Maintain + - [ ] Increase (justify below) + +- Justification for elevated permissions (if applicable): + > … + +# 🧾 Changelog (CI/CD) + +- **Additions:** + - … +- **Modifications:** + - … +- **Deletions:** + - … + +# πŸ”— Links +Closes # _main issue_ +Related: _Related PR/Issues_ + +# πŸ“š Docs & communication + +- [ ] README / Contributing updated if the workflow changes +- [ ] Inline comments added in YAML to explain design choices +- [ ] Link to design discussion/issue (if any): ________ + +--- + +# βœ… Project checklist +- [ ] All my commits are **signed (GPG/SSH)** in accordance with the [contribution guide](../blob/main/docs/CONTRIBUTING.md) +- [ ] `lint` passes locally and in CI +- [ ] No sensitive data exposed (credentials, tokens) +- [ ] Manual validation completed +- [ ] The added/covered tests are relevant for the feature +- [ ] User/developer documentation is up to date (where applicable) +- [ ] Security/performance impacts have been reviewed +- [ ] I have described a clear manual validation procedure \ No newline at end of file diff --git a/.github/PR_TEMPLATES/pr_code.yml b/.github/PR_TEMPLATES/pr_code.yml new file mode 100644 index 0000000..242ce64 --- /dev/null +++ b/.github/PR_TEMPLATES/pr_code.yml @@ -0,0 +1,74 @@ + + +# πŸ”Ž Context +_Why this change? Problem / goal._ + +# ✨ Nature of the change +_Check what applies_ + +- [ ] Refactor (no functional change) +- [ ] Performance (optimizations) +- [ ] Chore / Tooling +- [ ] Upgrade dependencies +- [ ] Security (hardening, permissions, etc.) +- [ ] Other: + +# 🧩 Implementation details +_Impacted files/modules. Design rationale. Considered alternatives._ + +- Impacted modules: +- Key decisions: + +# πŸ›‘οΈ Impacts (Security / Privacy / Performance) +_Sensitive data? Latency/CPU/memory? Cache?_ + +- Security: +- Privacy: +- Performance: + +# πŸ” Compatibility / Breaking changes +_Any breaking change? DB migrations/API contracts?_ + +- Breaking: Yes / No +- API/contracts: +- DB migrations: + +# πŸ§ͺ Tests +- [ ] Unit +- [ ] Integration +- [ ] E2E / manual (describe below) + +**Manual validation procedure:** +1. … +2. … +3. Expected result: … + +# πŸ“š Documentation +- [ ] README / Docs updated (if needed) +- [ ] Changelog / Release notes + +# πŸ”— Dependencies & Flags +- Dependent PRs / services: +- Feature flag/toggle (if used): name, strategy, cleanup date + +# πŸ–ΌοΈ Screenshots / Evidence +_Logs, screenshots, before/after, benchmarks, profiles_ + +- Benchmarks / profiling: +- Screenshots: + +# πŸ”— Links +Closes # _main issue_ +Related: _Related PR/Issues_ + +--- + +# βœ… Project checklist +- [ ] All my commits are **signed (GPG/SSH)** in accordance with the [contribution guide](../blob/main/docs/CONTRIBUTING.md) +- [ ] `lint` passes locally and in CI +- [ ] No sensitive data exposed (credentials, tokens) +- [ ] Manual validation completed +- [ ] The added/covered tests are relevant for the feature +- [ ] User/developer documentation is up to date (where applicable) +- [ ] Security/performance impacts have been reviewed +- [ ] I have described a clear manual validation procedure \ No newline at end of file diff --git a/.github/PR_TEMPLATES/pr_docs.yml b/.github/PR_TEMPLATES/pr_docs.yml new file mode 100644 index 0000000..fe2361f --- /dev/null +++ b/.github/PR_TEMPLATES/pr_docs.yml @@ -0,0 +1,44 @@ + + +# πŸ“ Document purpose +_Summarize what changes and why (fix, addition, overhaul). + +# πŸ“š Scope +_List affected files/sections/doc sites_ + +- Files/sections: +- Target audience: (users / devs / ops) + +# πŸ” Context +_What was the problem (gap, outdated docs, ambiguity)?_ + +# βœ… Content added/modified +_Detail notable changes: new chapters, examples, diagrams, ADR, FAQ_ + +# πŸ§ͺ Verification +- [ ] Examples/commands have been tested manually +- [ ] Internal/external links work +- [ ] Code snippets compile/run (if applicable) + +# πŸ”„ Synchronization with code/product +_Which version/feature flag does this doc correspond to?_ + +# 🧹 Deprecation +_Sections removed/deprecated; redirects or archive notes_ + +# πŸ–ΌοΈ Assets +_Screenshots, diagrams, sources (draw.io/Excalidraw) + location of source files_ + +# πŸ”— Links +Closes # _main issue_ +Related: _Related PR/Issues_ + +--- + +# βœ… Project checklist +- [ ] All my commits are **signed (GPG/SSH)** in accordance with the [contribution guide](../blob/main/docs/CONTRIBUTING.md) +- [ ] Commits **signed (GPG/SSH)** +- [ ] Markdown/spell linter run (e.g., `markdownlint`, `vale`) +- [ ] Links checked (e.g., `lychee`) and images optimized +- [ ] CHANGELOG updated if needed +- [ ] Consistency with the corresponding version/feature confirmed diff --git a/.github/PR_TEMPLATES/pr_ferature.yml b/.github/PR_TEMPLATES/pr_ferature.yml new file mode 100644 index 0000000..3fd9135 --- /dev/null +++ b/.github/PR_TEMPLATES/pr_ferature.yml @@ -0,0 +1,64 @@ + + +# 🎯 Description +_What user need? What specific problem?_ + +# βœ… Proposed solution +_Summarize the solution. Describe the scope and what is explicitly out of scope._ + +# πŸ–ΌοΈ UI/UX (if applicable) +_Add BEFORE/AFTER screenshots, GIFs, videos._ + +# 🧨 Breaking changes +_Yes/No. If Yes, detail the impact and the steps for users._ +_Check all that apply_ + +- [ ] New feature (non-breaking change adding functionality) +- [ ] Breaking change (feature causing existing functionality to change) +- [ ] Refactoring (functional changes) +- [ ] Other (please describe): + +# βš™οΈ Implementation details +- Impacted modules: +- API contracts changed?: +- DB schema / migrations?: +- etc + +# πŸ›‘οΈ Security & πŸ”₯ Performance +_Points of attention: sensitive data, perf, cache, etc._ + +# πŸ§ͺ Tests +- [ ] Unit tests +- [ ] Integration tests +- [ ] Performance tests (if applicable) + +**Test coverage:** _X%_ (before) β†’ _Y%_ (after) + +**Manual validation procedure:** +1. … +2. … +3. Expected result: … + +# πŸ“š Documentation +- [ ] README / Docs updated +- [ ] Changelog / Release notes (if necessary) + +# πŸ”— Dependencies +_External services, migrations to apply before/after._ + +# πŸ”— Links +Closes # _main issue_ +Related: _Related PR/Issues_ + +--- + +# βœ… Project checklist +- [ ] All my commits are **signed (GPG/SSH)** in accordance with the [contribution guide](../blob/main/docs/CONTRIBUTING.md) +- [ ] `lint` passes locally and in CI +- [ ] No sensitive data exposed (credentials, tokens) +- [ ] Manual validation completed +- [ ] The added/covered tests are relevant for the feature +- [ ] User/developer documentation is up to date (where applicable) +- [ ] Security/performance impacts have been reviewed +- [ ] I have described a clear manual validation procedure + diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md deleted file mode 100644 index 2755257..0000000 --- a/.github/PULL_REQUEST_TEMPLATE.md +++ /dev/null @@ -1,17 +0,0 @@ -## Purpose of this PR -- [ ] Bug fix -- [ ] New feature -- [ ] Documentation -- [ ] Refactoring / Code quality - -### Description -Summarize what changes and why. - -### How to test? -Commands, configurations, test cases. - -### Checklist -- [ ] Local tests pass (`pytest`) -- [ ] Documentation/README updated if necessary -- [ ] Link to issue: Closes #123 -- [ ] No breaking changes (or documented) \ No newline at end of file diff --git a/.github/workflows/mls-ci.yml b/.github/workflows/mls-ci.yml new file mode 100644 index 0000000..6222178 --- /dev/null +++ b/.github/workflows/mls-ci.yml @@ -0,0 +1,180 @@ +name: MLS CI + +on: + pull_request: + branches: [ main, dev ] + push: + branches: [ main, dev ] + +permissions: + contents: read + pull-requests: read + +jobs: + changes: + name: Detect changes + runs-on: ubuntu-latest + outputs: + code_changed: ${{ steps.collect.outputs.code_changed }} + docs_changed: ${{ steps.collect.outputs.docs_changed }} + only_docs: ${{ steps.collect.outputs.only_docs }} + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 + + # PR: diff base/head gΓ©rΓ© automatiquement + - name: Paths filter (PR) + id: filter_pr + if: ${{ github.event_name == 'pull_request' }} + uses: dorny/paths-filter@v3 + with: + filters: | + code: + - 'src/**' + - 'app/**' + - 'lib/**' + - 'scripts/**' + - '**/*.py' + - '**/*.rs' + - '**/*.go' + - '**/*.ts' + - '**/*.js' + - '**/*.tsx' + - '**/*.jsx' + - 'tests/**' + - 'pytest.ini' + - 'pyproject.toml' + - 'setup.cfg' + - 'requirements*.txt' + - '**/*.html' + docs: + - 'docs/**' + - '**/*.md' + - '**/*.mdx' + - '**/*.txt' + - '**/*.rst' + - '**/*.yml' + - '**/*.yaml' + - '**/*.json' + - '**/*.toml' + - '**/*.cfg' + - '**/*.png' + - '**/*.jpg' + - '**/*.jpeg' + - '**/*.svg' + - '**/*.log' + - '**/*.csv' + + # PUSH: on force la base/ref du diff + - name: Paths filter (push) + id: filter_push + if: ${{ github.event_name == 'push' }} + uses: dorny/paths-filter@v3 + with: + base: ${{ github.event.before }} + ref: ${{ github.sha }} + filters: | + code: + - 'src/**' + - 'app/**' + - 'lib/**' + - 'scripts/**' + - '**/*.py' + - '**/*.rs' + - '**/*.go' + - '**/*.ts' + - '**/*.js' + - '**/*.tsx' + - '**/*.jsx' + - 'tests/**' + - 'pytest.ini' + - 'pyproject.toml' + - 'setup.cfg' + - 'requirements*.txt' + - '**/*.html' + docs: + - 'docs/**' + - '**/*.md' + - '**/*.mdx' + - '**/*.txt' + - '**/*.rst' + - '**/*.yml' + - '**/*.yaml' + - '**/*.json' + - '**/*.toml' + - '**/*.cfg' + - '**/*.png' + - '**/*.jpg' + - '**/*.jpeg' + - '**/*.svg' + - '**/*.log' + - '**/*.csv' + + # On collecte les sorties en un seul endroit (ID unique) + - name: Collect outputs + id: collect + shell: bash + run: | + if [ "${{ github.event_name }}" = "push" ]; then + CODE='${{ steps.filter_push.outputs.code }}' + DOCS='${{ steps.filter_push.outputs.docs }}' + else + CODE='${{ steps.filter_pr.outputs.code }}' + DOCS='${{ steps.filter_pr.outputs.docs }}' + fi + + echo "code_changed=$CODE" >> "$GITHUB_OUTPUT" + echo "docs_changed=$DOCS" >> "$GITHUB_OUTPUT" + + if [ "$DOCS" = "true" ] && [ "$CODE" != "true" ]; then + echo "only_docs=true" >> "$GITHUB_OUTPUT" + else + echo "only_docs=false" >> "$GITHUB_OUTPUT" + fi + + - name: Debug + run: | + echo "code=${{ steps.collect.outputs.code_changed }}" + echo "docs=${{ steps.collect.outputs.docs_changed }}" + echo "only_docs=${{ steps.collect.outputs.only_docs }}" + + + lint: + runs-on: ubuntu-latest + needs: changes + if: needs.changes.outputs.code_changed == 'true' + steps: + - uses: actions/checkout@v4 + - uses: actions/setup-python@v5 + with: { python-version: '3.11', cache: 'pip' } + - name: Install deps for lint + run: | + if [ -f requirements.txt ]; then pip install -r requirements.txt; fi + pip install ruff + - run: ruff check . + + tests: + runs-on: ubuntu-latest + needs: changes + if: needs.changes.outputs.code_changed == 'true' + steps: + - uses: actions/checkout@v4 + - uses: actions/setup-python@v5 + with: { python-version: '3.11', cache: 'pip' } + - name: Install deps for tests + run: | + if [ -f requirements.txt ]; then pip install -r requirements.txt; fi + pip install -r requirements-dev.txt || true + pip install pytest + - run: | + export PYTHONPATH=$PYTHONPATH:. + pytest --maxfail=1 --disable-warnings -q + + docs-only: + name: Docs-only fast path + runs-on: ubuntu-latest + needs: changes + if: needs.changes.outputs.only_docs == 'true' + steps: + - run: echo "Docs/meta only β†’ skipping lint/tests βœ…" diff --git a/.gitignore b/.gitignore index f0899ca..ec6919f 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,5 @@ __pycache__/ *.pyc -*.log logs/ # Test artifacts /tests/__pycache__/ diff --git a/README.md b/README.md index 170ac55..0c7bb95 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@

-A simple monitoring tool for Postfix mail servers. +Lightweight Postfix authentication watchdog - Monitor failed SASL attempts, get daily email reports, export to database.

@@ -35,348 +35,139 @@ A simple monitoring tool for Postfix mail servers. ## Table of Contents -- [Overview](#overview) -- [Quick Start](#quick-start) -- [Architecture & Visuals](#architecture--visuals) -- [Generated email](#generated-email) -- [Generated CSV Structure](#generated-csv-structure) -- [Generated logs](#generated-logs) -- [Additional features](#additional-features) -- [Full documentation](#full-documentation) -- [Contributing](#contributing) -- [Roadmap](#roadmap) -- [License](#license) -- [Support](#support) +- [🎯 What it does](#-what-it-does) +- [πŸ“‹ Prerequisites](#-prerequisites) +- [⚑ Quick Start](#-quick-start) +- [πŸ“Š Sample Output](#-sample-output) +- [πŸ’£ Basic Commands](#-basic-commands) +- [πŸ“š Documentation](#-documentation) +- [🀝 Contributing](#-contributing) +- [β›‘ Roadmap](#roadmap) +- [πŸ“„ License](#-license) +- [πŸ’– Support](#-support) --- -## Overview +## 🎯 What it does -*MailLogSentinel* monitors Postfix authentication failures. When run as a systemd service, it incrementally tails the mail logs in near-real time, normalizes each event (`timestamp`, `host`, `IP`, `username`, `reverse`, `geo/ASN` when available), and appends it to a CSV file. A separate scheduled unit sends a daily email summary built from the collected entries. +**MailLogSentinel** monitors your **Postfix** server for authentication failures in real-time: +- πŸ“Š **Tracks** failed login attempts with IP geolocation +- πŸ“§ **Sends** daily email summaries with top offenders +- πŸ’Ύ **Stores** events in CSV (+ optional SQL export) +- πŸš€ **Runs** as lightweight systemd service -No complex frameworksβ€”just Python 3 and standard libraries, plus your existing Postfix mail server. +Perfect for small to medium mail servers wanting simple, effective monitoring without complex SIEM solutions. -### How it works +## πŸ“‹ Prerequisites -- Ingestion (systemd): a long-running service tails the Postfix log and processes new lines incrementally. -- Storage (CSV): each parsed event is appended to a CSV with stable columns (see Wiki/Data Schema). -- Reporting (daily): a scheduled unit composes and emails a daily summary. +- Linux with systemd and syslog +- Python 3.10+ +- Postfix with SASL authentication +- `sudo` access for installation ---- +## ⚑ Quick Start -## Quick Start +### 1. Clone & Install -1. **Clone the repository** - ```bash +```bash git clone https://github.com/monozoide/MailLogSentinel.git cd MailLogSentinel -``` -2. **Install the script** -```bash -chmod +x bin/*.py -sudo cp bin/maillogsentinel.py /usr/local/bin/ -sudo cp bin/ipinfo.py /usr/local/bin/ -# Ensure the library is accessible, e.g., by installing it or adjusting PYTHONPATH -# For a simple system-wide install of the library (adjust paths as needed): -sudo mkdir -p /usr/local/lib/maillogsentinel -sudo cp lib/maillogsentinel/*.py /usr/local/lib/maillogsentinel/ +# Install scripts and libraries +chmod +x bin/*.py && chmod +x lib/maillogsentinel/*.py +sudo cp bin/*.py /usr/local/bin/ sudo cp -r lib/maillogsentinel /usr/local/lib/ ``` -The main script `maillogsentinel.py` includes a setup routine. - -3. **Run Initial Setup** - -MailLogSentinel offers two primary setup modes: - -* **Interactive Setup (Recommended for first-time users):** - This mode guides you through the configuration process step-by-step, asking for necessary paths, email addresses, and scheduling preferences. Progress is displayed directly in the console. - ```bash - sudo /usr/local/bin/maillogsentinel.py --setup --interactive - ``` - During this process, a detailed log is also saved to `maillogsentinel_setup.log` in the directory where you run the command. - -* **Automated/Silent Setup:** - This mode uses a pre-configured file for setup. It's useful for deployments or when you have a standard configuration. - First, you'll need a source configuration file. You can generate one by running the interactive setup on a machine or by manually creating it based on the required parameters (see `bin/maillogsentinel_setup.py` or the Wiki for details on the config structure). - ```bash - sudo /usr/local/bin/maillogsentinel.py --setup --automated /path/to/your/source_maillogsentinel.conf - ``` - Progress for automated setup is primarily logged to `maillogsentinel_setup.log`. Console output is minimal, mainly for critical errors. - -> [!WARNING] -> Read the [Wiki](https://github.com/monozoide/MailLogSentinel/wiki) for detailed information on configuration options and prerequisites before the first run. - -### Other Command-Line Options -MailLogSentinel supports several command-line arguments for various operations: +### 2. Run Interactive Setup -* `--report`: Generate and send the daily email summary. -* `--reset`: Archive existing data and reset the log processing offset. -* `--purge`: Archive all data for a complete fresh start. -* `--sql-export`: Export new log entries from the CSV file to an SQL file. This is useful for integrating with external databases or for long-term storage in a structured format. -* `--sql-import`: Import `.sql` files (generated by `--sql-export`) from the SQL export directory into a configured database. This allows for restoring data or populating a database from exported SQL files. -* `--version`: Show the script's version. -* `--help`: Show the help message. - -For more details on these options, refer to the man page (`man maillogsentinel`) or use `maillogsentinel.py --help`. - -## Progress Display - -* **Setup:** - * **Interactive:** Progress messages are printed to the console at each major step (e.g., "Saving configuration file...", "Creating directories...", "Installing Systemd unit files..."). A detailed log is kept in `maillogsentinel_setup.log`. - * **Automated:** Minimal console output. Detailed progress is logged in `maillogsentinel_setup.log`. -* **Log Extraction & Reporting:** - * When run directly (e.g., for testing or manual execution), progress and errors are printed to the console based on the configured log level. - * When run as a Systemd service (the typical production setup), all output (stdout and stderr) is directed to the Systemd journal. You can view these logs using `journalctl -u maillogsentinel.service` (for extraction) or `journalctl -u maillogsentinel-report.service` (for reporting). - * Detailed operational logs are also written to the file specified in the configuration (default: `/var/log/maillogsentinel/maillogsentinel.log`). - -## Architecture & Visuals - -```mermaid -graph LR - A[Postfix logs] --> B[MailLogSentinel] --> C[IpInfo] - C --> D[CSV File] - C --> E[Email Report] +```bash +sudo python3 /usr/local/bin/maillogsentinel.py --setup --interactive ``` -## Generated email -The email report provides a summary of failed login attempts. Here's an example: -``` -################################################## -### MailLogSentinel v1.0.5-A ### -### Extraction interval : hourly ### -### Report at 2025-05-28 10:30 ### -### Server: 192.168.1.10 (mail.example.com) ### -################################################## - -Total attempts today: 55 - -Top 10 failed authentications today: - 1. user@example.com 111.222.11.22 host.attacker.cn CN 5 times - 2. admin@example.com 22.33.44.55 another.host.ru RU 4 times - 3. testuser 123.123.1.2 unknown.host.br BR 3 times - 4. support@example.com 99.88.77.6 some.server.us US 3 times - 5. webmaster 10.20.30.40 dynamic.isp.de DE 2 times - 6. info@example.com 5.15.25.35 mail.other.net GB 2 times - 7. user.1@domain.tld 220.182.17.122 null N/A 1 times - 8. user.1 81.189.180.120 null N/A 1 times - 9. qijoxuli@domain.tld 31.25.31.12 host.example.ru RU 1 times - 10. info@domain.com 73.197.194.98 c-73-197-194-98... US 1 times - -Top 10 Usernames today: - 1. user@example.com 10 times - 2. user.1@domain.tld 6 times - 3. contact@domain.com 3 times - 4. user2@domain.tld 2 times - 5. user2 2 times - 6. info@domain.com 2 times - 7. contact 2 times - 8. other 2 times - 9. qijoxuli@domain.tld 1 times - 10. qijoxuli 1 times - -Top 10 countries today: - 1. CN 6 times - 2. RU 1 times - 3. MY 1 times - 4. AU 1 times - 5. AE 1 times - 6. BR 1 times - 7. US 1 times - 8. MD 1 times - -Top 10 ASO today: - 1. CHINA UNICOM China169 Backbone 2 times - 2. China Mobile Communications Corporation 2 times - 3. PJSC Moscow city telephone network 1 times - 4. China Unicom IP network China169 Guangdong province 1 times - 5. China Mobile 1 times - 6. Celcom Axiata Berhad 1 times - 7. AAPT Limited 1 times - 8. Hulum Almustakbal Company for Communication Engineering and Services Ltd 1 times - 9. TELEFONICA BRASIL S.A 1 times - 10. Frontier Communications of America, Inc. 1 times - -Top 10 ASN today: - 1. 4837 2 times - 2. 134810 2 times - 3. 25513 1 times - 4. 17816 1 times - 5. 9808 1 times - 6. 10030 1 times - 7. 2764 1 times - 8. 203214 1 times - 9. 18881 1 times - 10. 5650 1 times - ---- Reverse DNS Lookup Failure Summary --- -Total failed reverse lookups today: 26 -Breakdown by error type: - Errno 1 : 24 - Errno 2 : 2 - -Total CSV file size: 241.1K -Total CSV lines: 3613 - -Please see attached: maillogsentinel.csv - -For more details and documentation, visit: https://github.com/monozoide/MailLogSentinel/blob/main/README.md -``` +The setup wizard will: +- βœ… Configure paths and email settings +- βœ… Install systemd services +- βœ… Set up daily reporting schedule +- βœ… Initialize geolocation databases -## Generated CSV Structure -`reports/intrusions.csv` columns: -|server|date|ip|user|hostname|reverse_dns_status|country_code|asn|aso| -|--------|--------------------|-----------------|--------------|--------------------|---------|----|----------------------|---------| -| srv01 | 2025-05-17 11:13 | 105.73.190.126 | office@me | null | Errno 1 | CN | AAPT Limited | 134810 | -| srv01 | 2025-05-17 12:05 | 81.30.107.24 | contribute | mail.example.com | OK | US | China Mobile | 9808 | -| srv01 | 2025-05-17 13:45 | 192.0.2.45 | admin | host.example.org | OK | BR | Celcom Axiata Berhad | 18881 | +### 3. Verify Installation -Each new intrusion record is appended automatically. +```bash +# Check service status +systemctl status maillogsentinel.service -## Generated logs -``` -2025-05-29 00:00:00,315 INFO === Start of MailLogSentinel v1.0.4-B === -2025-05-28 23:50:04,990 DEBUG Read CSV line: Server='srv', Date='01/05/2025 02:28', IP='188.255.34.171', User='admin@libranet.fr', Hostname='broadband-188-255-34-171.ip.moscow.rt.ru', DNS Status='OK'. Comparing Date with '28/05/2025'. -2025-05-29 00:00:00,315 DEBUG Files to process: [PosixPath('/var/log/mail.log')], starting from offset: 1198314 -2025-05-29 00:00:00,315 INFO Processing /var/log/mail.log (gzip: False) -2025-05-29 00:00:00,316 INFO Incremental read of /var/log/mail.log from 1198314 -2025-05-29 00:00:00,351 DEBUG Using valid cached DNS entry for 206.231.72.34 (timestamp: 1748469600.351121). -2025-05-29 00:00:00,351 DEBUG Reverse lookup failed for IP 206.231.72.34: Errno 4 -2025-05-29 00:00:00,353 DEBUG Using valid cached DNS entry for 120.157.82.240 (timestamp: 1748469600.3531048). -2025-05-29 00:00:00,353 DEBUG Reverse lookup failed for IP 120.157.82.240: Errno 1 -2025-05-29 00:00:00,685 DEBUG Using valid cached DNS entry for 47.91.88.67 (timestamp: 1748469600.685305). -2025-05-29 00:00:00,685 DEBUG Reverse lookup failed for IP 47.91.88.67: Errno 2 -2025-05-29 00:00:00,924 DEBUG Using valid cached DNS entry for 36.135.62.103 (timestamp: 1748469600.9245389). -2025-05-28 23:50:05,205 INFO Report sent from admin@my_server.fqdn to admin@my_server.fqdn -2025-05-29 00:00:01,938 INFO === End of MailLogSentinel execution === +# View live logs +journalctl -fu maillogsentinel.service ``` -## Additional features - -### Log Anonymizer Script - -The `bin/log_anonymizer.py` script is a utility designed to anonymize sensitive data within log files, with a particular focus on Postfix mail logs. This is useful for sharing log excerpts for troubleshooting purposes or for archiving logs while minimizing privacy concerns. - -> [!WARNING] -> Read the [Wiki](https://github.com/monozoide/MailLogSentinel/wiki) for more informations about this feature. - -### SQL Export and Import - -MailLogSentinel now includes features to export data to SQL files and import them into a database. This is useful for: - -* **Data Archiving:** Storing intrusion data in a more robust, queryable format than CSV. -* **Integration:** Feeding data into other security information and event management (SIEM) systems or custom dashboards. -* **Backup and Restore:** Creating SQL backups of the detected intrusion attempts. - -**Key Features:** +### 4. First time run +```bash +python3 /usr/local/bin/maillogsentinel.py +```bash -* **`--sql-export`:** This option processes the existing `maillogsentinel.csv` file and exports new entries (since the last export) into an SQL file. The SQL files are typically stored in a dedicated directory specified in the configuration. -* **`--sql-import`:** This option scans the SQL export directory for `.sql` files and imports them into a configured database. The database connection parameters (type, host, name, user, password) are also managed via the MailLogSentinel configuration file. -**Configuration:** +### 5. Test email report manually +```bash +python3 /usr/local/bin/maillogsentinel.py --report +``` -The SQL export/import functionality requires additional configuration in `maillogsentinel.conf` under a new `[database]` section. This typically includes: +## πŸ“Š Sample Output -* `sql_export_dir`: Directory where SQL export files are saved. -* `db_type`: Type of the database (e.g., `postgresql`, `mysql`). -* `db_host`: Database server hostname or IP address. -* `db_name`: Database name. -* `db_user`: Database username. -* `db_password`: Database password. +[Daily email report example](docs/dataset/sample_email_report_output.txt) -Refer to the [Configuration](docs/wiki/Configuration.md) section in the Wiki for detailed setup instructions. +## πŸ’£ Basic Commands -**Usage Example:** +| Command | Description | +|---------|------------| +| `maillogsentinel --report` | Send email report now | +| `maillogsentinel --reset` | Archive data & restart monitoring | +| `maillogsentinel --version` | Show version | +| `maillogsentinel --help` | Show all options | -1. **Export data to SQL:** - ```bash - maillogsentinel --sql-export - ``` - This will create SQL files in the configured `sql_export_dir`. +## πŸ“š Documentation -2. **Import data from SQL files:** - ```bash - maillogsentinel --sql-import - ``` - This will import the SQL files into the configured database. +- **[Installation Guide](../../wiki/Setup)** - Detailed setup instructions +- **[Configuration](../../wiki/Configuration)** - All config options explained +- **[Advanced Features](../../wiki/Features)** - SQL export, log anonymization, custom reports +- **[Troubleshooting](../../wiki/Troubleshooting)** - Common issues and solutions +- **[API Documentation](../../../tree/main/docs/api)** - For developers +- **[FAQ](../../wiki/FAQ.md)** - Answers for installation, configuration, usage, troubleshooting, integrations, security, and development. +- **Manual pages:** + - [`maillogsentinel(8)`](docs/man/maillogsentinel.8.md) – overview, usage, options, diagnostics, security notes. + - [`ipinfo(1)`](docs/man/ipinfo.8.md) – command reference and examples. + - [`log_anonymizer(1)`](docs/man/log_anonymizer.8.md) – usage for redacting sensitive data in logs. -> [!NOTE] -> Ensure that the necessary database drivers are installed in your Python environment (e.g., `psycopg2-binary` for PostgreSQL, `mysql-connector-python` for MySQL) if you plan to use the `--sql-import` feature. The setup script or manual configuration should guide you on these dependencies. -### IP Information Utility (`ipinfo.py`) +## 🀝 Contributing -`ipinfo.py` is a command-line tool and library to look up IP address information, such as country, ASN (Autonomous System Number), and ASO (Autonomous System Organization), using local databases. It also includes functionality to download and update these databases. The default IP geolocation databases used by this utility are sourced from the `sapics/ip-location-db` project on GitHub by user 'sapics' and are licensed under [Creative Commons Zero (CC0)](https://creativecommons.org/publicdomain/zero/1.0/deed). You can find the repository at [https://github.com/sapics/ip-location-db](https://github.com/sapics/ip-location-db). +Contributions welcome! Please check our [Contributing Guide](https://github.com/monozoide/MailLogSentinel/wiki/How-can-I-contribute%3F). -Basic CLI usage examples: -```bash -# Update databases -bin/ipinfo.py --update +> [!CAUTION] +> The use of AI tools is permitted, provided that the contributor uses them in a reasonable manner. -# Lookup an IP address -bin/ipinfo.py 8.8.8.8 -``` -The script can be configured via `maillogsentinel.conf` to specify paths for the databases, or it will use default paths if not configured. +## Roadmap -## Full documentation -> [!IMPORTANT] -> This is just an overview of how it works and features. For full user and administrator documentation, please visit the [MailLogSentinel Wiki](https://github.com/monozoide/MailLogSentinel/wiki). +You can follow the MailLogSentinel roadmap on the project page: [MailLogSentinel Roadmap](https://github.com/users/monozoide/projects/6) -### API Documentation -For developers interested in the internal workings or wanting to contribute to the codebase, API documentation generated from the source code is available: -- [API Documentation](docs/api/maillogsentinel.html) +## πŸ“„ License -## Contributing -All contributions are welcomeβ€”code, docs, ideas, bug reports! -1. Fork πŸ–οΈ -2. Create branch: `git checkout -b feature/YourFeature` -3. Commit: `git commit -m "Add feature"` -4. Push: `git push origin feature/YourFeature` -5. Open a Pull Request πŸ“¬ +GNU GPL v3 - See [LICENSE](LICENSE) file. -## 🐣 Good First Issue Template +## πŸ’– Support -``` -πŸ› Bug or ✨ Feature Request +If you find this useful, consider supporting development: -**Description**: _Short description of the issue or feature._ +[![Liberapay receiving](https://img.shields.io/liberapay/receives/Zoide)](https://liberapay.com/Zoide/) -**Steps to Reproduce**: -1. ... -2. ... +*30% of donations are redistributed to other open source projects.* -**Expected Behavior**: _What you expected._ +--- -**Environment**: -- MailLogSentinel vX.Y.Z -- Python 3.x -- OS: e.g. Debian 11 +**Quick Links:** [Issues](https://github.com/monozoide/MailLogSentinel/issues) Β· [Wiki](https://github.com/monozoide/MailLogSentinel/wiki) Β· [Releases](https://github.com/monozoide/MailLogSentinel/releases) -**Additional Context**: _Screenshots, logs, etc._ -``` +--- -## Roadmap -You can consult the [Roadmap.md](docs/Roadmap.md) file for more information - -## License -This project is licensed under the GNU GPL v3. See [LICENSE](LICENSE) for details. - -## Support -> [!TIP] -> As a free software enthusiast, I have devoted a large part of my life to using, promoting, and defending free and open source culture in all its forms. I develop these tools as a hobby, at my own pace, but I couldn’t accomplish anything without the extraordinary OSS ecosystem that inspires me every day. -> -> To support the community, **30% of every donation** will be transparently redistributed to other open source projects. You can track the progress of these contributions and the breakdown of your support in the Wiki section of this repository, via a monthly financial report. - > -> Thank you for your trust and support! :sparkling_heart: - -> [!IMPORTANT] -> I chose [Liberapay](https://liberapay.com/) for several reasons: -> -> - Non-profit association based in France :clap: -> - Funding of donation-related fees through user donations ^^ -> - Association publishing its source code on [GitHub](https://github.com/liberapay/liberapay.com) under the [CC0](https://fr.wikipedia.org/wiki/Licence_CC0) license :heart_eyes: -> - Ability for donors to make secret, private, or public donations :ghost: -> - Opportunity for everyone to contribute to the life of the association and/or the platform :construction_worker: -> -> +> _We have no right to believe that freedom can be won without a struggle._ +Che Guevara \ No newline at end of file diff --git a/bin/maillogsentinel_setup.py b/bin/maillogsentinel_setup.py index 2ae9be4..a36ef35 100644 --- a/bin/maillogsentinel_setup.py +++ b/bin/maillogsentinel_setup.py @@ -751,7 +751,7 @@ def interactive_cli_setup(target_config_path, setup_log_fh): setup_log_fh, ) _setup_print_and_log( - f"You may need to manually perform these steps or re-run with sudo IF you want systemd integration.", + "You may need to manually perform these steps or re-run with sudo IF you want systemd integration.", setup_log_fh, ) _setup_print_and_log( @@ -965,10 +965,14 @@ def interactive_cli_setup(target_config_path, setup_log_fh): f"FATAL ERROR during interactive setup: {e_main_interactive.__class__.__name__}: {e_main_interactive}", setup_log_fh, ) - import traceback + _setup_print_and_log( + f"FATAL ERROR during interactive setup: {e_main_interactive.__class__.__name__}: {e_main_interactive}", + setup_log_fh, + ) + # import traceback # No longer needed - _setup_print_and_log(traceback.format_exc(), setup_log_fh) - return False # Indicate failure + # _setup_print_and_log(traceback.format_exc(), setup_log_fh) # No longer needed + return False return True @@ -983,13 +987,12 @@ def non_interactive_setup(source_config_path: Path, setup_log_fh): Updates global backed_up_items and created_final_paths lists. """ import sys # Ensure sys is imported for stdout - import traceback print("non_interactive_setup CALLED", flush=True) # traceback.print_stack(file=sys.stdout, limit=10) # Removed for debugging print("---", flush=True) - _setup_print_and_log(f"--- MailLogSentinel Non-Interactive Setup ---", setup_log_fh) + _setup_print_and_log("--- MailLogSentinel Non-Interactive Setup ---", setup_log_fh) if os.geteuid() != 0: _setup_print_and_log( @@ -1156,7 +1159,7 @@ def non_interactive_setup(source_config_path: Path, setup_log_fh): ) usermod_cmd = shutil.which("usermod") if not usermod_cmd: - _setup_print_and_log(f"ERROR: 'usermod' not found.", setup_log_fh) + _setup_print_and_log("ERROR: 'usermod' not found.", setup_log_fh) sys.exit(1) # Restored error try: process_result = subprocess.run( diff --git a/docs/CONTRIBUTING.md b/docs/CONTRIBUTING.md index f39d878..d67374a 100644 --- a/docs/CONTRIBUTING.md +++ b/docs/CONTRIBUTING.md @@ -1,16 +1,36 @@ -# Contributing +# Contributing Guidelines -Hey there! πŸ‘‹ -Love what you see? Greatβ€”you’re welcome to pitch in! +Thank you for your interest in contributing! -This is a small, no-fuss project, so there are no strict rules or lengthy procedures. Just: +## Quick Start -1. Fork the repo -2. Make your changes -3. Open a pull request +Want to contribute, but don't know how? There are several ways to do so. -That’s it. +Check out the [How to Contribute](../../wiki/How-can-I-contribute%3F) page on the wiki for ideas. -Got questions or need a hand? Feel free to ping me anywhere--right here, via issue, or smoke signal. 😊 +If you already know how to contribute and want to get started quickly, here are some tips: -Thanks for stopping by, and happy hacking! ❀️ \ No newline at end of file +1. **Comment on the issue** you want to work on β†’ wait for assignment +2. **Fork the specific branch** related to the issue (GitHub fork options) +3. **Sign your commits** with GPG/SSH ([setup guide](https://docs.github.com/en/authentication/managing-commit-signature-verification)) +4. **Validate your work** following the issue's "How to validate" section +5. **Open a PR** with a clear description + +## Recommendations + +The following is highly recommended: + +- Sign your commits (GP or SSH) +- Always review the results of AI tools +- Make sure the lints and tests pass green +- Follow the validation steps indicated in the issue + +## Questions? + +- **Technical**: Comment on the issue +- **General**: Use [Discussions](../../discussions) +- **Unclear instructions**: Ask before coding, never guess +- Need more details? ➑️ [CONTRIBUTING_DETAILED.md](./docs/CONTRIBUTING_DETAILED.md) + + +Thank you! πŸš€ \ No newline at end of file diff --git a/docs/CONTRIBUTING_DETAILED.md b/docs/CONTRIBUTING_DETAILED.md new file mode 100644 index 0000000..61ae829 --- /dev/null +++ b/docs/CONTRIBUTING_DETAILED.md @@ -0,0 +1,145 @@ +# Contributing Guidelines (Detailed) + +This document expands on [CONTRIBUTING.md](../docs/CONTRIBUTING.md). Read the short version first. + +## Table of Contents + +- [Complete Workflow](#complete-workflow) +- [Commit Signature Setup](#commit-signature-setup) +- [Quality Standards](#quality-standards) +- [Code Contributions](#code-contributions) +- [Documentation Contributions](#documentation-contributions) +- [Questions?](#questions) + +## Complete Workflow + +### 1. Claim the Issue + +**Why:** Prevents duplicate work and lets maintainers track active contributors. + +**How:** +``` +Comment: "I'd like to work on this" or "Can I take this issue?" +``` + +> [!WARNING] +> Wait for a maintainer to assign you. **Do not start work before assignment.** + +**Rules:** +- One issue per contributor at a time +- If assigned but can't complete within 7 days, comment to release the issue +- Abandoned issues (no activity for 10 days) will be unassigned + +### 2. Fork the Repository + +**Use GitHub's branch-specific fork:** + +1. Click "Fork" on the repository +2. **Uncheck** "Copy the main branch only" +3. **Select only the branch** mentioned in the issue (e.g., `feature/issue-123`) +4. Complete the fork + +**Why:** Keeps your fork clean, makes rebasing easier, reduces merge conflicts. + +**If the issue doesn't specify a branch:** Wait for a maintainer to assign you. **Do not start work before assignment.** + +### 3. Understand the Context + +Before coding: + +- Read the **entire issue description** +- Check linked PRs or related issues +- Review existing code patterns (file structure, naming conventions, test style) +- Run the project locally to understand current behavior + +**If anything is unclear:** +- Comment on the issue with specific questions +- Use [Discussions](../../../discussions) for broader topics +- **Never make assumptions** β€” asking takes 5 minutes, fixing wrong assumptions takes hours + +### 4. Development + +**General rules:** +- Follow existing code style (indentation, naming, structure) +- Keep changes focused on the issue scope +- Commit frequently with clear messages +- **Sign every commit** + +**Before pushing:** + +- **Run linting** + +- **Run tests** + +- **Check commit signatures** + +## Commit Signature Setup + +**All commits must be signed with GPG or SSH.**. + +**Full guide:** https://docs.github.com/en/authentication/managing-commit-signature-verification + +**SSH alternative:** https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits + +## Quality Standards + +### What "Minimum Effort" Means + +**We reject:** +- Unmodified AI-generated code (100% copy-paste from ChatGPT, Copilot, etc.) +- Code that doesn't work (untested, fails CI) +- Generic fixes that don't address the specific issue +- PRs with no description or context + +**We accept:** +- AI-assisted code that you've tested, understood, and adapted +- Solutions that show problem-solving thought process +- Code with explanatory comments for complex logic + +## Code Contributions + +### Requirements Checklist + +- [ ] Linting passes +- [ ] All tests pass +- [ ] New tests added for new functionality (minimum 80% coverage for new code) +- [ ] No breaking changes (or documented in PR) +- [ ] Commits are signed +- [ ] Branch is up-to-date with base branch + +### Testing Standards + +**Unit tests:** +- Test happy path + edge cases +- Mock external dependencies +- Use descriptive test names + +**Integration tests (if applicable):** +- Test actual behavior, not implementation +- Cover error scenarios + +## Documentation Contributions + +**Requirements:** +- Follow existing Markdown style (headers, lists, code blocks) +- Verify all links work (`markdown-link-check` if available) +- Test code examples in a real environment +- Still require signed commits + +**Structure:** +- Use clear headers (H2 for sections, H3 for subsections) +- Add code examples with language tags (`python`, `bash`) +- Include "Before/After" comparisons for changes + +## Questions? + +- **"Can I work on multiple issues?"** β†’ No, one at a time until you have 3+ merged PRs +- **"How long until my PR is reviewed?"** β†’ Usually 2-5 days, ping me after 5 days +- **"Can I use AI tools?"** β†’ Yes, but you must understand and test the code +- **"What if I can't finish?"** β†’ Comment on the issue to release it + +**Still have questions?** Use [Discussions](../../../discussions) or comment on the issue. + +--- + +Thank you for taking the time to contribute properly! These guidelines exist to keep the project maintainable and ensure everyone's time is respected. We appreciate your effort. πŸš€ \ No newline at end of file diff --git a/docs/dataset/sample_email_report_output.txt b/docs/dataset/sample_email_report_output.txt new file mode 100644 index 0000000..69f1f66 --- /dev/null +++ b/docs/dataset/sample_email_report_output.txt @@ -0,0 +1,79 @@ +################################################## +### MailLogSentinel v1.0.5-A ### +### Extraction interval : hourly ### +### Report at 2025-05-28 10:30 ### +### Server: 192.168.1.10 (mail.example.com) ### +################################################## + +Total attempts today: 55 + +Top 10 failed authentications today: + 1. user@example.com 111.222.11.22 host.attacker.cn CN 5 times + 2. admin@example.com 22.33.44.55 another.host.ru RU 4 times + 3. testuser 123.123.1.2 unknown.host.br BR 3 times + 4. support@example.com 99.88.77.6 some.server.us US 3 times + 5. webmaster 10.20.30.40 dynamic.isp.de DE 2 times + 6. info@example.com 5.15.25.35 mail.other.net GB 2 times + 7. user.1@domain.tld 220.182.17.122 null N/A 1 times + 8. user.1 81.189.180.120 null N/A 1 times + 9. qijoxuli@domain.tld 31.25.31.12 host.example.ru RU 1 times + 10. info@domain.com 73.197.194.98 c-73-197-194-98... US 1 times + +Top 10 Usernames today: + 1. user@example.com 10 times + 2. user.1@domain.tld 6 times + 3. contact@domain.com 3 times + 4. user2@domain.tld 2 times + 5. user2 2 times + 6. info@domain.com 2 times + 7. contact 2 times + 8. other 2 times + 9. qijoxuli@domain.tld 1 times + 10. qijoxuli 1 times + +Top 10 countries today: + 1. CN 6 times + 2. RU 1 times + 3. MY 1 times + 4. AU 1 times + 5. AE 1 times + 6. BR 1 times + 7. US 1 times + 8. MD 1 times + +Top 10 ASO today: + 1. CHINA UNICOM China169 Backbone 2 times + 2. China Mobile Communications Corporation 2 times + 3. PJSC Moscow city telephone network 1 times + 4. China Unicom IP network China169 Guangdong province 1 times + 5. China Mobile 1 times + 6. Celcom Axiata Berhad 1 times + 7. AAPT Limited 1 times + 8. Hulum Almustakbal Company for Communication Engineering and Services Ltd 1 times + 9. TELEFONICA BRASIL S.A 1 times + 10. Frontier Communications of America, Inc. 1 times + +Top 10 ASN today: + 1. 4837 2 times + 2. 134810 2 times + 3. 25513 1 times + 4. 17816 1 times + 5. 9808 1 times + 6. 10030 1 times + 7. 2764 1 times + 8. 203214 1 times + 9. 18881 1 times + 10. 5650 1 times + +--- Reverse DNS Lookup Failure Summary --- +Total failed reverse lookups today: 26 +Breakdown by error type: + Errno 1 : 24 + Errno 2 : 2 + +Total CSV file size: 241.1K +Total CSV lines: 3613 + +Please see attached: maillogsentinel.csv + +For more details and documentation, visit: https://github.com/monozoide/MailLogSentinel \ No newline at end of file diff --git a/docs/dataset/sample_mail.log b/docs/dataset/sample_mail.log new file mode 100644 index 0000000..9a42dc2 --- /dev/null +++ b/docs/dataset/sample_mail.log @@ -0,0 +1,2797 @@ +Jun 1 00:00:45 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_1]:49080 to [anon_ip_2]:25 +Jun 1 00:00:45 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_1]:49090 to [anon_ip_2]:25 +Jun 1 00:00:46 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:49080 +Jun 1 00:00:46 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:49090 +Jun 1 00:00:46 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_1]:49104 to [anon_ip_2]:25 +Jun 1 00:00:46 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:49104 +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021378]: connect from anon_hostname_4[anon_ip_1] +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021381]: connect from anon_hostname_4[anon_ip_1] +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021380]: connect from anon_hostname_4[anon_ip_1] +Jun 1 00:00:46 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_1]:49112 to [anon_ip_2]:25 +Jun 1 00:00:46 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:49112 +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021385]: connect from anon_hostname_4[anon_ip_1] +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021378]: 4b8vDt2nzlz2FQl: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 00:00:46 anon_server_1 postfix/cleanup[2021398]: 4b8vDt2nzlz2FQl: message-anon_hostname_7= +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021380]: 4b8vDt2zGhz2GyW: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 00:00:46 anon_server_1 postfix/qmgr[1740239]: 4b8vDt2nzlz2FQl: from=, anon_hostname_8=57276, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021381]: 4b8vDt32hDz2H2J: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021378]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:46 anon_server_1 postfix/cleanup[2021398]: 4b8vDt32hDz2H2J: message-anon_hostname_7= +Jun 1 00:00:46 anon_server_1 postfix/cleanup[2021400]: 4b8vDt2zGhz2GyW: message-anon_hostname_7= +Jun 1 00:00:46 anon_server_1 postfix/qmgr[1740239]: 4b8vDt2zGhz2GyW: from=, anon_hostname_8=5834, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021380]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:46 anon_server_1 postfix/qmgr[1740239]: 4b8vDt32hDz2H2J: from=, anon_hostname_8=93759, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021381]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021385]: 4b8vDt3L5kz2H2X: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 00:00:46 anon_server_1 postfix/cleanup[2021400]: 4b8vDt3L5kz2H2X: message-anon_hostname_7= +Jun 1 00:00:46 anon_server_1 amavis[1988516]: (1988516-04) anon_hostname_19: anon_hostname_20 anon_hostname_21 anon_hostname_22 to: anon_hostname_23=2006, anon_hostname_24, anon_hostname_25::anon_hostname_26::anon_hostname_27 anon_hostname_28 anon_hostname_29: anon_hostname_30 anon_hostname_31 anon_hostname_32 anon_hostname_33 anon_hostname_34 anon_hostname_35 (anon_hostname_36 97) anon_hostname_37 173. +Jun 1 00:00:46 anon_server_1 postfix/qmgr[1740239]: 4b8vDt3L5kz2H2X: from=, anon_hostname_8=15253, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:46 anon_server_1 postfix/smtpd[2021385]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:46 anon_server_1 amavis[1988518]: (1988518-05) anon_hostname_19: anon_hostname_20 anon_hostname_21 anon_hostname_22 to: anon_hostname_23=2006, anon_hostname_24, anon_hostname_25::anon_hostname_26::anon_hostname_27 anon_hostname_28 anon_hostname_29: anon_hostname_30 anon_hostname_31 anon_hostname_32 anon_hostname_33 anon_hostname_34 anon_hostname_35 (anon_hostname_36 97) anon_hostname_37 173, anon_hostname_37 21610. +Jun 1 00:00:46 anon_server_1 amavis[1988515]: (1988515-05) anon_hostname_19: anon_hostname_20 anon_hostname_21 anon_hostname_22 to: anon_hostname_23=2006, anon_hostname_24, anon_hostname_25::anon_hostname_26::anon_hostname_27 anon_hostname_28 anon_hostname_29: anon_hostname_30 anon_hostname_31 anon_hostname_32 anon_hostname_33 anon_hostname_34 anon_hostname_35 (anon_hostname_36 97) anon_hostname_37 173. +Jun 1 00:00:47 anon_server_1 postfix/10025/smtpd[2021425]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:00:47 anon_server_1 postfix/10025/smtpd[2021425]: 4b8vDv5pWbz2H2x: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:00:47 anon_server_1 postfix/cleanup[2021398]: 4b8vDv5pWbz2H2x: message-anon_hostname_7= +Jun 1 00:00:47 anon_server_1 postfix/10025/smtpd[2021425]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:47 anon_server_1 postfix/qmgr[1740239]: 4b8vDv5pWbz2H2x: from=, anon_hostname_8=6602, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:47 anon_server_1 amavis[1988518]: (1988518-05) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:49090 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:49090), anon_hostname_46: 4b8vDt2zGhz2GyW, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_49, b: anon_hostname_50, anon_hostname_51: 2.6, anon_hostname_8: 5799, anon_hostname_52: 4b8vDv5pWbz2H2x, anon_hostname_53: "anon_subject_1", anon_hostname_54: , anon_hostname_55: anon_hostname_56(anon_hostname_57.5), helo=anon_hostname_4, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001,anon_hostname_61=0.001,anon_hostname_62=2.497,anon_hostname_63=0.1], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=2.6, 1330 anon_hostname_68 +Jun 1 00:00:47 anon_server_1 postfix/amavis/smtp[2021410]: 4b8vDt2zGhz2GyW: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=1.7, anon_hostname_71=0.27/0.05/0.01/1.3, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vDv5pWbz2H2x) +Jun 1 00:00:47 anon_server_1 postfix/qmgr[1740239]: 4b8vDt2zGhz2GyW: anon_hostname_80 +Jun 1 00:00:48 anon_server_1 postfix/pipe[2021426]: 4b8vDv5pWbz2H2x: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.22, anon_hostname_71=0.01/0.04/0/0.17, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:00:48 anon_server_1 postfix/qmgr[1740239]: 4b8vDv5pWbz2H2x: anon_hostname_80 +Jun 1 00:00:49 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_1]:45694 to [anon_ip_2]:25 +Jun 1 00:00:49 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:45694 +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021378]: connect from anon_hostname_4[anon_ip_1] +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021378]: 4b8vDx1DS6z21DV: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 00:00:49 anon_server_1 postfix/cleanup[2021407]: 4b8vDx1DS6z21DV: message-anon_hostname_7= +Jun 1 00:00:49 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_1]:45696 to [anon_ip_2]:25 +Jun 1 00:00:49 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:45696 +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021380]: connect from anon_hostname_4[anon_ip_1] +Jun 1 00:00:49 anon_server_1 postfix/qmgr[1740239]: 4b8vDx1DS6z21DV: from=, anon_hostname_8=1950171, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021378]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:49 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_1]:45706 to [anon_ip_2]:25 +Jun 1 00:00:49 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:45706 +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021381]: connect from anon_hostname_4[anon_ip_1] +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021380]: 4b8vDx2vjnz2H2x: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 00:00:49 anon_server_1 postfix/cleanup[2021400]: 4b8vDx2vjnz2H2x: message-anon_hostname_7= +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021381]: 4b8vDx3DjMz2H5H: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 00:00:49 anon_server_1 postfix/cleanup[2021398]: 4b8vDx3DjMz2H5H: message-anon_hostname_7= +Jun 1 00:00:49 anon_server_1 postfix/qmgr[1740239]: 4b8vDx2vjnz2H2x: from=, anon_hostname_8=58031, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021380]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:49 anon_server_1 postfix/qmgr[1740239]: 4b8vDx3DjMz2H5H: from=, anon_hostname_8=5211, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:49 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_1]:45716 to [anon_ip_2]:25 +Jun 1 00:00:49 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:45716 +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021385]: connect from anon_hostname_4[anon_ip_1] +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021385]: 4b8vDx4TCyz2H31: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 00:00:49 anon_server_1 postfix/cleanup[2021407]: 4b8vDx4TCyz2H31: message-anon_hostname_7= +Jun 1 00:00:49 anon_server_1 postfix/qmgr[1740239]: 4b8vDx4TCyz2H31: from=, anon_hostname_8=55615, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:49 anon_server_1 postfix/smtpd[2021385]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:49 anon_server_1 postfix/10025/smtpd[2021425]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:00:49 anon_server_1 postfix/10025/smtpd[2021425]: 4b8vDx5bnTz2H5Q: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:00:49 anon_server_1 postfix/cleanup[2021400]: 4b8vDx5bnTz2H5Q: message-anon_hostname_7= +Jun 1 00:00:49 anon_server_1 postfix/10025/smtpd[2021425]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:49 anon_server_1 postfix/qmgr[1740239]: 4b8vDx5bnTz2H5Q: from=, anon_hostname_8=15762, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:49 anon_server_1 amavis[1988517]: (1988517-05) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:49112 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:49112), anon_hostname_46: 4b8vDt3L5kz2H2X, Message-anon_hostname_47: , anon_hostname_48: 3yXHfNjR4vbb, b: anon_hostname_85, anon_hostname_51: 0.502, anon_hostname_8: 15220, anon_hostname_52: 4b8vDx5bnTz2H5Q, anon_hostname_53: "anon_subject_2", anon_hostname_54: , anon_hostname_55: anon_hostname_56(anon_hostname_57.5), helo=anon_hostname_4, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001,anon_hostname_86=0.5], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 3269 anon_hostname_68 +Jun 1 00:00:49 anon_server_1 postfix/amavis/smtp[2021413]: 4b8vDt3L5kz2H2X: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=3.5, anon_hostname_71=0.23/0.04/0.01/3.3, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vDx5bnTz2H5Q) +Jun 1 00:00:49 anon_server_1 postfix/qmgr[1740239]: 4b8vDt3L5kz2H2X: anon_hostname_80 +Jun 1 00:00:49 anon_server_1 postfix/pipe[2021426]: 4b8vDx5bnTz2H5Q: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.15, anon_hostname_71=0.01/0/0/0.15, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:00:49 anon_server_1 postfix/qmgr[1740239]: 4b8vDx5bnTz2H5Q: anon_hostname_80 +Jun 1 00:00:49 anon_server_1 postfix/10025/smtpd[2021425]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:00:50 anon_server_1 postfix/10025/smtpd[2021425]: 4b8vDy00Wvz2H5Q: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:00:50 anon_server_1 postfix/cleanup[2021398]: 4b8vDy00Wvz2H5Q: message-anon_hostname_7= +Jun 1 00:00:50 anon_server_1 postfix/10025/smtpd[2021425]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:50 anon_server_1 postfix/qmgr[1740239]: 4b8vDy00Wvz2H5Q: from=, anon_hostname_8=94270, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:50 anon_server_1 amavis[1988515]: (1988515-05) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:49104 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:49104), anon_hostname_46: 4b8vDt32hDz2H2J, Message-anon_hostname_47: , anon_hostname_48: 4N27SECWnnY1, b: anon_hostname_88, anon_hostname_51: 0.002, anon_hostname_8: 93752, anon_hostname_52: 4b8vDy00Wvz2H5Q, anon_hostname_53: "anon_subject_3", anon_hostname_54: , anon_hostname_55: anon_hostname_56(anon_hostname_57.5), helo=anon_hostname_4, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 3496 anon_hostname_68 +Jun 1 00:00:50 anon_server_1 postfix/amavis/smtp[2021412]: 4b8vDt32hDz2H2J: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=3.8, anon_hostname_71=0.26/0.06/0/3.5, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vDy00Wvz2H5Q) +Jun 1 00:00:50 anon_server_1 postfix/qmgr[1740239]: 4b8vDt32hDz2H2J: anon_hostname_80 +Jun 1 00:00:50 anon_server_1 postfix/pipe[2021426]: 4b8vDy00Wvz2H5Q: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.17, anon_hostname_71=0.01/0/0/0.16, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:00:50 anon_server_1 postfix/qmgr[1740239]: 4b8vDy00Wvz2H5Q: anon_hostname_80 +Jun 1 00:00:50 anon_server_1 postfix/10025/smtpd[2021425]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:00:50 anon_server_1 postfix/10025/smtpd[2021425]: 4b8vDy4JRlz2H5G: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:00:50 anon_server_1 postfix/cleanup[2021407]: 4b8vDy4JRlz2H5G: message-anon_hostname_7= +Jun 1 00:00:50 anon_server_1 postfix/qmgr[1740239]: 4b8vDy4JRlz2H5G: from=, anon_hostname_8=5979, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:50 anon_server_1 amavis[1988515]: (1988515-06) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:45706 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:45706), anon_hostname_46: 4b8vDx3DjMz2H5H, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_89, b: 9TpPw8Nc3, anon_hostname_51: 2.6, anon_hostname_8: 5200, anon_hostname_52: 4b8vDy4JRlz2H5G, anon_hostname_53: "anon_subject_4", anon_hostname_54: , anon_hostname_55: anon_hostname_56(anon_hostname_57.5), helo=anon_hostname_4, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001,anon_hostname_61=0.001,anon_hostname_62=2.497,anon_hostname_63=0.1], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=2.6, 586 anon_hostname_68 +Jun 1 00:00:50 anon_server_1 postfix/amavis/smtp[2021412]: 4b8vDx3DjMz2H5H: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=1.3, anon_hostname_71=0.11/0.55/0/0.6, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vDy4JRlz2H5G) +Jun 1 00:00:50 anon_server_1 postfix/qmgr[1740239]: 4b8vDx3DjMz2H5H: anon_hostname_80 +Jun 1 00:00:50 anon_server_1 postfix/pipe[2021426]: 4b8vDy4JRlz2H5G: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.15, anon_hostname_71=0.01/0/0/0.14, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:00:50 anon_server_1 postfix/qmgr[1740239]: 4b8vDy4JRlz2H5G: anon_hostname_80 +Jun 1 00:00:51 anon_server_1 postfix/10025/smtpd[2021439]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:00:51 anon_server_1 postfix/10025/smtpd[2021439]: 4b8vDz0y4xz2H5G: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:00:51 anon_server_1 postfix/cleanup[2021400]: 4b8vDz0y4xz2H5G: message-anon_hostname_7= +Jun 1 00:00:51 anon_server_1 postfix/qmgr[1740239]: 4b8vDz0y4xz2H5G: from=, anon_hostname_8=58091, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:51 anon_server_1 postfix/10025/smtpd[2021439]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:00:51 anon_server_1 amavis[1988516]: (1988516-04) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:49080 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:49080), anon_hostname_46: 4b8vDt2nzlz2FQl, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_90, b: anon_hostname_91, anon_hostname_51: 5.655, anon_hostname_8: 57009, anon_hostname_52: 4b8vDz0y4xz2H5G, anon_hostname_53: "anon_subject_5", anon_hostname_54: , anon_hostname_55: anon_hostname_56(anon_hostname_57.5), helo=anon_hostname_4, anon_hostname_58: [anon_hostname_92=2.555,anon_hostname_59=0.001,anon_hostname_60=0.001,anon_hostname_61=0.001,anon_hostname_62=2.497,anon_hostname_93=0.1,anon_hostname_86=0.5], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=5.155, 4680 anon_hostname_68 +Jun 1 00:00:51 anon_server_1 postfix/amavis/smtp[2021408]: 4b8vDt2nzlz2FQl: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=5, anon_hostname_71=0.25/0.04/0.01/4.7, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vDz0y4xz2H5G) +Jun 1 00:00:51 anon_server_1 postfix/qmgr[1740239]: 4b8vDt2nzlz2FQl: anon_hostname_80 +Jun 1 00:00:51 anon_server_1 postfix/pipe[2021426]: 4b8vDz0y4xz2H5G: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.15, anon_hostname_71=0.01/0/0/0.14, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:00:51 anon_server_1 postfix/qmgr[1740239]: 4b8vDz0y4xz2H5G: anon_hostname_80 +Jun 1 00:00:51 anon_server_1 postfix/smtpd[2021381]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_18=4 +Jun 1 00:00:53 anon_server_1 postfix/10025/smtpd[2021425]: 4b8vF14V3Lz2H5G: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:00:53 anon_server_1 postfix/cleanup[2021398]: 4b8vF14V3Lz2H5G: message-anon_hostname_7= +Jun 1 00:00:53 anon_server_1 postfix/qmgr[1740239]: 4b8vF14V3Lz2H5G: from=, anon_hostname_8=56124, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:53 anon_server_1 amavis[1988515]: (1988515-06-2) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:45716 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:45716), anon_hostname_46: 4b8vDx4TCyz2H31, Message-anon_hostname_47: , anon_hostname_48: 1vnfsP_mlLaQ, b: anon_hostname_94, anon_hostname_51: 0.002, anon_hostname_8: 55609, anon_hostname_52: 4b8vF14V3Lz2H5G, anon_hostname_53: "anon_subject_6", anon_hostname_54: , anon_hostname_55: anon_hostname_56(anon_hostname_57.5), helo=anon_hostname_4, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 3011 anon_hostname_68 +Jun 1 00:00:53 anon_server_1 postfix/amavis/smtp[2021412]: 4b8vDx4TCyz2H31: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_95=2, anon_hostname_70=4.1, anon_hostname_71=0.06/1/0/3, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vF14V3Lz2H5G) +Jun 1 00:00:53 anon_server_1 postfix/qmgr[1740239]: 4b8vDx4TCyz2H31: anon_hostname_80 +Jun 1 00:00:53 anon_server_1 postfix/pipe[2021426]: 4b8vF14V3Lz2H5G: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.09, anon_hostname_71=0.01/0/0/0.08, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:00:53 anon_server_1 postfix/qmgr[1740239]: 4b8vF14V3Lz2H5G: anon_hostname_80 +Jun 1 00:00:56 anon_server_1 postfix/10025/smtpd[2021439]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:00:56 anon_server_1 postfix/10025/smtpd[2021439]: 4b8vF45LCVz2H5G: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:00:56 anon_server_1 postfix/cleanup[2021407]: 4b8vF45LCVz2H5G: message-anon_hostname_7= +Jun 1 00:00:56 anon_server_1 postfix/qmgr[1740239]: 4b8vF45LCVz2H5G: from=, anon_hostname_8=1950992, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:56 anon_server_1 amavis[1988518]: (1988518-06) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:45694 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:45694), anon_hostname_46: 4b8vDx1DS6z21DV, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_96, b: anon_hostname_97, anon_hostname_51: 5.556, anon_hostname_8: 1938639, anon_hostname_52: 4b8vF45LCVz2H5G, anon_hostname_53: "anon_subject_7", anon_hostname_54: , anon_hostname_55: anon_hostname_56(anon_hostname_57.5), helo=anon_hostname_4, anon_hostname_58: [anon_hostname_92=2.555,anon_hostname_59=0.001,anon_hostname_60=0.001,anon_hostname_98=0.001,anon_hostname_61=0.001,anon_hostname_62=2.497,anon_hostname_86=0.5], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=5.056, 7492 anon_hostname_68 +Jun 1 00:00:56 anon_server_1 postfix/amavis/smtp[2021410]: 4b8vDx1DS6z21DV: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=7.7, anon_hostname_71=0.2/0/0/7.5, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vF45LCVz2H5G) +Jun 1 00:00:56 anon_server_1 postfix/qmgr[1740239]: 4b8vDx1DS6z21DV: anon_hostname_80 +Jun 1 00:00:56 anon_server_1 postfix/pipe[2021426]: 4b8vF45LCVz2H5G: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.16, anon_hostname_71=0.06/0/0/0.1, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:00:56 anon_server_1 postfix/qmgr[1740239]: 4b8vF45LCVz2H5G: anon_hostname_80 +Jun 1 00:00:58 anon_server_1 postfix/10025/smtpd[2021452]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:00:58 anon_server_1 postfix/10025/smtpd[2021452]: 4b8vF64GrCz2H5G: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:00:58 anon_server_1 postfix/cleanup[2021400]: 4b8vF64GrCz2H5G: message-anon_hostname_7= +Jun 1 00:00:58 anon_server_1 postfix/qmgr[1740239]: 4b8vF64GrCz2H5G: from=, anon_hostname_8=58842, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:00:58 anon_server_1 amavis[1988517]: (1988517-06) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:45696 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:45696), anon_hostname_46: 4b8vDx2vjnz2H2x, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_99, b: anon_hostname_100, anon_hostname_51: 5.655, anon_hostname_8: 57767, anon_hostname_52: 4b8vF64GrCz2H5G, anon_hostname_53: "anon_subject_8", anon_hostname_54: , anon_hostname_55: anon_hostname_56(anon_hostname_57.5), helo=anon_hostname_4, anon_hostname_58: [anon_hostname_92=2.555,anon_hostname_59=0.001,anon_hostname_60=0.001,anon_hostname_61=0.001,anon_hostname_62=2.497,anon_hostname_63=0.1,anon_hostname_86=0.5], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=5.155, 8784 anon_hostname_68 +Jun 1 00:00:58 anon_server_1 postfix/amavis/smtp[2021413]: 4b8vDx2vjnz2H2x: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=9.3, anon_hostname_71=0.14/0.35/0.02/8.8, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vF64GrCz2H5G) +Jun 1 00:00:58 anon_server_1 postfix/qmgr[1740239]: 4b8vDx2vjnz2H2x: anon_hostname_80 +Jun 1 00:00:58 anon_server_1 postfix/pipe[2021426]: 4b8vF64GrCz2H5G: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.08, anon_hostname_71=0.01/0/0/0.06, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:00:58 anon_server_1 postfix/qmgr[1740239]: 4b8vF64GrCz2H5G: anon_hostname_80 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_4]:53448 to [anon_ip_2]:25 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_4]:53456 to [anon_ip_2]:25 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:53448 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:53456 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021378]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021380]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_4]:53466 to [anon_ip_2]:25 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:53466 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021385]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_4]:53470 to [anon_ip_2]:25 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:53470 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021381]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021378]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021380]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021385]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021381]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_4]:53472 to [anon_ip_2]:25 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:53472 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021385]: 4b8vFB4398z2H5G: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/cleanup[2021398]: 4b8vFB4398z2H5G: message-anon_hostname_7= +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_4]:53476 to [anon_ip_2]:25 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:53476 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021488]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021380]: 4b8vFB4RvBz2H5Q: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/cleanup[2021407]: 4b8vFB4RvBz2H5Q: message-anon_hostname_7= +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021494]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021488]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021381]: 4b8vFB4nbBz2H5S: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/cleanup[2021400]: 4b8vFB4nbBz2H5S: message-anon_hostname_7= +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_4]:53482 to [anon_ip_2]:25 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:53482 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021494]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021378]: 4b8vFB5F4mz2H63: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/qmgr[1740239]: 4b8vFB4RvBz2H5Q: from=, anon_hostname_8=78350, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021380]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_17=1 anon_hostname_18=8 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021380]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/cleanup[2021407]: 4b8vFB5F4mz2H63: message-anon_hostname_7= +Jun 1 00:01:02 anon_server_1 postfix/qmgr[1740239]: 4b8vFB4398z2H5G: from=, anon_hostname_8=93659, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021385]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_17=1 anon_hostname_18=8 +Jun 1 00:01:02 anon_server_1 postfix/qmgr[1740239]: 4b8vFB5F4mz2H63: from=, anon_hostname_8=36504, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021378]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_17=1 anon_hostname_18=8 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021380]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:01:02 anon_server_1 postfix/qmgr[1740239]: 4b8vFB4nbBz2H5S: from=, anon_hostname_8=4277, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021381]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=1 anon_hostname_17=1 anon_hostname_18=7 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021380]: 4b8vFB6Vcbz2H64: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/cleanup[2021398]: 4b8vFB6Vcbz2H64: message-anon_hostname_7= +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_1 from [anon_ip_4]:53088 to [anon_ip_2]:25 +Jun 1 00:01:02 anon_server_1 postfix/postscreen[2021375]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:53088 +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021385]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:01:02 anon_server_1 postfix/smtpd[2021385]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:01:03 anon_server_1 postfix/qmgr[1740239]: 4b8vFB6Vcbz2H64: from=, anon_hostname_8=68348, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:03 anon_server_1 postfix/smtpd[2021380]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_17=1 anon_hostname_18=8 +Jun 1 00:01:03 anon_server_1 postfix/smtpd[2021488]: 4b8vFC0DDNz2H65: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:01:03 anon_server_1 postfix/cleanup[2021407]: 4b8vFC0DDNz2H65: message-anon_hostname_7= +Jun 1 00:01:03 anon_server_1 postfix/smtpd[2021494]: 4b8vFC0nzVz2H66: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:01:03 anon_server_1 postfix/smtpd[2021494]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_123 (500 anon_hostname_124) from anon_hostname_101[anon_ip_4] +Jun 1 00:01:03 anon_server_1 postfix/smtpd[2021494]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=1 anon_hostname_18=6 +Jun 1 00:01:03 anon_server_1 postfix/cleanup[2021400]: 4b8vFC0nzVz2H66: message-anon_hostname_7= +Jun 1 00:01:03 anon_server_1 postfix/smtpd[2021385]: 4b8vFC1W0Bz2H66: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:01:03 anon_server_1 postfix/smtpd[2021385]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_123 (490 anon_hostname_124) from anon_hostname_101[anon_ip_4] +Jun 1 00:01:03 anon_server_1 postfix/smtpd[2021385]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=1 anon_hostname_18=6 +Jun 1 00:01:03 anon_server_1 postfix/qmgr[1740239]: 4b8vFC0DDNz2H65: from=, anon_hostname_8=251930, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:03 anon_server_1 postfix/smtpd[2021488]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_18=7 +Jun 1 00:01:03 anon_server_1 postfix/cleanup[2021496]: 4b8vFC1W0Bz2H66: message-anon_hostname_7= +Jun 1 00:01:06 anon_server_1 postfix/10025/smtpd[2021452]: 4b8vFG4FK7z2H66: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:01:06 anon_server_1 postfix/cleanup[2021398]: 4b8vFG4FK7z2H66: message-anon_hostname_7= +Jun 1 00:01:06 anon_server_1 postfix/qmgr[1740239]: 4b8vFG4FK7z2H66: from=, anon_hostname_8=4786, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:06 anon_server_1 amavis[1988517]: (1988517-07) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:53470 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:53470), anon_hostname_46: 4b8vFB4nbBz2H5S, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_126, b: anon_hostname_127, anon_hostname_51: 0.002, anon_hostname_8: 4251, anon_hostname_52: 4b8vFG4FK7z2H66, anon_hostname_53: "anon_subject_2", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 3804 anon_hostname_68 +Jun 1 00:01:06 anon_server_1 postfix/amavis/smtp[2021413]: 4b8vFB4nbBz2H5S: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=4.1, anon_hostname_71=0.28/0/0/3.8, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vFG4FK7z2H66) +Jun 1 00:01:06 anon_server_1 postfix/qmgr[1740239]: 4b8vFB4nbBz2H5S: anon_hostname_80 +Jun 1 00:01:06 anon_server_1 postfix/pipe[2021426]: 4b8vFG4FK7z2H66: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.09, anon_hostname_71=0.01/0/0/0.08, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:01:06 anon_server_1 postfix/qmgr[1740239]: 4b8vFG4FK7z2H66: anon_hostname_80 +Jun 1 00:01:06 anon_server_1 postfix/10025/smtpd[2021509]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:01:06 anon_server_1 postfix/10025/smtpd[2021509]: 4b8vFG5ccbz2H5y: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:01:06 anon_server_1 postfix/cleanup[2021400]: 4b8vFG5ccbz2H5y: message-anon_hostname_7= +Jun 1 00:01:06 anon_server_1 postfix/qmgr[1740239]: 4b8vFG5ccbz2H5y: from=, anon_hostname_8=78859, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:06 anon_server_1 postfix/10025/smtpd[2021509]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:01:06 anon_server_1 amavis[1988516]: (1988516-05) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:53456 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:53456), anon_hostname_46: 4b8vFB4RvBz2H5Q, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_128, b: anon_hostname_129, anon_hostname_51: 0.102, anon_hostname_8: 78304, anon_hostname_52: 4b8vFG5ccbz2H5y, anon_hostname_53: "anon_subject_1", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001,anon_hostname_63=0.1], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.102, 4073 anon_hostname_68 +Jun 1 00:01:06 anon_server_1 postfix/amavis/smtp[2021408]: 4b8vFB4RvBz2H5Q: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=4.4, anon_hostname_71=0.26/0/0.01/4.1, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vFG5ccbz2H5y) +Jun 1 00:01:06 anon_server_1 postfix/qmgr[1740239]: 4b8vFB4RvBz2H5Q: anon_hostname_80 +Jun 1 00:01:06 anon_server_1 postfix/pipe[2021426]: 4b8vFG5ccbz2H5y: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.1, anon_hostname_71=0.02/0/0/0.08, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:01:06 anon_server_1 postfix/qmgr[1740239]: 4b8vFG5ccbz2H5y: anon_hostname_80 +Jun 1 00:01:08 anon_server_1 postfix/10025/smtpd[2021425]: 4b8vFJ0NLjz2H5y: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:01:08 anon_server_1 postfix/cleanup[2021407]: 4b8vFJ0NLjz2H5y: message-anon_hostname_7= +Jun 1 00:01:08 anon_server_1 postfix/qmgr[1740239]: 4b8vFJ0NLjz2H5y: from=, anon_hostname_8=94170, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:08 anon_server_1 amavis[1988515]: (1988515-07) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:53466 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:53466), anon_hostname_46: 4b8vFB4398z2H5G, Message-anon_hostname_47: , anon_hostname_48: 0Kvm358byFgp, b: 9BOzYh2kc, anon_hostname_51: 0.002, anon_hostname_8: 93656, anon_hostname_52: 4b8vFJ0NLjz2H5y, anon_hostname_53: "anon_subject_3", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 5310 anon_hostname_68 +Jun 1 00:01:08 anon_server_1 postfix/amavis/smtp[2021412]: 4b8vFB4398z2H5G: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=5.6, anon_hostname_71=0.27/0/0/5.3, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vFJ0NLjz2H5y) +Jun 1 00:01:08 anon_server_1 postfix/qmgr[1740239]: 4b8vFB4398z2H5G: anon_hostname_80 +Jun 1 00:01:08 anon_server_1 postfix/pipe[2021426]: 4b8vFJ0NLjz2H5y: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.1, anon_hostname_71=0.01/0/0/0.09, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:01:08 anon_server_1 postfix/qmgr[1740239]: 4b8vFJ0NLjz2H5y: anon_hostname_80 +Jun 1 00:01:09 anon_server_1 postfix/10025/smtpd[2021452]: 4b8vFK2xqLz2H5y: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:01:09 anon_server_1 postfix/cleanup[2021496]: 4b8vFK2xqLz2H5y: message-anon_hostname_7= +Jun 1 00:01:09 anon_server_1 postfix/qmgr[1740239]: 4b8vFK2xqLz2H5y: from=, anon_hostname_8=68857, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:09 anon_server_1 amavis[1988517]: (1988517-08) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:53482 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:53482), anon_hostname_46: 4b8vFB6Vcbz2H64, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_130, b: anon_hostname_131, anon_hostname_51: 0.102, anon_hostname_8: 68329, anon_hostname_52: 4b8vFK2xqLz2H5y, anon_hostname_53: "anon_subject_4", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001,anon_hostname_63=0.1], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.102, 2803 anon_hostname_68 +Jun 1 00:01:09 anon_server_1 postfix/amavis/smtp[2021413]: 4b8vFB6Vcbz2H64: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=6.7, anon_hostname_71=0.21/3.6/0/2.8, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vFK2xqLz2H5y) +Jun 1 00:01:09 anon_server_1 postfix/qmgr[1740239]: 4b8vFB6Vcbz2H64: anon_hostname_80 +Jun 1 00:01:09 anon_server_1 postfix/pipe[2021426]: 4b8vFK2xqLz2H5y: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.12, anon_hostname_71=0.01/0.01/0/0.1, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:01:09 anon_server_1 postfix/qmgr[1740239]: 4b8vFK2xqLz2H5y: anon_hostname_80 +Jun 1 00:01:10 anon_server_1 postfix/10025/smtpd[2021509]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:01:10 anon_server_1 postfix/10025/smtpd[2021509]: 4b8vFL3Kkdz2H5y: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:01:10 anon_server_1 postfix/cleanup[2021398]: 4b8vFL3Kkdz2H5y: message-anon_hostname_7= +Jun 1 00:01:10 anon_server_1 postfix/qmgr[1740239]: 4b8vFL3Kkdz2H5y: from=, anon_hostname_8=252654, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:10 anon_server_1 amavis[1988516]: (1988516-06) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:53472 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:53472), anon_hostname_46: 4b8vFC0DDNz2H65, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_132, b: anon_hostname_133, anon_hostname_51: 2.557, anon_hostname_8: 251005, anon_hostname_52: 4b8vFL3Kkdz2H5y, anon_hostname_53: "anon_subject_7", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_92=2.555,anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=2.557, 3696 anon_hostname_68 +Jun 1 00:01:10 anon_server_1 postfix/amavis/smtp[2021408]: 4b8vFC0DDNz2H65: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=7.9, anon_hostname_71=0.55/3.6/0.01/3.7, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vFL3Kkdz2H5y) +Jun 1 00:01:10 anon_server_1 postfix/qmgr[1740239]: 4b8vFC0DDNz2H65: anon_hostname_80 +Jun 1 00:01:10 anon_server_1 postfix/pipe[2021426]: 4b8vFL3Kkdz2H5y: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.14, anon_hostname_71=0.05/0/0/0.09, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:01:10 anon_server_1 postfix/qmgr[1740239]: 4b8vFL3Kkdz2H5y: anon_hostname_80 +Jun 1 00:01:11 anon_server_1 postfix/10025/smtpd[2021439]: 4b8vFM0G1Pz2H5y: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:01:11 anon_server_1 postfix/cleanup[2021400]: 4b8vFM0G1Pz2H5y: message-anon_hostname_7= +Jun 1 00:01:11 anon_server_1 postfix/qmgr[1740239]: 4b8vFM0G1Pz2H5y: from=, anon_hostname_8=37228, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:01:11 anon_server_1 amavis[1988518]: (1988518-07) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:53448 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:53448), anon_hostname_46: 4b8vFB5F4mz2H63, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_134, b: anon_hostname_135, anon_hostname_51: 2.557, anon_hostname_8: 36397, anon_hostname_52: 4b8vFM0G1Pz2H5y, anon_hostname_53: "anon_subject_5", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_92=2.555,anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=2.557, 8293 anon_hostname_68 +Jun 1 00:01:11 anon_server_1 postfix/amavis/smtp[2021410]: 4b8vFB5F4mz2H63: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=8.6, anon_hostname_71=0.25/0/0/8.3, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vFM0G1Pz2H5y) +Jun 1 00:01:11 anon_server_1 postfix/qmgr[1740239]: 4b8vFB5F4mz2H63: anon_hostname_80 +Jun 1 00:01:11 anon_server_1 postfix/pipe[2021426]: 4b8vFM0G1Pz2H5y: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.11, anon_hostname_71=0.01/0/0/0.09, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:01:11 anon_server_1 postfix/qmgr[1740239]: 4b8vFM0G1Pz2H5y: anon_hostname_80 +Jun 1 00:04:23 anon_server_1 postfix/anvil[2021382]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 8/60s for (anon_hostname_139:anon_ip_1) anon_hostname_35 Jun 1 00:00:49 +Jun 1 00:04:23 anon_server_1 postfix/anvil[2021382]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 6 for (anon_hostname_139:anon_ip_4) anon_hostname_35 Jun 1 00:01:02 +Jun 1 00:04:23 anon_server_1 postfix/anvil[2021382]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 00:01:02 +Jun 1 00:04:29 anon_server_1 postfix/scache[2021431]: anon_hostname_136: anon_hostname_142 anon_hostname_143 Jun 1 00:00:49 +Jun 1 00:04:29 anon_server_1 postfix/scache[2021431]: anon_hostname_136: anon_hostname_144 anon_hostname_145 anon_hostname_146=1 anon_hostname_147=4 anon_hostname_148=20% +Jun 1 00:04:29 anon_server_1 postfix/scache[2021431]: anon_hostname_136: address anon_hostname_145 anon_hostname_146=0 anon_hostname_147=4 anon_hostname_148=0% +Jun 1 00:04:29 anon_server_1 postfix/scache[2021431]: anon_hostname_136: anon_hostname_137 anon_hostname_149 anon_hostname_150=1 anon_hostname_151=1 anon_hostname_104=2 +Jun 1 00:06:08 anon_server_1 postfix/10025/smtpd[2021425]: anon_hostname_152 anon_hostname_122 anon_hostname_153 from anon_hostname_39[anon_ip_3] +Jun 1 00:06:08 anon_server_1 postfix/10025/smtpd[2021425]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=3 anon_hostname_15=3 anon_hostname_16=3 anon_hostname_18=10 +Jun 1 00:06:09 anon_server_1 postfix/10025/smtpd[2021452]: anon_hostname_152 anon_hostname_122 anon_hostname_153 from anon_hostname_39[anon_ip_3] +Jun 1 00:06:09 anon_server_1 postfix/10025/smtpd[2021452]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=3 anon_hostname_15=3 anon_hostname_16=3 anon_hostname_18=10 +Jun 1 00:06:10 anon_server_1 postfix/10025/smtpd[2021509]: anon_hostname_152 anon_hostname_122 anon_hostname_153 from anon_hostname_39[anon_ip_3] +Jun 1 00:06:10 anon_server_1 postfix/10025/smtpd[2021509]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_18=4 +Jun 1 00:06:11 anon_server_1 postfix/10025/smtpd[2021439]: anon_hostname_152 anon_hostname_122 anon_hostname_153 from anon_hostname_39[anon_ip_3] +Jun 1 00:06:11 anon_server_1 postfix/10025/smtpd[2021439]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=2 anon_hostname_15=2 anon_hostname_16=2 anon_hostname_18=7 +Jun 1 00:15:00 anon_server_1 postfix/postscreen[2021889]: anon_hostname_1 from [anon_ip_4]:42532 to [anon_ip_2]:25 +Jun 1 00:15:00 anon_server_1 postfix/postscreen[2021889]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:42532 +Jun 1 00:15:00 anon_server_1 postfix/smtpd[2021892]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:15:00 anon_server_1 postfix/smtpd[2021892]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:15:00 anon_server_1 postfix/smtpd[2021892]: 4b8vYJ63Xgz2H5y: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:15:00 anon_server_1 postfix/cleanup[2021910]: 4b8vYJ63Xgz2H5y: message-anon_hostname_7= +Jun 1 00:15:00 anon_server_1 postfix/qmgr[1740239]: 4b8vYJ63Xgz2H5y: from=, anon_hostname_8=133384, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:15:00 anon_server_1 postfix/smtpd[2021892]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_17=1 anon_hostname_18=8 +Jun 1 00:15:00 anon_server_1 postfix/postscreen[2021889]: anon_hostname_1 from [anon_ip_4]:42546 to [anon_ip_2]:25 +Jun 1 00:15:00 anon_server_1 postfix/postscreen[2021889]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:42546 +Jun 1 00:15:00 anon_server_1 postfix/smtpd[2021892]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:15:00 anon_server_1 postfix/smtpd[2021892]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:15:00 anon_server_1 postfix/smtpd[2021892]: 4b8vYJ6y9mz2H66: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:15:00 anon_server_1 postfix/cleanup[2021910]: 4b8vYJ6y9mz2H66: message-anon_hostname_7= +Jun 1 00:15:01 anon_server_1 postfix/qmgr[1740239]: 4b8vYJ6y9mz2H66: from=, anon_hostname_8=324733, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:15:01 anon_server_1 postfix/smtpd[2021892]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_17=1 anon_hostname_18=8 +Jun 1 00:15:01 anon_server_1 postfix/postscreen[2021889]: anon_hostname_1 from [anon_ip_4]:42556 to [anon_ip_2]:25 +Jun 1 00:15:01 anon_server_1 postfix/postscreen[2021889]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:42556 +Jun 1 00:15:01 anon_server_1 postfix/smtpd[2021892]: connect from anon_hostname_101[anon_ip_4] +Jun 1 00:15:01 anon_server_1 postfix/smtpd[2021892]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 00:15:01 anon_server_1 postfix/smtpd[2021892]: 4b8vYK0jG6z2H67: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 00:15:01 anon_server_1 postfix/cleanup[2021910]: 4b8vYK0jG6z2H67: message-anon_hostname_7= +Jun 1 00:15:01 anon_server_1 postfix/qmgr[1740239]: 4b8vYK0jG6z2H67: from=, anon_hostname_8=251930, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:15:01 anon_server_1 postfix/smtpd[2021892]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_17=1 anon_hostname_18=8 +Jun 1 00:15:05 anon_server_1 postfix/10025/smtpd[2021939]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:15:05 anon_server_1 postfix/10025/smtpd[2021939]: 4b8vYP2kWBz2H69: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:15:05 anon_server_1 postfix/cleanup[2021910]: 4b8vYP2kWBz2H69: message-anon_hostname_7= +Jun 1 00:15:05 anon_server_1 postfix/qmgr[1740239]: 4b8vYP2kWBz2H69: from=, anon_hostname_8=325242, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:15:05 anon_server_1 postfix/10025/smtpd[2021939]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:15:05 anon_server_1 amavis[1988518]: (1988518-08) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:42546 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:42546), anon_hostname_46: 4b8vYJ6y9mz2H66, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_154, b: 5OQW6dt7P, anon_hostname_51: 0.002, anon_hostname_8: 324677, anon_hostname_52: 4b8vYP2kWBz2H69, anon_hostname_53: "anon_subject_6", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 4393 anon_hostname_68 +Jun 1 00:15:05 anon_server_1 postfix/amavis/smtp[2021917]: 4b8vYJ6y9mz2H66: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=4.5, anon_hostname_71=0.07/0.02/0.01/4.4, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vYP2kWBz2H69) +Jun 1 00:15:05 anon_server_1 postfix/qmgr[1740239]: 4b8vYJ6y9mz2H66: anon_hostname_80 +Jun 1 00:15:05 anon_server_1 postfix/pipe[2021940]: 4b8vYP2kWBz2H69: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.16, anon_hostname_71=0.02/0.03/0/0.11, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:15:05 anon_server_1 postfix/qmgr[1740239]: 4b8vYP2kWBz2H69: anon_hostname_80 +Jun 1 00:15:08 anon_server_1 postfix/10025/smtpd[2021939]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:15:08 anon_server_1 postfix/10025/smtpd[2021939]: 4b8vYS1bRhz2H68: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:15:08 anon_server_1 postfix/cleanup[2021910]: 4b8vYS1bRhz2H68: message-anon_hostname_7= +Jun 1 00:15:08 anon_server_1 postfix/qmgr[1740239]: 4b8vYS1bRhz2H68: from=, anon_hostname_8=134108, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:15:08 anon_server_1 postfix/10025/smtpd[2021939]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:15:08 anon_server_1 amavis[1988515]: (1988515-08) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:42532 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:42532), anon_hostname_46: 4b8vYJ63Xgz2H5y, Message-anon_hostname_47: , anon_hostname_48: 6g9RQt1dcI8S, b: anon_hostname_155, anon_hostname_51: 2.557, anon_hostname_8: 132637, anon_hostname_52: 4b8vYS1bRhz2H68, anon_hostname_53: "anon_subject_8", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_92=2.555,anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=2.557, 7349 anon_hostname_68 +Jun 1 00:15:08 anon_server_1 postfix/amavis/smtp[2021915]: 4b8vYJ63Xgz2H5y: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=7.5, anon_hostname_71=0.16/0.02/0.01/7.4, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vYS1bRhz2H68) +Jun 1 00:15:08 anon_server_1 postfix/qmgr[1740239]: 4b8vYJ63Xgz2H5y: anon_hostname_80 +Jun 1 00:15:08 anon_server_1 postfix/pipe[2021940]: 4b8vYS1bRhz2H68: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.11, anon_hostname_71=0.01/0/0/0.1, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:15:08 anon_server_1 postfix/qmgr[1740239]: 4b8vYS1bRhz2H68: anon_hostname_80 +Jun 1 00:15:10 anon_server_1 postfix/10025/smtpd[2021939]: connect from anon_hostname_39[anon_ip_3] +Jun 1 00:15:10 anon_server_1 postfix/10025/smtpd[2021939]: 4b8vYV3wZFz2H68: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 00:15:10 anon_server_1 postfix/cleanup[2021910]: 4b8vYV3wZFz2H68: message-anon_hostname_7= +Jun 1 00:15:10 anon_server_1 postfix/qmgr[1740239]: 4b8vYV3wZFz2H68: from=, anon_hostname_8=252654, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 00:15:10 anon_server_1 postfix/10025/smtpd[2021939]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 00:15:10 anon_server_1 amavis[1988517]: (1988517-09) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:42556 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:42556), anon_hostname_46: 4b8vYK0jG6z2H67, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_156, b: anon_hostname_133, anon_hostname_51: 2.557, anon_hostname_8: 251005, anon_hostname_52: 4b8vYV3wZFz2H68, anon_hostname_53: "anon_subject_7", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_92=2.555,anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=2.557, 9478 anon_hostname_68 +Jun 1 00:15:10 anon_server_1 postfix/amavis/smtp[2021921]: 4b8vYK0jG6z2H67: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=9.6, anon_hostname_71=0.06/0.02/0.01/9.5, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8vYV3wZFz2H68) +Jun 1 00:15:10 anon_server_1 postfix/qmgr[1740239]: 4b8vYK0jG6z2H67: anon_hostname_80 +Jun 1 00:15:10 anon_server_1 postfix/pipe[2021940]: 4b8vYV3wZFz2H68: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.15, anon_hostname_71=0.05/0.01/0/0.09, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 00:15:10 anon_server_1 postfix/qmgr[1740239]: 4b8vYV3wZFz2H68: anon_hostname_80 +Jun 1 00:17:17 anon_server_1 postfix/smtps/smtpd[2021999]: connect from unknown[anon_ip_5] +Jun 1 00:17:18 anon_server_1 postfix/smtps/smtpd[2021999]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_5]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:17:26 anon_server_1 postfix/smtps/smtpd[2021999]: anon_hostname_158: unknown[anon_ip_5]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 00:19:56 anon_server_1 postfix/smtps/smtpd[2022094]: connect from unknown[anon_ip_6] +Jun 1 00:19:57 anon_server_1 postfix/smtps/smtpd[2022094]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_6]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:20:05 anon_server_1 postfix/smtps/smtpd[2022094]: anon_hostname_158: unknown[anon_ip_6]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 00:20:06 anon_server_1 postfix/smtps/smtpd[2022146]: connect from unknown[anon_ip_7] +Jun 1 00:20:08 anon_server_1 postfix/smtps/smtpd[2022146]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_7]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:20:12 anon_server_1 postfix/smtps/smtpd[2022146]: anon_hostname_158: unknown[anon_ip_7]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 00:20:12 anon_server_1 postfix/smtps/smtpd[2022146]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_7] +Jun 1 00:20:12 anon_server_1 postfix/smtps/smtpd[2022146]: anon_hostname_12 from unknown[anon_ip_7] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:22:26 anon_server_1 postfix/smtps/smtpd[2021999]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_5] +Jun 1 00:22:26 anon_server_1 postfix/smtps/smtpd[2021999]: anon_hostname_12 from unknown[anon_ip_5] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:25:00 anon_server_1 postfix/anvil[2021894]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 3/60s for (anon_hostname_139:anon_ip_4) anon_hostname_35 Jun 1 00:15:01 +Jun 1 00:25:00 anon_server_1 postfix/anvil[2021894]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_139:anon_ip_4) anon_hostname_35 Jun 1 00:15:00 +Jun 1 00:25:00 anon_server_1 postfix/anvil[2021894]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 3 anon_hostname_35 Jun 1 00:20:08 +Jun 1 00:25:05 anon_server_1 postfix/smtps/smtpd[2022094]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_6] +Jun 1 00:25:05 anon_server_1 postfix/smtps/smtpd[2022094]: anon_hostname_12 from unknown[anon_ip_6] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:32:25 anon_server_1 postfix/smtps/smtpd[2022476]: connect from anon_hostname_168[anon_ip_8] +Jun 1 00:32:26 anon_server_1 postfix/smtps/smtpd[2022476]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_168[anon_ip_8]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:32:27 anon_server_1 postfix/smtps/smtpd[2022480]: connect from anon_hostname_169_ip_9] +Jun 1 00:32:28 anon_server_1 postfix/smtps/smtpd[2022480]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_169_ip_9]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:32:32 anon_server_1 postfix/smtps/smtpd[2022476]: anon_hostname_158: anon_hostname_168[anon_ip_8]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_4 +Jun 1 00:32:36 anon_server_1 postfix/smtps/smtpd[2022519]: anon_hostname_158: anon_hostname_171 anon_hostname_170n_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_11 +Jun 1 00:32:36 anon_server_1 postfix/smtps/smtpd[2022519]: connect from unknown[anon_ip_11] +Jun 1 00:32:36 anon_server_1 postfix/smtps/smtpd[2022480]: anon_hostname_158: anon_hostname_169_ip_9]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 00:32:37 anon_server_1 postfix/smtps/smtpd[2022519]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_11]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:32:45 anon_server_1 postfix/smtps/smtpd[2022519]: anon_hostname_158: unknown[anon_ip_11]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_6 +Jun 1 00:32:53 anon_server_1 postfix/smtps/smtpd[2022551]: connect from unknown[anon_ip_12] +Jun 1 00:32:53 anon_server_1 postfix/smtps/smtpd[2022551]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_12]: anon_hostname_121 anon_hostname_104 +Jun 1 00:32:53 anon_server_1 postfix/smtps/smtpd[2022551]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_12] +Jun 1 00:32:53 anon_server_1 postfix/smtps/smtpd[2022551]: anon_hostname_12 from unknown[anon_ip_12] anon_hostname_18=0/0 +Jun 1 00:33:11 anon_server_1 postfix/smtps/smtpd[2022551]: connect from unknown[anon_ip_13] +Jun 1 00:33:11 anon_server_1 postfix/smtps/smtpd[2022551]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_13]: anon_hostname_121 anon_hostname_104 +Jun 1 00:33:11 anon_server_1 postfix/smtps/smtpd[2022551]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_13] +Jun 1 00:33:11 anon_server_1 postfix/smtps/smtpd[2022551]: anon_hostname_12 from unknown[anon_ip_13] anon_hostname_18=0/0 +Jun 1 00:33:33 anon_server_1 postfix/postscreen[2022602]: anon_hostname_1 from [anon_ip_14]:29630 to [anon_ip_2]:25 +Jun 1 00:33:33 anon_server_1 postfix/dnsblog[2022604]: anon_hostname_178 anon_ip_14 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 00:33:33 anon_server_1 postfix/dnsblog[2022604]: anon_hostname_178 anon_ip_14 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 00:33:33 anon_server_1 postfix/dnsblog[2022604]: anon_hostname_178 anon_ip_14 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 00:33:33 anon_server_1 postfix/dnsblog[2022604]: anon_hostname_178 anon_ip_14 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_18 +Jun 1 00:33:33 anon_server_1 postfix/postscreen[2022602]: anon_hostname_181 12 anon_hostname_122 0.15 from [anon_ip_14]:29630: anon_hostname_13 anon_hostname_182\r\n +Jun 1 00:33:33 anon_server_1 postfix/postscreen[2022602]: anon_hostname_183 [anon_ip_14]:29630 +Jun 1 00:37:32 anon_server_1 postfix/smtps/smtpd[2022476]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_168[anon_ip_8] +Jun 1 00:37:32 anon_server_1 postfix/smtps/smtpd[2022476]: anon_hostname_12 from anon_hostname_168[anon_ip_8] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:37:36 anon_server_1 postfix/smtps/smtpd[2022480]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_169_ip_9] +Jun 1 00:37:36 anon_server_1 postfix/smtps/smtpd[2022480]: anon_hostname_12 from anon_hostname_169_ip_9] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:37:45 anon_server_1 postfix/smtps/smtpd[2022519]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_11] +Jun 1 00:37:45 anon_server_1 postfix/smtps/smtpd[2022519]: anon_hostname_12 from unknown[anon_ip_11] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:41:05 anon_server_1 postfix/anvil[2022479]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_8) anon_hostname_35 Jun 1 00:32:26 +Jun 1 00:41:05 anon_server_1 postfix/anvil[2022479]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_8) anon_hostname_35 Jun 1 00:32:26 +Jun 1 00:41:05 anon_server_1 postfix/anvil[2022479]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 3 anon_hostname_35 Jun 1 00:32:37 +Jun 1 00:46:31 anon_server_1 postfix/smtps/smtpd[2023023]: connect from unknown[anon_ip_19] +Jun 1 00:46:33 anon_server_1 postfix/smtps/smtpd[2023023]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_19]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:46:41 anon_server_1 postfix/smtps/smtpd[2023023]: anon_hostname_158: unknown[anon_ip_19]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 00:47:01 anon_server_1 postfix/smtps/smtpd[2023061]: connect from unknown[anon_ip_20] +Jun 1 00:47:01 anon_server_1 postfix/smtps/smtpd[2023061]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_20]: anon_hostname_121 anon_hostname_104 +Jun 1 00:47:01 anon_server_1 postfix/smtps/smtpd[2023061]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_20] +Jun 1 00:47:01 anon_server_1 postfix/smtps/smtpd[2023061]: anon_hostname_12 from unknown[anon_ip_20] anon_hostname_18=0/0 +Jun 1 00:47:02 anon_server_1 postfix/smtps/smtpd[2023061]: connect from unknown[anon_ip_21] +Jun 1 00:47:04 anon_server_1 postfix/smtps/smtpd[2023061]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_21]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:47:12 anon_server_1 postfix/smtps/smtpd[2023061]: anon_hostname_158: unknown[anon_ip_21]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 00:48:01 anon_server_1 postfix/smtps/smtpd[2023116]: connect from unknown[anon_ip_22] +Jun 1 00:48:03 anon_server_1 postfix/smtps/smtpd[2023116]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_22]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:48:10 anon_server_1 postfix/smtps/smtpd[2023116]: anon_hostname_158: unknown[anon_ip_22]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 00:48:16 anon_server_1 postfix/smtps/smtpd[2023162]: connect from unknown[anon_ip_23] +Jun 1 00:48:17 anon_server_1 postfix/smtps/smtpd[2023162]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_23]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:48:23 anon_server_1 postfix/smtps/smtpd[2023162]: anon_hostname_158: unknown[anon_ip_23]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 00:51:08 anon_server_1 postfix/smtps/smtpd[2023264]: anon_hostname_158: anon_hostname_171 anon_hostname_184n_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_25: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 00:51:08 anon_server_1 postfix/smtps/smtpd[2023264]: connect from unknown[anon_ip_25] +Jun 1 00:51:09 anon_server_1 postfix/smtps/smtpd[2023264]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_25]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:51:14 anon_server_1 postfix/smtps/smtpd[2023264]: anon_hostname_158: unknown[anon_ip_25]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 00:51:25 anon_server_1 postfix/smtps/smtpd[2023299]: anon_hostname_158: anon_hostname_171 anon_hostname_188 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_26: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 00:51:25 anon_server_1 postfix/smtps/smtpd[2023299]: connect from unknown[anon_ip_26] +Jun 1 00:51:26 anon_server_1 postfix/smtps/smtpd[2023299]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_26]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 00:51:32 anon_server_1 postfix/smtps/smtpd[2023299]: anon_hostname_158: unknown[anon_ip_26]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 00:51:41 anon_server_1 postfix/smtps/smtpd[2023023]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_19] +Jun 1 00:51:41 anon_server_1 postfix/smtps/smtpd[2023023]: anon_hostname_12 from unknown[anon_ip_19] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:52:12 anon_server_1 postfix/smtps/smtpd[2023061]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_21] +Jun 1 00:52:12 anon_server_1 postfix/smtps/smtpd[2023061]: anon_hostname_12 from unknown[anon_ip_21] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:53:10 anon_server_1 postfix/smtps/smtpd[2023116]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_22] +Jun 1 00:53:10 anon_server_1 postfix/smtps/smtpd[2023116]: anon_hostname_12 from unknown[anon_ip_22] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:53:23 anon_server_1 postfix/smtps/smtpd[2023162]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_23] +Jun 1 00:53:23 anon_server_1 postfix/smtps/smtpd[2023162]: anon_hostname_12 from unknown[anon_ip_23] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:56:14 anon_server_1 postfix/smtps/smtpd[2023264]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_25] +Jun 1 00:56:14 anon_server_1 postfix/smtps/smtpd[2023264]: anon_hostname_12 from unknown[anon_ip_25] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:56:32 anon_server_1 postfix/smtps/smtpd[2023299]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_26] +Jun 1 00:56:32 anon_server_1 postfix/smtps/smtpd[2023299]: anon_hostname_12 from unknown[anon_ip_26] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 00:56:33 anon_server_1 postfix/anvil[2023026]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_19) anon_hostname_35 Jun 1 00:46:33 +Jun 1 00:56:33 anon_server_1 postfix/anvil[2023026]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_19) anon_hostname_35 Jun 1 00:46:33 +Jun 1 00:56:33 anon_server_1 postfix/anvil[2023026]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 6 anon_hostname_35 Jun 1 00:51:26 +Jun 1 01:03:04 anon_server_1 postfix/postscreen[2023639]: anon_hostname_1 from [anon_ip_27]:37226 to [anon_ip_2]:25 +Jun 1 01:03:04 anon_server_1 postfix/dnsblog[2023641]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 01:03:10 anon_server_1 postfix/postscreen[2023639]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:37226 +Jun 1 01:03:10 anon_server_1 postfix/postscreen[2023639]: anon_hostname_183 [anon_ip_27]:37226 +Jun 1 01:19:45 anon_server_1 postfix/smtps/smtpd[2024083]: connect from unknown[anon_ip_28] +Jun 1 01:19:45 anon_server_1 postfix/smtps/smtpd[2024083]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_28]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_191 (256/256 anon_hostname_110) +Jun 1 01:19:48 anon_server_1 postfix/smtps/smtpd[2024083]: anon_hostname_158: unknown[anon_ip_28]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_10 +Jun 1 01:19:48 anon_server_1 postfix/smtps/smtpd[2024083]: anon_hostname_12 from unknown[anon_ip_28] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_17=1 anon_hostname_18=2/3 +Jun 1 01:23:08 anon_server_1 postfix/anvil[2024085]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_28) anon_hostname_35 Jun 1 01:19:45 +Jun 1 01:23:08 anon_server_1 postfix/anvil[2024085]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_28) anon_hostname_35 Jun 1 01:19:45 +Jun 1 01:23:08 anon_server_1 postfix/anvil[2024085]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 01:19:45 +Jun 1 01:26:10 anon_server_1 postfix/smtps/smtpd[2024292]: connect from unknown[anon_ip_29] +Jun 1 01:26:12 anon_server_1 postfix/smtps/smtpd[2024292]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_29]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 01:26:20 anon_server_1 postfix/smtps/smtpd[2024292]: anon_hostname_158: unknown[anon_ip_29]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 01:26:23 anon_server_1 postfix/smtps/smtpd[2024330]: connect from unknown[anon_ip_30] +Jun 1 01:26:23 anon_server_1 postfix/smtps/smtpd[2024330]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_30]: -1 +Jun 1 01:26:23 anon_server_1 postfix/smtps/smtpd[2024330]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:1408F0C6:anon_hostname_194 anon_hostname_195:anon_hostname_196:anon_hostname_197 anon_hostname_198 anon_hostname_199 anon_hostname_200:../anon_hostname_201/anon_hostname_202/anon_hostname_203.c:250: +Jun 1 01:26:23 anon_server_1 postfix/smtps/smtpd[2024330]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_30] +Jun 1 01:26:23 anon_server_1 postfix/smtps/smtpd[2024330]: anon_hostname_12 from unknown[anon_ip_30] anon_hostname_18=0/0 +Jun 1 01:31:20 anon_server_1 postfix/smtps/smtpd[2024292]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_29] +Jun 1 01:31:20 anon_server_1 postfix/smtps/smtpd[2024292]: anon_hostname_12 from unknown[anon_ip_29] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 01:34:40 anon_server_1 postfix/anvil[2024296]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_29) anon_hostname_35 Jun 1 01:26:12 +Jun 1 01:34:40 anon_server_1 postfix/anvil[2024296]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_29) anon_hostname_35 Jun 1 01:26:12 +Jun 1 01:34:40 anon_server_1 postfix/anvil[2024296]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 01:26:12 +Jun 1 01:35:26 anon_server_1 postfix/smtps/smtpd[2024558]: connect from anon_hostname_204[anon_ip_31] +Jun 1 01:35:26 anon_server_1 postfix/smtps/smtpd[2024558]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_204[anon_ip_31]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 01:35:30 anon_server_1 postfix/smtps/smtpd[2024558]: anon_hostname_158: anon_hostname_204[anon_ip_31]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_11 +Jun 1 01:35:30 anon_server_1 postfix/smtps/smtpd[2024558]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_204[anon_ip_31] +Jun 1 01:35:30 anon_server_1 postfix/smtps/smtpd[2024558]: anon_hostname_12 from anon_hostname_204[anon_ip_31] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 01:38:50 anon_server_1 postfix/anvil[2024561]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_31) anon_hostname_35 Jun 1 01:35:26 +Jun 1 01:38:50 anon_server_1 postfix/anvil[2024561]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_31) anon_hostname_35 Jun 1 01:35:26 +Jun 1 01:38:50 anon_server_1 postfix/anvil[2024561]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 01:35:26 +Jun 1 01:47:41 anon_server_1 postfix/smtps/smtpd[2024930]: connect from unknown[anon_ip_32] +Jun 1 01:47:42 anon_server_1 postfix/smtps/smtpd[2024930]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_32]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 01:47:50 anon_server_1 postfix/smtps/smtpd[2024930]: anon_hostname_158: unknown[anon_ip_32]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 01:47:50 anon_server_1 postfix/smtps/smtpd[2024930]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_32] +Jun 1 01:47:50 anon_server_1 postfix/smtps/smtpd[2024930]: anon_hostname_12 from unknown[anon_ip_32] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 01:47:52 anon_server_1 postfix/smtps/smtpd[2024930]: anon_hostname_158: anon_hostname_171 anon_hostname_207 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_33: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 01:47:52 anon_server_1 postfix/smtps/smtpd[2024930]: connect from unknown[anon_ip_33] +Jun 1 01:47:55 anon_server_1 postfix/smtps/smtpd[2024930]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_33]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 01:48:02 anon_server_1 postfix/smtps/smtpd[2024930]: anon_hostname_158: unknown[anon_ip_33]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 01:48:02 anon_server_1 postfix/smtps/smtpd[2024930]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_33] +Jun 1 01:48:02 anon_server_1 postfix/smtps/smtpd[2024930]: anon_hostname_12 from unknown[anon_ip_33] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 01:51:23 anon_server_1 postfix/anvil[2024933]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_32) anon_hostname_35 Jun 1 01:47:42 +Jun 1 01:51:23 anon_server_1 postfix/anvil[2024933]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_32) anon_hostname_35 Jun 1 01:47:42 +Jun 1 01:51:23 anon_server_1 postfix/anvil[2024933]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 01:47:55 +Jun 1 02:08:38 anon_server_1 postfix/smtps/smtpd[2025540]: connect from unknown[anon_ip_34] +Jun 1 02:08:49 anon_server_1 postfix/smtps/smtpd[2025543]: connect from unknown[anon_ip_35] +Jun 1 02:08:50 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_35]: anon_hostname_121 anon_hostname_104 +Jun 1 02:08:50 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_35] +Jun 1 02:08:50 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_12 from unknown[anon_ip_35] anon_hostname_18=0/0 +Jun 1 02:08:52 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_158: anon_hostname_171 anon_hostname_208_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_36: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 02:08:52 anon_server_1 postfix/smtps/smtpd[2025543]: connect from unknown[anon_ip_36] +Jun 1 02:08:53 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_36]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:09:00 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_158: unknown[anon_ip_36]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 02:09:04 anon_server_1 postfix/smtps/smtpd[2025596]: connect from anon_hostname_209[anon_ip_37] +Jun 1 02:09:06 anon_server_1 postfix/smtps/smtpd[2025596]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_209[anon_ip_37]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:09:14 anon_server_1 postfix/smtps/smtpd[2025596]: anon_hostname_158: anon_hostname_209[anon_ip_37]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 02:10:27 anon_server_1 postfix/smtps/smtpd[2025540]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_34]: anon_hostname_121 anon_hostname_104 +Jun 1 02:10:27 anon_server_1 postfix/smtps/smtpd[2025540]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_34] +Jun 1 02:10:27 anon_server_1 postfix/smtps/smtpd[2025540]: anon_hostname_12 from unknown[anon_ip_34] anon_hostname_18=0/0 +Jun 1 02:10:53 anon_server_1 postfix/smtps/smtpd[2025540]: connect from unknown[anon_ip_38] +Jun 1 02:10:55 anon_server_1 postfix/smtps/smtpd[2025540]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_38]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:11:01 anon_server_1 postfix/smtps/smtpd[2025540]: anon_hostname_158: unknown[anon_ip_38]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 02:11:22 anon_server_1 postfix/smtps/smtpd[2025755]: connect from unknown[anon_ip_39] +Jun 1 02:11:22 anon_server_1 postfix/smtps/smtpd[2025755]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_39]: anon_hostname_121 anon_hostname_104 +Jun 1 02:11:22 anon_server_1 postfix/smtps/smtpd[2025755]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_39] +Jun 1 02:11:22 anon_server_1 postfix/smtps/smtpd[2025755]: anon_hostname_12 from unknown[anon_ip_39] anon_hostname_18=0/0 +Jun 1 02:11:30 anon_server_1 postfix/smtps/smtpd[2025755]: connect from unknown[anon_ip_40] +Jun 1 02:11:31 anon_server_1 postfix/smtps/smtpd[2025755]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_40]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:11:38 anon_server_1 postfix/smtps/smtpd[2025755]: anon_hostname_158: unknown[anon_ip_40]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_12 +Jun 1 02:13:04 anon_server_1 postfix/postscreen[2025832]: anon_hostname_1 from [anon_ip_27]:43004 to [anon_ip_2]:25 +Jun 1 02:13:04 anon_server_1 postfix/dnsblog[2025834]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 02:13:10 anon_server_1 postfix/postscreen[2025832]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:43004 +Jun 1 02:13:10 anon_server_1 postfix/postscreen[2025832]: anon_hostname_183 [anon_ip_27]:43004 +Jun 1 02:14:00 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_36] +Jun 1 02:14:00 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_12 from unknown[anon_ip_36] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:14:14 anon_server_1 postfix/smtps/smtpd[2025596]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_209[anon_ip_37] +Jun 1 02:14:14 anon_server_1 postfix/smtps/smtpd[2025596]: anon_hostname_12 from anon_hostname_209[anon_ip_37] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:14:39 anon_server_1 postfix/smtps/smtpd[2025543]: connect from unknown[anon_ip_41] +Jun 1 02:14:41 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_41]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:14:47 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_158: unknown[anon_ip_41]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 02:14:58 anon_server_1 postfix/smtps/smtpd[2025596]: connect from anon_hostname_210[anon_ip_42] +Jun 1 02:14:59 anon_server_1 postfix/smtps/smtpd[2025596]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_210[anon_ip_42]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:15:05 anon_server_1 postfix/smtps/smtpd[2025596]: anon_hostname_158: anon_hostname_210[anon_ip_42]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 02:16:01 anon_server_1 postfix/smtps/smtpd[2025540]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_38] +Jun 1 02:16:01 anon_server_1 postfix/smtps/smtpd[2025540]: anon_hostname_12 from unknown[anon_ip_38] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:16:38 anon_server_1 postfix/smtps/smtpd[2025755]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_40] +Jun 1 02:16:38 anon_server_1 postfix/smtps/smtpd[2025755]: anon_hostname_12 from unknown[anon_ip_40] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:18:50 anon_server_1 postfix/anvil[2025545]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_36) anon_hostname_35 Jun 1 02:08:53 +Jun 1 02:18:50 anon_server_1 postfix/anvil[2025545]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_36) anon_hostname_35 Jun 1 02:08:53 +Jun 1 02:18:50 anon_server_1 postfix/anvil[2025545]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 6 anon_hostname_35 Jun 1 02:14:59 +Jun 1 02:19:47 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_41] +Jun 1 02:19:47 anon_server_1 postfix/smtps/smtpd[2025543]: anon_hostname_12 from unknown[anon_ip_41] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:20:05 anon_server_1 postfix/smtps/smtpd[2025596]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_210[anon_ip_42] +Jun 1 02:20:05 anon_server_1 postfix/smtps/smtpd[2025596]: anon_hostname_12 from anon_hostname_210[anon_ip_42] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:24:07 anon_server_1 postfix/postscreen[2026175]: anon_hostname_1 from [anon_ip_43]:33182 to [anon_ip_2]:25 +Jun 1 02:24:07 anon_server_1 postfix/dnsblog[2026177]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 02:24:07 anon_server_1 postfix/dnsblog[2026177]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 02:24:13 anon_server_1 postfix/postscreen[2026175]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_43]:33182 +Jun 1 02:24:13 anon_server_1 postfix/postscreen[2026175]: anon_hostname_183 [anon_ip_43]:33182 +Jun 1 02:24:22 anon_server_1 postfix/smtps/smtpd[2026180]: connect from anon_hostname_211non_ip_45] +Jun 1 02:24:22 anon_server_1 postfix/smtps/smtpd[2026180]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_211non_ip_45]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 02:24:24 anon_server_1 postfix/smtps/smtpd[2026180]: anon_hostname_158: anon_hostname_211non_ip_45]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 02:24:24 anon_server_1 postfix/smtps/smtpd[2026180]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:1408F119:anon_hostname_194 anon_hostname_195:anon_hostname_196:anon_hostname_212 anon_hostname_29 anon_hostname_186 anon_hostname_213 anon_hostname_202 anon_hostname_214:../anon_hostname_201/anon_hostname_202/anon_hostname_203.c:676: +Jun 1 02:24:24 anon_server_1 postfix/smtps/smtpd[2026180]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_215 from anon_hostname_211non_ip_45] +Jun 1 02:24:24 anon_server_1 postfix/smtps/smtpd[2026180]: anon_hostname_12 from anon_hostname_211non_ip_45] anon_hostname_13=1 anon_hostname_167=0/1 unknown=0/1 anon_hostname_18=1/3 +Jun 1 02:24:31 anon_server_1 postfix/smtps/smtpd[2026180]: connect from anon_hostname_216on_ip_46] +Jun 1 02:24:42 anon_server_1 postfix/smtps/smtpd[2026180]: anon_hostname_175 anon_hostname_176 from anon_hostname_216on_ip_46]: anon_hostname_121 anon_hostname_104 +Jun 1 02:24:42 anon_server_1 postfix/smtps/smtpd[2026180]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_216on_ip_46] +Jun 1 02:24:42 anon_server_1 postfix/smtps/smtpd[2026180]: anon_hostname_12 from anon_hostname_216on_ip_46] anon_hostname_18=0/0 +Jun 1 02:28:03 anon_server_1 postfix/anvil[2026183]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_45) anon_hostname_35 Jun 1 02:24:22 +Jun 1 02:28:03 anon_server_1 postfix/anvil[2026183]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_45) anon_hostname_35 Jun 1 02:24:22 +Jun 1 02:28:03 anon_server_1 postfix/anvil[2026183]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 02:24:22 +Jun 1 02:34:36 anon_server_1 postfix/smtps/smtpd[2026435]: connect from unknown[anon_ip_47] +Jun 1 02:34:38 anon_server_1 postfix/smtps/smtpd[2026435]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_47]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:34:46 anon_server_1 postfix/smtps/smtpd[2026435]: anon_hostname_158: unknown[anon_ip_47]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_4 +Jun 1 02:34:53 anon_server_1 postfix/smtps/smtpd[2026481]: connect from unknown[anon_ip_48] +Jun 1 02:34:54 anon_server_1 postfix/smtps/smtpd[2026481]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_48]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:35:01 anon_server_1 postfix/smtps/smtpd[2026482]: connect from anon_hostname_217[anon_ip_49] +Jun 1 02:35:01 anon_server_1 postfix/smtps/smtpd[2026481]: anon_hostname_158: unknown[anon_ip_48]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_6 +Jun 1 02:35:02 anon_server_1 postfix/smtps/smtpd[2026482]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_217[anon_ip_49]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:35:10 anon_server_1 postfix/smtps/smtpd[2026482]: anon_hostname_158: anon_hostname_217[anon_ip_49]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 02:39:33 anon_server_1 postfix/submission/smtpd[2026721]: connect from unknown[anon_ip_50] +Jun 1 02:39:33 anon_server_1 postfix/submission/smtpd[2026721]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_50] +Jun 1 02:39:33 anon_server_1 postfix/submission/smtpd[2026721]: anon_hostname_12 from unknown[anon_ip_50] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:39:46 anon_server_1 postfix/smtps/smtpd[2026435]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_47] +Jun 1 02:39:46 anon_server_1 postfix/smtps/smtpd[2026435]: anon_hostname_12 from unknown[anon_ip_47] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:40:01 anon_server_1 postfix/smtps/smtpd[2026481]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_48] +Jun 1 02:40:01 anon_server_1 postfix/smtps/smtpd[2026481]: anon_hostname_12 from unknown[anon_ip_48] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:40:10 anon_server_1 postfix/smtps/smtpd[2026482]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_217[anon_ip_49] +Jun 1 02:40:10 anon_server_1 postfix/smtps/smtpd[2026482]: anon_hostname_12 from anon_hostname_217[anon_ip_49] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:40:40 anon_server_1 postfix/smtps/smtpd[2026435]: connect from unknown[anon_ip_51] +Jun 1 02:40:41 anon_server_1 postfix/smtps/smtpd[2026435]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_51]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:40:46 anon_server_1 postfix/smtps/smtpd[2026435]: anon_hostname_158: unknown[anon_ip_51]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 02:40:55 anon_server_1 postfix/smtps/smtpd[2026481]: anon_hostname_158: anon_hostname_171 anon_hostname_219 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_52: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 02:40:55 anon_server_1 postfix/smtps/smtpd[2026481]: connect from unknown[anon_ip_52] +Jun 1 02:40:55 anon_server_1 postfix/smtps/smtpd[2026481]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_52]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:41:01 anon_server_1 postfix/smtps/smtpd[2026481]: anon_hostname_158: unknown[anon_ip_52]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 02:44:38 anon_server_1 postfix/anvil[2026437]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_47) anon_hostname_35 Jun 1 02:34:38 +Jun 1 02:44:38 anon_server_1 postfix/anvil[2026437]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_47) anon_hostname_35 Jun 1 02:34:38 +Jun 1 02:44:38 anon_server_1 postfix/anvil[2026437]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 02:39:33 +Jun 1 02:45:46 anon_server_1 postfix/smtps/smtpd[2026435]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_51] +Jun 1 02:45:46 anon_server_1 postfix/smtps/smtpd[2026435]: anon_hostname_12 from unknown[anon_ip_51] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:46:01 anon_server_1 postfix/smtps/smtpd[2026481]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_52] +Jun 1 02:46:01 anon_server_1 postfix/smtps/smtpd[2026481]: anon_hostname_12 from unknown[anon_ip_52] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:48:53 anon_server_1 postfix/smtps/smtpd[2027009]: connect from unknown[anon_ip_53] +Jun 1 02:48:55 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_53]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:49:03 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_158: unknown[anon_ip_53]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 02:49:04 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_53] +Jun 1 02:49:04 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_12 from unknown[anon_ip_53] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:49:13 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_158: anon_hostname_171 anon_hostname_220 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_54: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 02:49:13 anon_server_1 postfix/smtps/smtpd[2027009]: connect from unknown[anon_ip_54] +Jun 1 02:49:15 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_54]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:49:22 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_158: unknown[anon_ip_54]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 02:54:22 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_54] +Jun 1 02:54:22 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_12 from unknown[anon_ip_54] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 02:54:38 anon_server_1 postfix/anvil[2026437]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_53) anon_hostname_35 Jun 1 02:48:55 +Jun 1 02:54:38 anon_server_1 postfix/anvil[2026437]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_53) anon_hostname_35 Jun 1 02:48:55 +Jun 1 02:54:38 anon_server_1 postfix/anvil[2026437]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 02:49:15 +Jun 1 02:55:18 anon_server_1 postfix/smtps/smtpd[2027009]: connect from unknown[anon_ip_55] +Jun 1 02:55:20 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_55]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 02:55:25 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_158: unknown[anon_ip_55]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 02:55:40 anon_server_1 postfix/smtps/smtpd[2027285]: connect from unknown[anon_ip_56] +Jun 1 02:55:40 anon_server_1 postfix/smtps/smtpd[2027285]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_56]: anon_hostname_121 anon_hostname_104 +Jun 1 02:55:40 anon_server_1 postfix/smtps/smtpd[2027285]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_56] +Jun 1 02:55:40 anon_server_1 postfix/smtps/smtpd[2027285]: anon_hostname_12 from unknown[anon_ip_56] anon_hostname_18=0/0 +Jun 1 03:00:25 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_55] +Jun 1 03:00:25 anon_server_1 postfix/smtps/smtpd[2027009]: anon_hostname_12 from unknown[anon_ip_55] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 03:01:02 anon_server_1 postfix/pickup[2024431]: 4b8zDt5QjGz2H5g: anon_hostname_221=0 from= +Jun 1 03:01:02 anon_server_1 postfix/cleanup[2027456]: 4b8zDt5QjGz2H5g: message-anon_hostname_7= +Jun 1 03:01:02 anon_server_1 postfix/qmgr[1740239]: 4b8zDt5QjGz2H5g: from=, anon_hostname_8=1430, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 03:01:03 anon_server_1 postfix/10025/smtpd[2027468]: connect from anon_hostname_39[anon_ip_3] +Jun 1 03:01:03 anon_server_1 postfix/10025/smtpd[2027468]: 4b8zDv3DYqz2H3H: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 03:01:03 anon_server_1 postfix/cleanup[2027456]: 4b8zDv3DYqz2H3H: message-anon_hostname_7= +Jun 1 03:01:03 anon_server_1 postfix/qmgr[1740239]: 4b8zDv3DYqz2H3H: from=, anon_hostname_8=2781, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 03:01:03 anon_server_1 postfix/10025/smtpd[2027468]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 03:01:03 anon_server_1 amavis[1988516]: (1988516-07) anon_hostname_42 anon_hostname_43 {anon_hostname_225}, anon_hostname_226 anon_hostname_227 [anon_ip_3] /anon_hostname_45 -> , (), Message-anon_hostname_47: , anon_hostname_48: anon_hostname_228, b: anon_hostname_229, anon_hostname_51: -0.001, anon_hostname_8: 1459, anon_hostname_52: 4b8zDv3DYqz2H3H, anon_hostname_53: "anon_subject_9", anon_hostname_54: , helo=, anon_hostname_58: [anon_hostname_230=-0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0, anon_hostname_231=anon_hostname_232:anon_hostname_41, 661 anon_hostname_68 +Jun 1 03:01:03 anon_server_1 postfix/amavis/smtp[2027465]: 4b8zDt5QjGz2H5g: to=, anon_hostname_233=, anon_hostname_69=anon_ip_3[anon_ip_3]:10026, anon_hostname_70=0.75, anon_hostname_71=0.06/0.01/0.01/0.66, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8zDv3DYqz2H3H) +Jun 1 03:01:03 anon_server_1 postfix/qmgr[1740239]: 4b8zDt5QjGz2H5g: anon_hostname_80 +Jun 1 03:01:03 anon_server_1 postfix/cleanup[2027456]: 4b8zDv3Yt0z2H5g: message-anon_hostname_7= +Jun 1 03:01:03 anon_server_1 postfix/local[2027471]: 4b8zDv3DYqz2H3H: to=, anon_hostname_69=anon_hostname_234, anon_hostname_70=0.06, anon_hostname_71=0.01/0.04/0/0.01, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_235 anon_hostname_79 4b8zDv3Yt0z2H5g) +Jun 1 03:01:03 anon_server_1 postfix/qmgr[1740239]: 4b8zDv3Yt0z2H5g: from=, anon_hostname_8=2928, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 03:01:03 anon_server_1 postfix/qmgr[1740239]: 4b8zDv3DYqz2H3H: anon_hostname_80 +Jun 1 03:01:03 anon_server_1 postfix/pipe[2027474]: 4b8zDv3Yt0z2H5g: to=, anon_hostname_233=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.12, anon_hostname_71=0.01/0.02/0/0.1, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 03:01:03 anon_server_1 postfix/qmgr[1740239]: 4b8zDv3Yt0z2H5g: anon_hostname_80 +Jun 1 03:03:45 anon_server_1 postfix/anvil[2026437]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_55) anon_hostname_35 Jun 1 02:55:20 +Jun 1 03:03:45 anon_server_1 postfix/anvil[2026437]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_55) anon_hostname_35 Jun 1 02:55:20 +Jun 1 03:03:45 anon_server_1 postfix/anvil[2026437]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 02:55:20 +Jun 1 03:09:46 anon_server_1 postfix/smtps/smtpd[2027731]: connect from unknown[anon_ip_57] +Jun 1 03:09:53 anon_server_1 postfix/smtps/smtpd[2027731]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_57]: anon_hostname_121 anon_hostname_104 +Jun 1 03:09:53 anon_server_1 postfix/smtps/smtpd[2027731]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_57] +Jun 1 03:09:53 anon_server_1 postfix/smtps/smtpd[2027731]: anon_hostname_12 from unknown[anon_ip_57] anon_hostname_18=0/0 +Jun 1 03:09:53 anon_server_1 postfix/smtps/smtpd[2027731]: connect from unknown[anon_ip_57] +Jun 1 03:09:54 anon_server_1 postfix/smtps/smtpd[2027731]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_57]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 03:09:54 anon_server_1 postfix/smtps/smtpd[2027731]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_215 from unknown[anon_ip_57] +Jun 1 03:09:54 anon_server_1 postfix/smtps/smtpd[2027731]: anon_hostname_12 from unknown[anon_ip_57] unknown=0/1 anon_hostname_18=0/1 +Jun 1 03:09:54 anon_server_1 postfix/smtps/smtpd[2027731]: connect from unknown[anon_ip_57] +Jun 1 03:09:54 anon_server_1 postfix/smtps/smtpd[2027731]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_57]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 03:09:54 anon_server_1 postfix/smtps/smtpd[2027731]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_57] +Jun 1 03:09:54 anon_server_1 postfix/smtps/smtpd[2027731]: anon_hostname_12 from unknown[anon_ip_57] anon_hostname_18=0/0 +Jun 1 03:13:14 anon_server_1 postfix/anvil[2027734]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_57) anon_hostname_35 Jun 1 03:09:54 +Jun 1 03:13:14 anon_server_1 postfix/anvil[2027734]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_57) anon_hostname_35 Jun 1 03:09:54 +Jun 1 03:13:14 anon_server_1 postfix/anvil[2027734]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 03:09:54 +Jun 1 03:23:04 anon_server_1 postfix/postscreen[2028128]: anon_hostname_1 from [anon_ip_27]:54920 to [anon_ip_2]:25 +Jun 1 03:23:04 anon_server_1 postfix/dnsblog[2028130]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 03:23:10 anon_server_1 postfix/postscreen[2028128]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:54920 +Jun 1 03:23:10 anon_server_1 postfix/postscreen[2028128]: anon_hostname_183 [anon_ip_27]:54920 +Jun 1 03:29:25 anon_server_1 postfix/postscreen[2028284]: anon_hostname_1 from [anon_ip_58]:48024 to [anon_ip_2]:25 +Jun 1 03:29:25 anon_server_1 postfix/dnsblog[2028286]: anon_hostname_178 anon_ip_58 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 03:29:31 anon_server_1 postfix/postscreen[2028284]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_58]:48024 +Jun 1 03:29:31 anon_server_1 postfix/postscreen[2028284]: anon_hostname_183 [anon_ip_58]:48024 +Jun 1 03:30:02 anon_server_1 postfix/pickup[2027723]: 4b8ztL5sMxz2H68: anon_hostname_221=0 from= +Jun 1 03:30:02 anon_server_1 postfix/cleanup[2028421]: 4b8ztL5sMxz2H68: message-anon_hostname_7= +Jun 1 03:30:02 anon_server_1 postfix/qmgr[1740239]: 4b8ztL5sMxz2H68: from=, anon_hostname_8=1293, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 03:30:03 anon_server_1 postfix/10025/smtpd[2028433]: connect from anon_hostname_39[anon_ip_3] +Jun 1 03:30:03 anon_server_1 postfix/10025/smtpd[2028433]: 4b8ztM2HDrz2H5g: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 03:30:03 anon_server_1 postfix/cleanup[2028421]: 4b8ztM2HDrz2H5g: message-anon_hostname_7= +Jun 1 03:30:03 anon_server_1 postfix/qmgr[1740239]: 4b8ztM2HDrz2H5g: from=, anon_hostname_8=2690, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 03:30:03 anon_server_1 postfix/10025/smtpd[2028433]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 03:30:03 anon_server_1 amavis[1988518]: (1988518-09) anon_hostname_42 anon_hostname_43 {anon_hostname_225}, anon_hostname_226 anon_hostname_227 [anon_ip_3] /anon_hostname_45 -> , (), Message-anon_hostname_47: , anon_hostname_48: 3JVWgQrGpdIV, b: 7EjQMMoUa, anon_hostname_51: 0, anon_hostname_8: 1369, anon_hostname_52: 4b8ztM2HDrz2H5g, anon_hostname_53: "anon_subject_10", anon_hostname_54: , helo=, anon_hostname_58: [anon_hostname_230=-0.001,anon_hostname_61=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.001, anon_hostname_231=anon_hostname_232:anon_hostname_41, 490 anon_hostname_68 +Jun 1 03:30:03 anon_server_1 postfix/amavis/smtp[2028430]: 4b8ztL5sMxz2H68: to=, anon_hostname_233=, anon_hostname_69=anon_ip_3[anon_ip_3]:10026, anon_hostname_70=0.59, anon_hostname_71=0.07/0.02/0.01/0.49, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b8ztM2HDrz2H5g) +Jun 1 03:30:03 anon_server_1 postfix/qmgr[1740239]: 4b8ztL5sMxz2H68: anon_hostname_80 +Jun 1 03:30:03 anon_server_1 postfix/cleanup[2028421]: 4b8ztM2pPJz2H68: message-anon_hostname_7= +Jun 1 03:30:03 anon_server_1 postfix/qmgr[1740239]: 4b8ztM2pPJz2H68: from=, anon_hostname_8=2837, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 03:30:03 anon_server_1 postfix/local[2028436]: 4b8ztM2HDrz2H5g: to=, anon_hostname_69=anon_hostname_234, anon_hostname_70=0.09, anon_hostname_71=0.04/0.02/0/0.03, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_235 anon_hostname_79 4b8ztM2pPJz2H68) +Jun 1 03:30:03 anon_server_1 postfix/qmgr[1740239]: 4b8ztM2HDrz2H5g: anon_hostname_80 +Jun 1 03:30:03 anon_server_1 postfix/pipe[2028438]: 4b8ztM2pPJz2H68: to=, anon_hostname_233=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.23, anon_hostname_71=0.01/0.03/0/0.19, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 03:30:03 anon_server_1 postfix/qmgr[1740239]: 4b8ztM2pPJz2H68: anon_hostname_80 +Jun 1 03:40:07 anon_server_1 postfix/postscreen[2028752]: anon_hostname_1 from [2001:470:1:anon_hostname_239::anon_hostname_240]:37467 to [2001:41d0:304:200::99b6]:25 +Jun 1 03:40:07 anon_server_1 postfix/dnsblog[2028754]: anon_hostname_178 2001:470:1:anon_hostname_239::anon_hostname_240 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 03:40:11 anon_server_1 postfix/postscreen[2028752]: anon_hostname_241 anon_hostname_122 4.2 from [2001:470:1:anon_hostname_239::anon_hostname_240]:37467 anon_hostname_21 anon_hostname_242 anon_hostname_243 SMTP anon_hostname_244 +Jun 1 03:40:11 anon_server_1 postfix/postscreen[2028752]: anon_hostname_183 [2001:470:1:anon_hostname_239::anon_hostname_240]:37467 +Jun 1 03:40:14 anon_server_1 postfix/postscreen[2028752]: anon_hostname_1 from [2001:470:1:anon_hostname_239::anon_hostname_245]:59009 to [2001:41d0:304:200::99b6]:25 +Jun 1 03:40:14 anon_server_1 postfix/dnsblog[2028753]: anon_hostname_178 2001:470:1:anon_hostname_239::anon_hostname_245 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 03:40:18 anon_server_1 postfix/postscreen[2028752]: anon_hostname_241 anon_hostname_122 4.1 from [2001:470:1:anon_hostname_239::anon_hostname_245]:59009 anon_hostname_21 anon_hostname_242 anon_hostname_243 SMTP anon_hostname_244 +Jun 1 03:40:18 anon_server_1 postfix/postscreen[2028752]: anon_hostname_183 [2001:470:1:anon_hostname_239::anon_hostname_245]:59009 +Jun 1 03:40:53 anon_server_1 postfix/smtps/smtpd[2028764]: connect from anon_hostname_246[anon_ip_59] +Jun 1 03:40:54 anon_server_1 postfix/smtps/smtpd[2028764]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_246[anon_ip_59]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 03:40:57 anon_server_1 postfix/smtps/smtpd[2028764]: anon_hostname_158: anon_hostname_246[anon_ip_59]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 03:40:57 anon_server_1 postfix/smtps/smtpd[2028764]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_246[anon_ip_59] +Jun 1 03:40:57 anon_server_1 postfix/smtps/smtpd[2028764]: anon_hostname_12 from anon_hostname_246[anon_ip_59] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 03:44:17 anon_server_1 postfix/anvil[2028766]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_59) anon_hostname_35 Jun 1 03:40:54 +Jun 1 03:44:17 anon_server_1 postfix/anvil[2028766]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_59) anon_hostname_35 Jun 1 03:40:54 +Jun 1 03:44:17 anon_server_1 postfix/anvil[2028766]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 03:40:54 +Jun 1 03:46:32 anon_server_1 postfix/smtps/smtpd[2028937]: connect from unknown[anon_ip_60] +Jun 1 03:46:35 anon_server_1 postfix/smtps/smtpd[2028937]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_60]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 03:46:42 anon_server_1 postfix/smtps/smtpd[2028937]: anon_hostname_158: unknown[anon_ip_60]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 03:46:47 anon_server_1 postfix/smtps/smtpd[2028975]: connect from unknown[anon_ip_61] +Jun 1 03:46:49 anon_server_1 postfix/smtps/smtpd[2028975]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_61]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 03:46:58 anon_server_1 postfix/smtps/smtpd[2028975]: anon_hostname_158: unknown[anon_ip_61]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 03:51:42 anon_server_1 postfix/smtps/smtpd[2028937]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_60] +Jun 1 03:51:42 anon_server_1 postfix/smtps/smtpd[2028937]: anon_hostname_12 from unknown[anon_ip_60] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 03:51:58 anon_server_1 postfix/smtps/smtpd[2028975]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_61] +Jun 1 03:51:58 anon_server_1 postfix/smtps/smtpd[2028975]: anon_hostname_12 from unknown[anon_ip_61] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 03:55:18 anon_server_1 postfix/anvil[2028940]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_60) anon_hostname_35 Jun 1 03:46:35 +Jun 1 03:55:18 anon_server_1 postfix/anvil[2028940]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_60) anon_hostname_35 Jun 1 03:46:35 +Jun 1 03:55:18 anon_server_1 postfix/anvil[2028940]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 03:46:49 +Jun 1 03:58:45 anon_server_1 postfix/smtps/smtpd[2029308]: anon_hostname_158: anon_hostname_171 anon_hostname_247 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_62: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 03:58:45 anon_server_1 postfix/smtps/smtpd[2029308]: connect from unknown[anon_ip_62] +Jun 1 03:58:48 anon_server_1 postfix/smtps/smtpd[2029308]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_62]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 03:58:58 anon_server_1 postfix/smtps/smtpd[2029308]: anon_hostname_158: unknown[anon_ip_62]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 04:03:58 anon_server_1 postfix/smtps/smtpd[2029308]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_62] +Jun 1 04:03:58 anon_server_1 postfix/smtps/smtpd[2029308]: anon_hostname_12 from unknown[anon_ip_62] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 04:07:18 anon_server_1 postfix/anvil[2029311]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_62) anon_hostname_35 Jun 1 03:58:48 +Jun 1 04:07:18 anon_server_1 postfix/anvil[2029311]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_62) anon_hostname_35 Jun 1 03:58:48 +Jun 1 04:07:18 anon_server_1 postfix/anvil[2029311]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 03:58:48 +Jun 1 04:09:39 anon_server_1 postfix/smtps/smtpd[2029677]: anon_hostname_158: anon_hostname_171 anon_hostname_248 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_63: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 04:09:39 anon_server_1 postfix/smtps/smtpd[2029677]: connect from unknown[anon_ip_63] +Jun 1 04:09:41 anon_server_1 postfix/smtps/smtpd[2029677]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_63]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:09:50 anon_server_1 postfix/smtps/smtpd[2029677]: anon_hostname_158: unknown[anon_ip_63]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 04:10:08 anon_server_1 postfix/smtps/smtpd[2029735]: connect from unknown[anon_ip_64] +Jun 1 04:10:10 anon_server_1 postfix/smtps/smtpd[2029735]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_64]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:10:17 anon_server_1 postfix/smtps/smtpd[2029735]: anon_hostname_158: unknown[anon_ip_64]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 04:14:50 anon_server_1 postfix/smtps/smtpd[2029677]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_63] +Jun 1 04:14:50 anon_server_1 postfix/smtps/smtpd[2029677]: anon_hostname_12 from unknown[anon_ip_63] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 04:15:17 anon_server_1 postfix/smtps/smtpd[2029735]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_64] +Jun 1 04:15:17 anon_server_1 postfix/smtps/smtpd[2029735]: anon_hostname_12 from unknown[anon_ip_64] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 04:18:37 anon_server_1 postfix/anvil[2029681]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_63) anon_hostname_35 Jun 1 04:09:41 +Jun 1 04:18:37 anon_server_1 postfix/anvil[2029681]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_63) anon_hostname_35 Jun 1 04:09:41 +Jun 1 04:18:37 anon_server_1 postfix/anvil[2029681]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 04:10:10 +Jun 1 04:33:04 anon_server_1 postfix/postscreen[2030266]: anon_hostname_1 from [anon_ip_27]:55138 to [anon_ip_2]:25 +Jun 1 04:33:04 anon_server_1 postfix/dnsblog[2030268]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 04:33:10 anon_server_1 postfix/postscreen[2030266]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:55138 +Jun 1 04:33:10 anon_server_1 postfix/postscreen[2030266]: anon_hostname_183 [anon_ip_27]:55138 +Jun 1 04:37:44 anon_server_1 postfix/smtps/smtpd[2030370]: connect from unknown[anon_ip_65] +Jun 1 04:37:45 anon_server_1 postfix/smtps/smtpd[2030370]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_65]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:37:52 anon_server_1 postfix/smtps/smtpd[2030370]: anon_hostname_158: unknown[anon_ip_65]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_4 +Jun 1 04:38:01 anon_server_1 postfix/smtps/smtpd[2030413]: anon_hostname_158: anon_hostname_171 anon_hostname_249 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_66: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 04:38:01 anon_server_1 postfix/smtps/smtpd[2030413]: connect from unknown[anon_ip_66] +Jun 1 04:38:02 anon_server_1 postfix/smtps/smtpd[2030413]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_66]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:38:09 anon_server_1 postfix/smtps/smtpd[2030413]: anon_hostname_158: unknown[anon_ip_66]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 04:38:10 anon_server_1 postfix/smtps/smtpd[2030411]: connect from unknown[anon_ip_67] +Jun 1 04:38:10 anon_server_1 postfix/smtps/smtpd[2030411]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_67]: anon_hostname_121 anon_hostname_104 +Jun 1 04:38:10 anon_server_1 postfix/smtps/smtpd[2030411]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_67] +Jun 1 04:38:10 anon_server_1 postfix/smtps/smtpd[2030411]: anon_hostname_12 from unknown[anon_ip_67] anon_hostname_18=0/0 +Jun 1 04:39:34 anon_server_1 postfix/smtps/smtpd[2030411]: connect from unknown[anon_ip_68] +Jun 1 04:39:35 anon_server_1 postfix/smtps/smtpd[2030411]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_68]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:39:45 anon_server_1 postfix/smtps/smtpd[2030411]: anon_hostname_158: unknown[anon_ip_68]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_4 +Jun 1 04:40:18 anon_server_1 postfix/smtps/smtpd[2030584]: connect from anon_hostname_250[anon_ip_69] +Jun 1 04:40:19 anon_server_1 postfix/smtps/smtpd[2030584]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_250[anon_ip_69]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:42:52 anon_server_1 postfix/smtps/smtpd[2030370]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_65] +Jun 1 04:42:52 anon_server_1 postfix/smtps/smtpd[2030370]: anon_hostname_12 from unknown[anon_ip_65] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 04:43:09 anon_server_1 postfix/smtps/smtpd[2030413]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_66] +Jun 1 04:43:09 anon_server_1 postfix/smtps/smtpd[2030413]: anon_hostname_12 from unknown[anon_ip_66] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 04:44:45 anon_server_1 postfix/smtps/smtpd[2030411]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_68] +Jun 1 04:44:45 anon_server_1 postfix/smtps/smtpd[2030411]: anon_hostname_12 from unknown[anon_ip_68] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 04:45:19 anon_server_1 postfix/smtps/smtpd[2030584]: anon_hostname_152 anon_hostname_122 anon_hostname_1 from anon_hostname_250[anon_ip_69] +Jun 1 04:45:19 anon_server_1 postfix/smtps/smtpd[2030584]: anon_hostname_12 from anon_hostname_250[anon_ip_69] anon_hostname_18=0/0 +Jun 1 04:47:45 anon_server_1 postfix/anvil[2030373]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_65) anon_hostname_35 Jun 1 04:37:45 +Jun 1 04:47:45 anon_server_1 postfix/anvil[2030373]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_65) anon_hostname_35 Jun 1 04:37:45 +Jun 1 04:47:45 anon_server_1 postfix/anvil[2030373]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 04:40:19 +Jun 1 04:47:47 anon_server_1 postfix/smtps/smtpd[2030765]: connect from unknown[anon_ip_70] +Jun 1 04:47:47 anon_server_1 postfix/smtps/smtpd[2030765]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_70]: anon_hostname_121 anon_hostname_104 +Jun 1 04:47:47 anon_server_1 postfix/smtps/smtpd[2030765]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_70] +Jun 1 04:47:47 anon_server_1 postfix/smtps/smtpd[2030765]: anon_hostname_12 from unknown[anon_ip_70] anon_hostname_18=0/0 +Jun 1 04:48:03 anon_server_1 postfix/smtps/smtpd[2030765]: anon_hostname_158: anon_hostname_171 anon_hostname_251 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_71: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 04:48:03 anon_server_1 postfix/smtps/smtpd[2030765]: connect from unknown[anon_ip_71] +Jun 1 04:48:05 anon_server_1 postfix/smtps/smtpd[2030765]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_71]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:48:11 anon_server_1 postfix/smtps/smtpd[2030765]: anon_hostname_158: unknown[anon_ip_71]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 04:48:17 anon_server_1 postfix/smtps/smtpd[2030825]: connect from unknown[anon_ip_72] +Jun 1 04:48:20 anon_server_1 postfix/smtps/smtpd[2030825]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_72]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:48:27 anon_server_1 postfix/smtps/smtpd[2030825]: anon_hostname_158: unknown[anon_ip_72]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 04:50:24 anon_server_1 postfix/postscreen[2030904]: anon_hostname_1 from [anon_ip_73]:6243 to [anon_ip_2]:25 +Jun 1 04:50:24 anon_server_1 postfix/dnsblog[2030906]: anon_hostname_178 anon_ip_73 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 04:50:28 anon_server_1 postfix/postscreen[2030904]: anon_hostname_241 anon_hostname_122 4.1 from [anon_ip_73]:6243 anon_hostname_21 anon_hostname_242 anon_hostname_243 SMTP anon_hostname_244 +Jun 1 04:50:28 anon_server_1 postfix/postscreen[2030904]: anon_hostname_183 [anon_ip_73]:6243 +Jun 1 04:50:37 anon_server_1 postfix/postscreen[2030904]: anon_hostname_1 from [anon_ip_74]:19139 to [anon_ip_2]:25 +Jun 1 04:50:37 anon_server_1 postfix/dnsblog[2030905]: anon_hostname_178 anon_ip_74 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 04:50:41 anon_server_1 postfix/postscreen[2030904]: anon_hostname_241 anon_hostname_122 4.1 from [anon_ip_74]:19139 anon_hostname_21 anon_hostname_242 anon_hostname_243 SMTP anon_hostname_244 +Jun 1 04:50:41 anon_server_1 postfix/postscreen[2030904]: anon_hostname_183 [anon_ip_74]:19139 +Jun 1 04:52:25 anon_server_1 postfix/smtps/smtpd[2030957]: anon_hostname_158: anon_hostname_171 anon_hostname_252non_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_75: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 04:52:25 anon_server_1 postfix/smtps/smtpd[2030957]: connect from unknown[anon_ip_75] +Jun 1 04:52:26 anon_server_1 postfix/smtps/smtpd[2030957]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_75]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:52:28 anon_server_1 postfix/smtps/smtpd[2030955]: connect from unknown[anon_ip_76] +Jun 1 04:52:28 anon_server_1 postfix/smtps/smtpd[2030955]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_76]: anon_hostname_121 anon_hostname_104 +Jun 1 04:52:29 anon_server_1 postfix/smtps/smtpd[2030955]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_76] +Jun 1 04:52:29 anon_server_1 postfix/smtps/smtpd[2030955]: anon_hostname_12 from unknown[anon_ip_76] anon_hostname_18=0/0 +Jun 1 04:52:34 anon_server_1 postfix/smtps/smtpd[2030957]: anon_hostname_158: unknown[anon_ip_75]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 04:52:38 anon_server_1 postfix/smtps/smtpd[2030955]: connect from anon_hostname_253[anon_ip_77] +Jun 1 04:52:39 anon_server_1 postfix/smtps/smtpd[2030955]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_253[anon_ip_77]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 04:52:45 anon_server_1 postfix/smtps/smtpd[2030955]: anon_hostname_158: anon_hostname_253[anon_ip_77]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 04:53:11 anon_server_1 postfix/smtps/smtpd[2030765]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_71] +Jun 1 04:53:11 anon_server_1 postfix/smtps/smtpd[2030765]: anon_hostname_12 from unknown[anon_ip_71] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 04:53:27 anon_server_1 postfix/smtps/smtpd[2030825]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_72] +Jun 1 04:53:27 anon_server_1 postfix/smtps/smtpd[2030825]: anon_hostname_12 from unknown[anon_ip_72] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 04:57:34 anon_server_1 postfix/smtps/smtpd[2030957]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_75] +Jun 1 04:57:34 anon_server_1 postfix/smtps/smtpd[2030957]: anon_hostname_12 from unknown[anon_ip_75] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 04:57:45 anon_server_1 postfix/anvil[2030373]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_71) anon_hostname_35 Jun 1 04:48:05 +Jun 1 04:57:45 anon_server_1 postfix/anvil[2030373]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_71) anon_hostname_35 Jun 1 04:48:05 +Jun 1 04:57:45 anon_server_1 postfix/anvil[2030373]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 04:52:39 +Jun 1 04:57:45 anon_server_1 postfix/smtps/smtpd[2030955]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_253[anon_ip_77] +Jun 1 04:57:45 anon_server_1 postfix/smtps/smtpd[2030955]: anon_hostname_12 from anon_hostname_253[anon_ip_77] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 05:20:10 anon_server_1 postfix/submission/smtpd[2031783]: connect from anon_hostname_254[anon_ip_78] +Jun 1 05:20:10 anon_server_1 postfix/submission/smtpd[2031783]: anon_hostname_255 anon_hostname_256 anon_hostname_257 anon_hostname_122 anon_hostname_1 from anon_hostname_254[anon_ip_78]: anon_hostname_218 anon_hostname_258\r\n +Jun 1 05:20:19 anon_server_1 postfix/submission/smtpd[2031783]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from anon_hostname_254[anon_ip_78] +Jun 1 05:20:19 anon_server_1 postfix/submission/smtpd[2031783]: anon_hostname_12 from anon_hostname_254[anon_ip_78] anon_hostname_13=1 anon_hostname_18=1 +Jun 1 05:23:39 anon_server_1 postfix/anvil[2031785]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_259:anon_ip_78) anon_hostname_35 Jun 1 05:20:10 +Jun 1 05:23:39 anon_server_1 postfix/anvil[2031785]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_259:anon_ip_78) anon_hostname_35 Jun 1 05:20:10 +Jun 1 05:23:39 anon_server_1 postfix/anvil[2031785]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 05:20:10 +Jun 1 05:32:17 anon_server_1 postfix/smtps/smtpd[2032085]: connect from anon_hostname_260[anon_ip_79] +Jun 1 05:32:19 anon_server_1 postfix/smtps/smtpd[2032085]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_260[anon_ip_79]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 05:32:26 anon_server_1 postfix/smtps/smtpd[2032085]: anon_hostname_158: anon_hostname_260[anon_ip_79]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 05:32:36 anon_server_1 postfix/smtps/smtpd[2032123]: connect from unknown[anon_ip_80] +Jun 1 05:32:36 anon_server_1 postfix/smtps/smtpd[2032124]: connect from unknown[anon_ip_81] +Jun 1 05:32:37 anon_server_1 postfix/smtps/smtpd[2032124]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_81]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 05:32:38 anon_server_1 postfix/smtps/smtpd[2032123]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_80]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 05:32:44 anon_server_1 postfix/smtps/smtpd[2032124]: anon_hostname_158: unknown[anon_ip_81]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 05:32:44 anon_server_1 postfix/smtps/smtpd[2032124]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_81] +Jun 1 05:32:44 anon_server_1 postfix/smtps/smtpd[2032124]: anon_hostname_12 from unknown[anon_ip_81] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 05:32:45 anon_server_1 postfix/smtps/smtpd[2032123]: anon_hostname_158: unknown[anon_ip_80]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 05:32:47 anon_server_1 postfix/smtps/smtpd[2032124]: connect from unknown[anon_ip_82] +Jun 1 05:32:49 anon_server_1 postfix/smtps/smtpd[2032124]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_82]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 05:32:54 anon_server_1 postfix/smtps/smtpd[2032124]: anon_hostname_158: unknown[anon_ip_82]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 05:36:55 anon_server_1 postfix/smtps/smtpd[2032335]: connect from unknown[anon_ip_83] +Jun 1 05:36:55 anon_server_1 postfix/smtps/smtpd[2032335]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_83]: anon_hostname_121 anon_hostname_104 +Jun 1 05:36:55 anon_server_1 postfix/smtps/smtpd[2032335]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_83] +Jun 1 05:36:55 anon_server_1 postfix/smtps/smtpd[2032335]: anon_hostname_12 from unknown[anon_ip_83] anon_hostname_18=0/0 +Jun 1 05:36:57 anon_server_1 postfix/smtps/smtpd[2032335]: anon_hostname_158: anon_hostname_171 anon_hostname_261 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_84: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 05:36:57 anon_server_1 postfix/smtps/smtpd[2032335]: connect from unknown[anon_ip_84] +Jun 1 05:37:00 anon_server_1 postfix/smtps/smtpd[2032335]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_84]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 05:37:06 anon_server_1 postfix/smtps/smtpd[2032335]: anon_hostname_158: unknown[anon_ip_84]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 05:37:26 anon_server_1 postfix/smtps/smtpd[2032085]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_260[anon_ip_79] +Jun 1 05:37:26 anon_server_1 postfix/smtps/smtpd[2032085]: anon_hostname_12 from anon_hostname_260[anon_ip_79] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 05:37:45 anon_server_1 postfix/smtps/smtpd[2032123]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_80] +Jun 1 05:37:45 anon_server_1 postfix/smtps/smtpd[2032123]: anon_hostname_12 from unknown[anon_ip_80] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 05:37:54 anon_server_1 postfix/smtps/smtpd[2032124]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_82] +Jun 1 05:37:54 anon_server_1 postfix/smtps/smtpd[2032124]: anon_hostname_12 from unknown[anon_ip_82] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 05:42:06 anon_server_1 postfix/smtps/smtpd[2032335]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_84] +Jun 1 05:42:06 anon_server_1 postfix/smtps/smtpd[2032335]: anon_hostname_12 from unknown[anon_ip_84] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 05:42:19 anon_server_1 postfix/anvil[2032088]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_79) anon_hostname_35 Jun 1 05:32:19 +Jun 1 05:42:19 anon_server_1 postfix/anvil[2032088]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_79) anon_hostname_35 Jun 1 05:32:19 +Jun 1 05:42:19 anon_server_1 postfix/anvil[2032088]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 05:32:49 +Jun 1 05:43:03 anon_server_1 postfix/postscreen[2032581]: anon_hostname_1 from [anon_ip_27]:45736 to [anon_ip_2]:25 +Jun 1 05:43:04 anon_server_1 postfix/dnsblog[2032583]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 05:43:09 anon_server_1 postfix/postscreen[2032581]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:45736 +Jun 1 05:43:09 anon_server_1 postfix/postscreen[2032581]: anon_hostname_183 [anon_ip_27]:45736 +Jun 1 05:46:00 anon_server_1 postfix/submission/smtpd[2032638]: connect from unknown[anon_ip_50] +Jun 1 05:46:00 anon_server_1 postfix/submission/smtpd[2032638]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_50] +Jun 1 05:46:00 anon_server_1 postfix/submission/smtpd[2032638]: anon_hostname_12 from unknown[anon_ip_50] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 05:49:20 anon_server_1 postfix/anvil[2032640]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_259:anon_ip_50) anon_hostname_35 Jun 1 05:46:00 +Jun 1 05:49:20 anon_server_1 postfix/anvil[2032640]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_259:anon_ip_50) anon_hostname_35 Jun 1 05:46:00 +Jun 1 05:49:20 anon_server_1 postfix/anvil[2032640]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 05:46:00 +Jun 1 05:49:46 anon_server_1 postfix/postscreen[2032798]: anon_hostname_1 from [anon_ip_43]:35886 to [anon_ip_2]:25 +Jun 1 05:49:46 anon_server_1 postfix/dnsblog[2032800]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 05:49:46 anon_server_1 postfix/dnsblog[2032800]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 05:49:52 anon_server_1 postfix/postscreen[2032798]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_43]:35886 +Jun 1 05:49:52 anon_server_1 postfix/postscreen[2032798]: anon_hostname_183 [anon_ip_43]:35886 +Jun 1 05:54:40 anon_server_1 postfix/smtps/smtpd[2032985]: connect from unknown[anon_ip_85] +Jun 1 05:54:43 anon_server_1 postfix/smtps/smtpd[2032985]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_85]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 05:54:52 anon_server_1 postfix/smtps/smtpd[2032985]: anon_hostname_158: unknown[anon_ip_85]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 05:54:57 anon_server_1 postfix/smtps/smtpd[2033023]: connect from unknown[anon_ip_86] +Jun 1 05:55:00 anon_server_1 postfix/smtps/smtpd[2033023]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_86]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 05:55:11 anon_server_1 postfix/smtps/smtpd[2033023]: anon_hostname_158: unknown[anon_ip_86]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 05:57:53 anon_server_1 postfix/smtps/smtpd[2033126]: connect from unknown[anon_ip_87] +Jun 1 05:57:56 anon_server_1 postfix/smtps/smtpd[2033126]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_87]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 05:58:06 anon_server_1 postfix/smtps/smtpd[2033126]: anon_hostname_158: unknown[anon_ip_87]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 05:58:09 anon_server_1 postfix/smtps/smtpd[2033176]: connect from anon_hostname_262[anon_ip_88] +Jun 1 05:58:12 anon_server_1 postfix/smtps/smtpd[2033176]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_262[anon_ip_88]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 05:58:19 anon_server_1 postfix/smtps/smtpd[2033176]: anon_hostname_158: anon_hostname_262[anon_ip_88]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 05:58:53 anon_server_1 postfix/smtps/smtpd[2033214]: connect from unknown[anon_ip_89] +Jun 1 05:59:04 anon_server_1 postfix/smtps/smtpd[2033214]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_89]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 05:59:04 anon_server_1 postfix/smtps/smtpd[2033214]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_89] +Jun 1 05:59:04 anon_server_1 postfix/smtps/smtpd[2033214]: anon_hostname_12 from unknown[anon_ip_89] anon_hostname_18=0/0 +Jun 1 05:59:52 anon_server_1 postfix/smtps/smtpd[2032985]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_85] +Jun 1 05:59:52 anon_server_1 postfix/smtps/smtpd[2032985]: anon_hostname_12 from unknown[anon_ip_85] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 06:00:02 anon_server_1 postfix/postscreen[2033267]: anon_hostname_1 from [anon_ip_90]:42217 to [anon_ip_2]:25 +Jun 1 06:00:02 anon_server_1 postfix/dnsblog[2033269]: anon_hostname_178 anon_ip_90 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 06:00:02 anon_server_1 postfix/dnsblog[2033269]: anon_hostname_178 anon_ip_90 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 06:00:02 anon_server_1 postfix/postscreen[2033267]: anon_hostname_241 anon_hostname_122 0.24 from [anon_ip_90]:42217 anon_hostname_21 anon_hostname_242 anon_hostname_243 SMTP anon_hostname_244 +Jun 1 06:00:02 anon_server_1 postfix/postscreen[2033267]: anon_hostname_183 [anon_ip_90]:42217 +Jun 1 06:00:11 anon_server_1 postfix/smtps/smtpd[2033023]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_86] +Jun 1 06:00:11 anon_server_1 postfix/smtps/smtpd[2033023]: anon_hostname_12 from unknown[anon_ip_86] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 06:00:44 anon_server_1 postfix/smtps/smtpd[2032985]: connect from unknown[anon_ip_89] +Jun 1 06:00:45 anon_server_1 postfix/smtps/smtpd[2032985]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_89]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 06:00:45 anon_server_1 postfix/smtps/smtpd[2032985]: anon_hostname_158: anon_hostname_263 anon_hostname_256 from unknown[anon_ip_89]: anon_hostname_264 / anon_hostname_265/1.1 +Jun 1 06:00:45 anon_server_1 postfix/smtps/smtpd[2032985]: anon_hostname_12 from unknown[anon_ip_89] unknown=0/1 anon_hostname_18=0/1 +Jun 1 06:00:45 anon_server_1 postfix/smtps/smtpd[2033023]: connect from unknown[anon_ip_89] +Jun 1 06:00:46 anon_server_1 postfix/smtps/smtpd[2033023]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_89]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 06:00:46 anon_server_1 postfix/smtps/smtpd[2033023]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_89] +Jun 1 06:00:46 anon_server_1 postfix/smtps/smtpd[2033023]: anon_hostname_12 from unknown[anon_ip_89] anon_hostname_18=0/0 +Jun 1 06:03:06 anon_server_1 postfix/smtps/smtpd[2033126]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_87] +Jun 1 06:03:06 anon_server_1 postfix/smtps/smtpd[2033126]: anon_hostname_12 from unknown[anon_ip_87] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 06:03:19 anon_server_1 postfix/smtps/smtpd[2033176]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_262[anon_ip_88] +Jun 1 06:03:19 anon_server_1 postfix/smtps/smtpd[2033176]: anon_hostname_12 from anon_hostname_262[anon_ip_88] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 06:04:43 anon_server_1 postfix/anvil[2032989]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 2/60s for (465:anon_ip_89) anon_hostname_35 Jun 1 06:00:46 +Jun 1 06:04:43 anon_server_1 postfix/anvil[2032989]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_85) anon_hostname_35 Jun 1 05:54:43 +Jun 1 06:04:43 anon_server_1 postfix/anvil[2032989]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 5 anon_hostname_35 Jun 1 06:00:45 +Jun 1 06:05:02 anon_server_1 postfix/postscreen[2033401]: anon_hostname_1 from [anon_ip_90]:33717 to [anon_ip_2]:25 +Jun 1 06:05:02 anon_server_1 postfix/dnsblog[2033402]: anon_hostname_178 anon_ip_90 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 06:05:02 anon_server_1 postfix/dnsblog[2033402]: anon_hostname_178 anon_ip_90 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 06:05:08 anon_server_1 postfix/postscreen[2033401]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_90]:33717 +Jun 1 06:05:08 anon_server_1 postfix/postscreen[2033401]: anon_hostname_183 [anon_ip_90]:33717 +Jun 1 06:19:30 anon_server_1 postfix/submission/smtpd[2033814]: connect from anon_hostname_266n_ip_92] +Jun 1 06:19:30 anon_server_1 postfix/submission/smtpd[2033814]: anon_hostname_255 anon_hostname_256 anon_hostname_257 anon_hostname_122 anon_hostname_1 from anon_hostname_266n_ip_92]: \r\n\r\n +Jun 1 06:19:36 anon_server_1 postfix/submission/smtpd[2033814]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_266n_ip_92] +Jun 1 06:19:36 anon_server_1 postfix/submission/smtpd[2033814]: anon_hostname_12 from anon_hostname_266n_ip_92] anon_hostname_18=0/0 +Jun 1 06:20:54 anon_server_1 postfix/submission/smtpd[2033814]: connect from anon_hostname_266n_ip_92] +Jun 1 06:20:54 anon_server_1 postfix/submission/smtpd[2033814]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from anon_hostname_266n_ip_92] +Jun 1 06:20:54 anon_server_1 postfix/submission/smtpd[2033814]: anon_hostname_12 from anon_hostname_266n_ip_92] anon_hostname_13=1 anon_hostname_18=1 +Jun 1 06:21:15 anon_server_1 postfix/smtps/smtpd[2033861]: connect from unknown[anon_ip_93] +Jun 1 06:21:47 anon_server_1 postfix/smtps/smtpd[2033861]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_93]: anon_hostname_121 anon_hostname_104 +Jun 1 06:21:47 anon_server_1 postfix/smtps/smtpd[2033861]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_93] +Jun 1 06:21:47 anon_server_1 postfix/smtps/smtpd[2033861]: anon_hostname_12 from unknown[anon_ip_93] anon_hostname_18=0/0 +Jun 1 06:21:58 anon_server_1 postfix/smtps/smtpd[2033861]: connect from unknown[anon_ip_94] +Jun 1 06:22:30 anon_server_1 postfix/smtps/smtpd[2033861]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_94]: anon_hostname_121 anon_hostname_104 +Jun 1 06:22:30 anon_server_1 postfix/smtps/smtpd[2033861]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_94] +Jun 1 06:22:30 anon_server_1 postfix/smtps/smtpd[2033861]: anon_hostname_12 from unknown[anon_ip_94] anon_hostname_18=0/0 +Jun 1 06:23:01 anon_server_1 postfix/smtps/smtpd[2033861]: connect from unknown[anon_ip_95] +Jun 1 06:23:19 anon_server_1 postfix/smtps/smtpd[2033861]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_95]: anon_hostname_121 anon_hostname_104 +Jun 1 06:23:19 anon_server_1 postfix/smtps/smtpd[2033861]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_95] +Jun 1 06:23:19 anon_server_1 postfix/smtps/smtpd[2033861]: anon_hostname_12 from unknown[anon_ip_95] anon_hostname_18=0/0 +Jun 1 06:25:17 anon_server_1 postfix/postscreen[2034098]: anon_hostname_1 from [anon_ip_96]:60730 to [anon_ip_2]:25 +Jun 1 06:25:17 anon_server_1 postfix/postscreen[2034098]: anon_hostname_267 [anon_ip_96]:60730 +Jun 1 06:25:17 anon_server_1 postfix/smtpd[2034099]: connect from anon_hostname_268[anon_ip_96] +Jun 1 06:25:17 anon_server_1 postfix/smtpd[2034099]: 4b93mY67b8z2H6D: anon_hostname_5=anon_hostname_268[anon_ip_96] +Jun 1 06:25:17 anon_server_1 postfix/cleanup[2034110]: 4b93mY67b8z2H6D: message-anon_hostname_7= +Jun 1 06:25:17 anon_server_1 postfix/qmgr[1740239]: 4b93mY67b8z2H6D: from=, anon_hostname_8=19296, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:25:17 anon_server_1 postfix/smtpd[2034099]: anon_hostname_12 from anon_hostname_268[anon_ip_96] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:25:19 anon_server_1 postfix/10025/smtpd[2034119]: connect from anon_hostname_39[anon_ip_3] +Jun 1 06:25:19 anon_server_1 postfix/10025/smtpd[2034119]: 4b93mb22TQz2H6F: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 06:25:19 anon_server_1 postfix/cleanup[2034110]: 4b93mb22TQz2H6F: message-anon_hostname_7= +Jun 1 06:25:19 anon_server_1 postfix/qmgr[1740239]: 4b93mb22TQz2H6F: from=, anon_hostname_8=19805, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:25:19 anon_server_1 postfix/10025/smtpd[2034119]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:25:19 anon_server_1 amavis[1988515]: (1988515-09) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_96]:60730 [anon_ip_96] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_96]:60730), anon_hostname_46: 4b93mY67b8z2H6D, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_270, b: 7wdypjaWS, anon_hostname_51: 1.309, anon_hostname_8: 19292, anon_hostname_52: 4b93mb22TQz2H6F, anon_hostname_53: "anon_subject_11", anon_hostname_54: , helo=anon_hostname_268, anon_hostname_58: [anon_hostname_271=0.998,anon_hostname_59=0.001,anon_hostname_60=0.001,anon_hostname_93=0.1,anon_hostname_272=0.1094,anon_hostname_273=0.1], anon_hostname_64=anon_hostname_65 anon_hostname_66=anon_hostname_65, anon_hostname_67=1.309, 1405 anon_hostname_68 +Jun 1 06:25:19 anon_server_1 postfix/amavis/smtp[2034115]: 4b93mY67b8z2H6D: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=1.5, anon_hostname_71=0.08/0.02/0.01/1.4, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b93mb22TQz2H6F) +Jun 1 06:25:19 anon_server_1 postfix/qmgr[1740239]: 4b93mY67b8z2H6D: anon_hostname_80 +Jun 1 06:25:19 anon_server_1 postfix/pipe[2034120]: 4b93mb22TQz2H6F: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.15, anon_hostname_71=0.01/0.01/0/0.12, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 06:25:19 anon_server_1 postfix/qmgr[1740239]: 4b93mb22TQz2H6F: anon_hostname_80 +Jun 1 06:25:49 anon_server_1 postfix/postscreen[2034098]: anon_hostname_1 from [anon_ip_96]:37326 to [anon_ip_2]:25 +Jun 1 06:25:49 anon_server_1 postfix/postscreen[2034098]: anon_hostname_267 [anon_ip_96]:37326 +Jun 1 06:25:49 anon_server_1 postfix/smtpd[2034099]: connect from anon_hostname_268[anon_ip_96] +Jun 1 06:25:49 anon_server_1 postfix/smtpd[2034099]: 4b93n90RvHz2H6F: anon_hostname_5=anon_hostname_268[anon_ip_96] +Jun 1 06:25:49 anon_server_1 postfix/cleanup[2034110]: 4b93n90RvHz2H6F: message-anon_hostname_7= +Jun 1 06:25:49 anon_server_1 postfix/qmgr[1740239]: 4b93n90RvHz2H6F: from=, anon_hostname_8=850468, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:25:49 anon_server_1 postfix/smtpd[2034099]: anon_hostname_12 from anon_hostname_268[anon_ip_96] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:25:51 anon_server_1 postfix/10025/smtpd[2034119]: connect from anon_hostname_39[anon_ip_3] +Jun 1 06:25:51 anon_server_1 postfix/10025/smtpd[2034119]: 4b93nC6QcZz2H6G: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 06:25:51 anon_server_1 postfix/cleanup[2034110]: 4b93nC6QcZz2H6G: message-anon_hostname_7= +Jun 1 06:25:51 anon_server_1 postfix/qmgr[1740239]: 4b93nC6QcZz2H6G: from=, anon_hostname_8=850979, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:25:51 anon_server_1 postfix/10025/smtpd[2034119]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:25:51 anon_server_1 amavis[1988517]: (1988517-10) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_96]:37326 [anon_ip_96] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_96]:37326), anon_hostname_46: 4b93n90RvHz2H6F, Message-anon_hostname_47: , anon_hostname_48: 5osTsDEPW6vF, b: anon_hostname_274, anon_hostname_51: 0.002, anon_hostname_8: 850468, anon_hostname_52: 4b93nC6QcZz2H6G, anon_hostname_53: "anon_subject_12", anon_hostname_54: , helo=anon_hostname_268, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 2851 anon_hostname_68 +Jun 1 06:25:51 anon_server_1 postfix/amavis/smtp[2034115]: 4b93n90RvHz2H6F: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=3, anon_hostname_71=0.1/0/0.01/2.9, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b93nC6QcZz2H6G) +Jun 1 06:25:51 anon_server_1 postfix/qmgr[1740239]: 4b93n90RvHz2H6F: anon_hostname_80 +Jun 1 06:25:52 anon_server_1 postfix/pipe[2034120]: 4b93nC6QcZz2H6G: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.19, anon_hostname_71=0.07/0.01/0/0.11, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 06:25:52 anon_server_1 postfix/qmgr[1740239]: 4b93nC6QcZz2H6G: anon_hostname_80 +Jun 1 06:26:00 anon_server_1 postfix/postscreen[2034098]: anon_hostname_1 from [anon_ip_1]:38268 to [anon_ip_2]:25 +Jun 1 06:26:00 anon_server_1 postfix/postscreen[2034098]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:38268 +Jun 1 06:26:00 anon_server_1 postfix/smtpd[2034099]: connect from anon_hostname_4[anon_ip_1] +Jun 1 06:26:00 anon_server_1 postfix/smtpd[2034099]: 4b93nN38mhz2H6C: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 06:26:00 anon_server_1 postfix/cleanup[2034110]: 4b93nN38mhz2H6C: message-anon_hostname_7= +Jun 1 06:26:00 anon_server_1 postfix/qmgr[1740239]: 4b93nN38mhz2H6C: from=, anon_hostname_8=80991, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:00 anon_server_1 postfix/smtpd[2034099]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:26:02 anon_server_1 postfix/pickup[2030824]: 4b93nQ0CBfz2H6G: anon_hostname_221=0 from= +Jun 1 06:26:02 anon_server_1 postfix/cleanup[2034110]: 4b93nQ0CBfz2H6G: message-anon_hostname_7= +Jun 1 06:26:02 anon_server_1 postfix/qmgr[1740239]: 4b93nQ0CBfz2H6G: from=, anon_hostname_8=182350, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:02 anon_server_1 postfix/10025/smtpd[2034119]: connect from anon_hostname_39[anon_ip_3] +Jun 1 06:26:02 anon_server_1 postfix/10025/smtpd[2034119]: 4b93nQ63t6z2H6B: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 06:26:02 anon_server_1 postfix/cleanup[2034110]: 4b93nQ63t6z2H6B: message-anon_hostname_7= +Jun 1 06:26:02 anon_server_1 postfix/qmgr[1740239]: 4b93nQ63t6z2H6B: from=, anon_hostname_8=81500, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:02 anon_server_1 postfix/10025/smtpd[2034119]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:26:02 anon_server_1 amavis[1988516]: (1988516-08) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:38268 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:38268), anon_hostname_46: 4b93nN38mhz2H6C, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_275, b: 8XIHf1wLQ, anon_hostname_51: 0.002, anon_hostname_8: 80986, anon_hostname_52: 4b93nQ63t6z2H6B, anon_hostname_53: "anon_subject_13", anon_hostname_54: , helo=anon_hostname_4, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 2467 anon_hostname_68 +Jun 1 06:26:02 anon_server_1 postfix/amavis/smtp[2034115]: 4b93nN38mhz2H6C: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=2.6, anon_hostname_71=0.1/0/0.01/2.5, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b93nQ63t6z2H6B) +Jun 1 06:26:02 anon_server_1 postfix/qmgr[1740239]: 4b93nN38mhz2H6C: anon_hostname_80 +Jun 1 06:26:02 anon_server_1 postfix/pipe[2034120]: 4b93nQ63t6z2H6B: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.15, anon_hostname_71=0.06/0.01/0/0.09, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 06:26:02 anon_server_1 postfix/qmgr[1740239]: 4b93nQ63t6z2H6B: anon_hostname_80 +Jun 1 06:26:04 anon_server_1 postfix/10025/smtpd[2034119]: connect from anon_hostname_39[anon_ip_3] +Jun 1 06:26:04 anon_server_1 postfix/10025/smtpd[2034119]: 4b93nS2YgBz2H6B: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 06:26:04 anon_server_1 postfix/cleanup[2034110]: 4b93nS2YgBz2H6B: message-anon_hostname_7= +Jun 1 06:26:04 anon_server_1 postfix/qmgr[1740239]: 4b93nS2YgBz2H6B: from=, anon_hostname_8=191024, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:04 anon_server_1 postfix/10025/smtpd[2034119]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:26:04 anon_server_1 amavis[1988518]: (1988518-10) anon_hostname_42 anon_hostname_43 {anon_hostname_225}, anon_hostname_226 anon_hostname_227 [anon_ip_3] /anon_hostname_45 -> , (), Message-anon_hostname_47: , anon_hostname_48: anon_hostname_276, b: anon_hostname_277, anon_hostname_51: -0.001, anon_hostname_8: 189680, anon_hostname_52: 4b93nS2YgBz2H6B, anon_hostname_53: "anon_subject_14", anon_hostname_54: , helo=, anon_hostname_58: [anon_hostname_230=-0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0, anon_hostname_231=anon_hostname_232:anon_hostname_41, 2315 anon_hostname_68 +Jun 1 06:26:04 anon_server_1 postfix/amavis/smtp[2034467]: 4b93nQ0CBfz2H6G: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10026, anon_hostname_70=59, anon_hostname_71=57/0.02/0.01/2.3, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b93nS2YgBz2H6B) +Jun 1 06:26:04 anon_server_1 postfix/qmgr[1740239]: 4b93nQ0CBfz2H6G: anon_hostname_80 +Jun 1 06:26:04 anon_server_1 postfix/pipe[2034120]: 4b93nS2YgBz2H6B: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.13, anon_hostname_71=0.02/0.01/0/0.1, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 06:26:04 anon_server_1 postfix/qmgr[1740239]: 4b93nS2YgBz2H6B: anon_hostname_80 +Jun 1 06:26:18 anon_server_1 postfix/postscreen[2034098]: anon_hostname_1 from [anon_ip_1]:43804 to [anon_ip_2]:25 +Jun 1 06:26:18 anon_server_1 postfix/postscreen[2034098]: anon_hostname_2 anon_hostname_3 [anon_ip_1]:43804 +Jun 1 06:26:18 anon_server_1 postfix/smtpd[2034099]: connect from anon_hostname_4[anon_ip_1] +Jun 1 06:26:18 anon_server_1 postfix/smtpd[2034099]: 4b93nk5Q4Fz2H6B: anon_hostname_5=anon_hostname_4[anon_ip_1] +Jun 1 06:26:18 anon_server_1 postfix/cleanup[2034110]: 4b93nk5Q4Fz2H6B: message-anon_hostname_7= +Jun 1 06:26:18 anon_server_1 postfix/qmgr[1740239]: 4b93nk5Q4Fz2H6B: from=, anon_hostname_8=676730, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:18 anon_server_1 postfix/smtpd[2034099]: anon_hostname_12 from anon_hostname_4[anon_ip_1] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:26:21 anon_server_1 postfix/10025/smtpd[2034119]: connect from anon_hostname_39[anon_ip_3] +Jun 1 06:26:21 anon_server_1 postfix/10025/smtpd[2034119]: 4b93nn1ckTz2H6H: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 06:26:21 anon_server_1 postfix/cleanup[2034110]: 4b93nn1ckTz2H6H: message-anon_hostname_7= +Jun 1 06:26:21 anon_server_1 postfix/10025/smtpd[2034119]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:26:21 anon_server_1 postfix/qmgr[1740239]: 4b93nn1ckTz2H6H: from=, anon_hostname_8=677239, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:21 anon_server_1 amavis[1988515]: (1988515-10) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_1]:43804 [anon_ip_1] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_45://[anon_ip_1]:43804), anon_hostname_46: 4b93nk5Q4Fz2H6B, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_278, b: anon_hostname_279, anon_hostname_51: 0.002, anon_hostname_8: 676730, anon_hostname_52: 4b93nn1ckTz2H6H, anon_hostname_53: "anon_subject_15", anon_hostname_54: , helo=anon_hostname_4, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 2469 anon_hostname_68 +Jun 1 06:26:21 anon_server_1 postfix/amavis/smtp[2034115]: 4b93nk5Q4Fz2H6B: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=2.6, anon_hostname_71=0.11/0/0.01/2.5, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b93nn1ckTz2H6H) +Jun 1 06:26:21 anon_server_1 postfix/qmgr[1740239]: 4b93nk5Q4Fz2H6B: anon_hostname_80 +Jun 1 06:26:21 anon_server_1 postfix/pipe[2034120]: 4b93nn1ckTz2H6H: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.16, anon_hostname_71=0.07/0.01/0/0.09, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 06:26:21 anon_server_1 postfix/qmgr[1740239]: 4b93nn1ckTz2H6H: anon_hostname_80 +Jun 1 06:26:36 anon_server_1 postfix/postscreen[2034098]: anon_hostname_1 from [anon_ip_4]:50720 to [anon_ip_2]:25 +Jun 1 06:26:36 anon_server_1 postfix/postscreen[2034098]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:50720 +Jun 1 06:26:36 anon_server_1 postfix/postscreen[2034098]: anon_hostname_1 from [anon_ip_4]:50736 to [anon_ip_2]:25 +Jun 1 06:26:36 anon_server_1 postfix/postscreen[2034098]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:50736 +Jun 1 06:26:36 anon_server_1 postfix/smtpd[2034099]: connect from anon_hostname_101[anon_ip_4] +Jun 1 06:26:36 anon_server_1 postfix/smtpd[2034099]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 06:26:36 anon_server_1 postfix/smtpd[2034571]: connect from anon_hostname_101[anon_ip_4] +Jun 1 06:26:36 anon_server_1 postfix/smtpd[2034571]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 06:26:36 anon_server_1 postfix/smtpd[2034571]: 4b93p46NhMz2H5d: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 06:26:36 anon_server_1 postfix/cleanup[2034110]: 4b93p46NhMz2H5d: message-anon_hostname_7= +Jun 1 06:26:36 anon_server_1 postfix/smtpd[2034099]: 4b93p46cSVz2H6H: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 06:26:36 anon_server_1 postfix/qmgr[1740239]: 4b93p46NhMz2H5d: from=, anon_hostname_8=4121, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:36 anon_server_1 postfix/smtpd[2034571]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=1 anon_hostname_17=1 anon_hostname_18=7 +Jun 1 06:26:36 anon_server_1 postfix/cleanup[2034110]: 4b93p46cSVz2H6H: message-anon_hostname_7= +Jun 1 06:26:36 anon_server_1 postfix/qmgr[1740239]: 4b93p46cSVz2H6H: from=, anon_hostname_8=103532, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:36 anon_server_1 postfix/smtpd[2034099]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_17=1 anon_hostname_18=8 +Jun 1 06:26:37 anon_server_1 postfix/10025/smtpd[2034119]: connect from anon_hostname_39[anon_ip_3] +Jun 1 06:26:37 anon_server_1 postfix/10025/smtpd[2034119]: 4b93p52Rwmz2H6J: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 06:26:37 anon_server_1 postfix/cleanup[2034582]: 4b93p52Rwmz2H6J: message-anon_hostname_7= +Jun 1 06:26:37 anon_server_1 postfix/10025/smtpd[2034119]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:26:37 anon_server_1 postfix/qmgr[1740239]: 4b93p52Rwmz2H6J: from=, anon_hostname_8=4630, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:37 anon_server_1 amavis[1988517]: (1988517-11) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:50736 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:50736), anon_hostname_46: 4b93p46NhMz2H5d, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_280, b: anon_hostname_281, anon_hostname_51: 0.002, anon_hostname_8: 4121, anon_hostname_52: 4b93p52Rwmz2H6J, anon_hostname_53: "anon_subject_16", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 424 anon_hostname_68 +Jun 1 06:26:37 anon_server_1 postfix/amavis/smtp[2034467]: 4b93p46NhMz2H5d: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=0.57, anon_hostname_71=0.13/0.01/0.01/0.43, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b93p52Rwmz2H6J) +Jun 1 06:26:37 anon_server_1 postfix/qmgr[1740239]: 4b93p46NhMz2H5d: anon_hostname_80 +Jun 1 06:26:37 anon_server_1 postfix/pipe[2034120]: 4b93p52Rwmz2H6J: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.11, anon_hostname_71=0.01/0/0/0.09, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 06:26:37 anon_server_1 postfix/qmgr[1740239]: 4b93p52Rwmz2H6J: anon_hostname_80 +Jun 1 06:26:38 anon_server_1 postfix/10025/smtpd[2034119]: connect from anon_hostname_39[anon_ip_3] +Jun 1 06:26:38 anon_server_1 postfix/10025/smtpd[2034119]: 4b93p65XQVz2H6J: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 06:26:38 anon_server_1 postfix/cleanup[2034110]: 4b93p65XQVz2H6J: message-anon_hostname_7= +Jun 1 06:26:38 anon_server_1 postfix/qmgr[1740239]: 4b93p65XQVz2H6J: from=, anon_hostname_8=104041, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:26:38 anon_server_1 postfix/10025/smtpd[2034119]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:26:38 anon_server_1 amavis[1988516]: (1988516-09) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:50720 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:50720), anon_hostname_46: 4b93p46cSVz2H6H, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_282, b: 37Xrk1rer, anon_hostname_51: 0.002, anon_hostname_8: 103524, anon_hostname_52: 4b93p65XQVz2H6J, anon_hostname_53: "anon_subject_17", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 1840 anon_hostname_68 +Jun 1 06:26:38 anon_server_1 postfix/amavis/smtp[2034115]: 4b93p46cSVz2H6H: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=2, anon_hostname_71=0.14/0/0.01/1.8, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b93p65XQVz2H6J) +Jun 1 06:26:38 anon_server_1 postfix/qmgr[1740239]: 4b93p46cSVz2H6H: anon_hostname_80 +Jun 1 06:26:38 anon_server_1 postfix/pipe[2034120]: 4b93p65XQVz2H6J: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.08, anon_hostname_71=0.01/0/0/0.07, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 06:26:38 anon_server_1 postfix/qmgr[1740239]: 4b93p65XQVz2H6J: anon_hostname_80 +Jun 1 06:29:30 anon_server_1 postfix/anvil[2033816]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 2/60s for (anon_hostname_139:anon_ip_1) anon_hostname_35 Jun 1 06:26:18 +Jun 1 06:29:30 anon_server_1 postfix/anvil[2033816]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 2 for (anon_hostname_139:anon_ip_4) anon_hostname_35 Jun 1 06:26:36 +Jun 1 06:29:30 anon_server_1 postfix/anvil[2033816]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 06:26:36 +Jun 1 06:31:59 anon_server_1 postfix/smtps/smtpd[2034718]: connect from unknown[anon_ip_97] +Jun 1 06:31:59 anon_server_1 postfix/smtps/smtpd[2034718]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_97]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 06:32:06 anon_server_1 postfix/smtps/smtpd[2034718]: anon_hostname_158: unknown[anon_ip_97]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 06:32:16 anon_server_1 postfix/smtps/smtpd[2034889]: connect from unknown[anon_ip_98] +Jun 1 06:32:17 anon_server_1 postfix/smtps/smtpd[2034889]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_98]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 06:32:23 anon_server_1 amavis[2035087]: anon_hostname_284. /anon_hostname_285/anon_hostname_286/anon_hostname_287 anon_hostname_35 anon_hostname_224 anon_hostname_288.11.1 (20181009), anon_hostname_289 anon_hostname_290, anon_hostname_291="anon_hostname_283n_hostname_292" +Jun 1 06:32:23 anon_server_1 amavis[2035087]: anon_hostname_293=5.032001, anon_hostname_294=114, anon_hostname_295: 114 (114); anon_hostname_296=, anon_hostname_297: 122 122 (122 122) +Jun 1 06:32:23 anon_server_1 amavis[2035087]: anon_hostname_298::anon_hostname_299: anon_hostname_300 anon_hostname_301 anon_hostname_302. anon_hostname_303 to anon_hostname_297 '122 122' +Jun 1 06:32:23 anon_server_1 amavis[2035087]: anon_hostname_298::anon_hostname_299: anon_hostname_304 anon_hostname_301 anon_hostname_302. anon_hostname_303 to anon_hostname_295 '114' +Jun 1 06:32:23 anon_server_1 amavis[2035087]: anon_hostname_305 anon_hostname_306 anon_hostname_307 for .F, anon_hostname_308: anon_hostname_309, anon_hostname_310 -d, anon_hostname_311, anon_hostname_312 +Jun 1 06:32:23 anon_server_1 amavis[2035087]: anon_hostname_305 anon_hostname_306 anon_hostname_307 for .anon_hostname_313, anon_hostname_308: anon_hostname_313, anon_hostname_314 +Jun 1 06:32:23 anon_server_1 amavis[2035087]: anon_hostname_305 anon_hostname_315 for .F +Jun 1 06:32:23 anon_server_1 amavis[2035087]: anon_hostname_305 anon_hostname_315 for .anon_hostname_313 +Jun 1 06:32:23 anon_server_1 amavis[2035087]: anon_hostname_316 anon_hostname_317 anon_hostname_318 anon_hostname_319 anon_hostname_320 anon_hostname_321 for anon_hostname_322 +Jun 1 06:32:26 anon_server_1 postfix/smtps/smtpd[2034889]: anon_hostname_158: unknown[anon_ip_98]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 06:32:43 anon_server_1 postfix/postscreen[2035136]: anon_hostname_1 from [anon_ip_3]:51332 to [anon_ip_3]:25 +Jun 1 06:32:43 anon_server_1 postfix/postscreen[2035136]: anon_hostname_267 [anon_ip_3]:51332 +Jun 1 06:32:43 anon_server_1 postfix/smtpd[2035137]: connect from anon_hostname_39[anon_ip_3] +Jun 1 06:32:44 anon_server_1 postfix/smtpd[2035137]: NOQUEUE: reject: RCPT from anon_hostname_39[anon_ip_3]: 504 5.5.2 : Sender address anon_hostname_323: anon_hostname_324 anon_hostname_325 address; from= to= proto=SMTP helo= +Jun 1 06:32:44 anon_server_1 postfix/smtpd[2035137]: anon_hostname_121 anon_hostname_104 anon_hostname_122 RCPT from anon_hostname_39[anon_ip_3] +Jun 1 06:32:44 anon_server_1 postfix/smtpd[2035137]: anon_hostname_12 from anon_hostname_39[anon_ip_3] helo=1 anon_hostname_14=1 anon_hostname_15=0/1 anon_hostname_18=2/3 +Jun 1 06:32:44 anon_server_1 postfix/pickup[2034607]: 4b93x84jfHz2H6N: anon_hostname_221=0 from= +Jun 1 06:32:44 anon_server_1 postfix/cleanup[2035141]: 4b93x84jfHz2H6N: message-anon_hostname_7= +Jun 1 06:32:44 anon_server_1 postfix/qmgr[1740239]: 4b93x84jfHz2H6N: from=, anon_hostname_8=1084164, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:32:47 anon_server_1 postfix/10025/smtpd[2035149]: connect from anon_hostname_39[anon_ip_3] +Jun 1 06:32:47 anon_server_1 postfix/10025/smtpd[2035149]: 4b93xC2C3Cz21DM: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 06:32:47 anon_server_1 postfix/cleanup[2035141]: 4b93xC2C3Cz21DM: message-anon_hostname_7= +Jun 1 06:32:47 anon_server_1 postfix/qmgr[1740239]: 4b93xC2C3Cz21DM: from=, anon_hostname_8=1098706, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:32:47 anon_server_1 postfix/10025/smtpd[2035149]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 06:32:47 anon_server_1 amavis[2035099]: (2035099-01) anon_hostname_42 anon_hostname_43 {anon_hostname_225}, anon_hostname_226 anon_hostname_227 [anon_ip_3] /anon_hostname_45 -> , (), Message-anon_hostname_47: , anon_hostname_48: anon_hostname_326, b: anon_hostname_327, anon_hostname_51: -0.001, anon_hostname_8: 1097383, anon_hostname_52: 4b93xC2C3Cz21DM, anon_hostname_53: "anon_subject_18", anon_hostname_54: , helo=, anon_hostname_58: [anon_hostname_230=-0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0, anon_hostname_231=anon_hostname_232:anon_hostname_41, 2676 anon_hostname_68 +Jun 1 06:32:47 anon_server_1 postfix/amavis/smtp[2035144]: 4b93x84jfHz2H6N: to=, anon_hostname_233=, anon_hostname_69=anon_ip_3[anon_ip_3]:10026, anon_hostname_70=2.8, anon_hostname_71=0.05/0.02/0.02/2.7, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b93xC2C3Cz21DM) +Jun 1 06:32:47 anon_server_1 postfix/qmgr[1740239]: 4b93x84jfHz2H6N: anon_hostname_80 +Jun 1 06:32:47 anon_server_1 postfix/cleanup[2035141]: 4b93xC2tDsz2H6N: message-anon_hostname_7= +Jun 1 06:32:47 anon_server_1 postfix/qmgr[1740239]: 4b93xC2tDsz2H6N: from=, anon_hostname_8=1098853, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 06:32:47 anon_server_1 postfix/local[2035150]: 4b93xC2C3Cz21DM: to=, anon_hostname_69=anon_hostname_234, anon_hostname_70=0.12, anon_hostname_71=0.07/0.03/0/0.02, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_235 anon_hostname_79 4b93xC2tDsz2H6N) +Jun 1 06:32:47 anon_server_1 postfix/qmgr[1740239]: 4b93xC2C3Cz21DM: anon_hostname_80 +Jun 1 06:32:47 anon_server_1 postfix/pipe[2035151]: 4b93xC2tDsz2H6N: to=, anon_hostname_233=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.17, anon_hostname_71=0.02/0.01/0/0.14, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 06:32:47 anon_server_1 postfix/qmgr[1740239]: 4b93xC2tDsz2H6N: anon_hostname_80 +Jun 1 06:37:06 anon_server_1 postfix/smtps/smtpd[2034718]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_97] +Jun 1 06:37:06 anon_server_1 postfix/smtps/smtpd[2034718]: anon_hostname_12 from unknown[anon_ip_97] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 06:37:26 anon_server_1 postfix/smtps/smtpd[2034889]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_98] +Jun 1 06:37:26 anon_server_1 postfix/smtps/smtpd[2034889]: anon_hostname_12 from unknown[anon_ip_98] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 06:40:46 anon_server_1 postfix/anvil[2034730]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_97) anon_hostname_35 Jun 1 06:32:00 +Jun 1 06:40:46 anon_server_1 postfix/anvil[2034730]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_97) anon_hostname_35 Jun 1 06:32:00 +Jun 1 06:40:46 anon_server_1 postfix/anvil[2034730]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 06:32:17 +Jun 1 06:42:17 anon_server_1 postfix/smtps/smtpd[2035526]: anon_hostname_158: anon_hostname_171 anon_hostname_328 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_99: anon_hostname_305 address anon_hostname_329 anon_hostname_107 anon_hostname_171 +Jun 1 06:42:17 anon_server_1 postfix/smtps/smtpd[2035526]: connect from unknown[anon_ip_99] +Jun 1 06:42:19 anon_server_1 postfix/smtps/smtpd[2035526]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_99]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 06:42:22 anon_server_1 postfix/smtps/smtpd[2035522]: connect from unknown[anon_ip_100] +Jun 1 06:42:22 anon_server_1 postfix/smtps/smtpd[2035522]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_100]: anon_hostname_121 anon_hostname_104 +Jun 1 06:42:22 anon_server_1 postfix/smtps/smtpd[2035522]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_100] +Jun 1 06:42:22 anon_server_1 postfix/smtps/smtpd[2035522]: anon_hostname_12 from unknown[anon_ip_100] anon_hostname_18=0/0 +Jun 1 06:42:23 anon_server_1 postfix/smtps/smtpd[2035524]: anon_hostname_158: anon_hostname_171 anon_hostname_330on_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_102: anon_hostname_331 anon_hostname_332 anon_hostname_21 anon_hostname_333 anon_hostname_334 +Jun 1 06:42:23 anon_server_1 postfix/smtps/smtpd[2035524]: connect from unknown[anon_ip_102] +Jun 1 06:42:23 anon_server_1 postfix/smtps/smtpd[2035524]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_102]: anon_hostname_121 anon_hostname_104 +Jun 1 06:42:23 anon_server_1 postfix/smtps/smtpd[2035524]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_102] +Jun 1 06:42:23 anon_server_1 postfix/smtps/smtpd[2035524]: anon_hostname_12 from unknown[anon_ip_102] anon_hostname_18=0/0 +Jun 1 06:42:27 anon_server_1 postfix/smtps/smtpd[2035526]: anon_hostname_158: unknown[anon_ip_99]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 06:42:40 anon_server_1 postfix/smtps/smtpd[2035522]: connect from unknown[anon_ip_103] +Jun 1 06:42:42 anon_server_1 postfix/smtps/smtpd[2035522]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_103]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 06:42:50 anon_server_1 postfix/smtps/smtpd[2035522]: anon_hostname_158: unknown[anon_ip_103]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_12 +Jun 1 06:47:27 anon_server_1 postfix/smtps/smtpd[2035526]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_99] +Jun 1 06:47:27 anon_server_1 postfix/smtps/smtpd[2035526]: anon_hostname_12 from unknown[anon_ip_99] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 06:47:50 anon_server_1 postfix/smtps/smtpd[2035522]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_103] +Jun 1 06:47:50 anon_server_1 postfix/smtps/smtpd[2035522]: anon_hostname_12 from unknown[anon_ip_103] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 06:51:10 anon_server_1 postfix/anvil[2035528]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_99) anon_hostname_35 Jun 1 06:42:19 +Jun 1 06:51:10 anon_server_1 postfix/anvil[2035528]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_99) anon_hostname_35 Jun 1 06:42:19 +Jun 1 06:51:10 anon_server_1 postfix/anvil[2035528]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 06:42:42 +Jun 1 06:53:04 anon_server_1 postfix/postscreen[2035873]: anon_hostname_1 from [anon_ip_27]:48932 to [anon_ip_2]:25 +Jun 1 06:53:04 anon_server_1 postfix/dnsblog[2035875]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 06:53:10 anon_server_1 postfix/postscreen[2035873]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:48932 +Jun 1 06:53:10 anon_server_1 postfix/postscreen[2035873]: anon_hostname_183 [anon_ip_27]:48932 +Jun 1 06:56:25 anon_server_1 postfix/smtps/smtpd[2035960]: connect from anon_hostname_335[anon_ip_104] +Jun 1 06:56:26 anon_server_1 postfix/smtps/smtpd[2035960]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_335[anon_ip_104]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 06:56:35 anon_server_1 postfix/smtps/smtpd[2035960]: anon_hostname_158: anon_hostname_335[anon_ip_104]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 07:01:18 anon_server_1 postfix/submission/smtpd[2036131]: connect from anon_hostname_336[anon_ip_105] +Jun 1 07:01:18 anon_server_1 postfix/submission/smtpd[2036131]: anon_hostname_255 anon_hostname_256 anon_hostname_257 anon_hostname_122 anon_hostname_1 from anon_hostname_336[anon_ip_105]: anon_hostname_337.94.71.134_587\n +Jun 1 07:01:18 anon_server_1 postfix/submission/smtpd[2036131]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_215 from anon_hostname_336[anon_ip_105] +Jun 1 07:01:18 anon_server_1 postfix/submission/smtpd[2036131]: anon_hostname_12 from anon_hostname_336[anon_ip_105] unknown=0/1 anon_hostname_18=0/1 +Jun 1 07:01:35 anon_server_1 postfix/smtps/smtpd[2035960]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_335[anon_ip_104] +Jun 1 07:01:35 anon_server_1 postfix/smtps/smtpd[2035960]: anon_hostname_12 from anon_hostname_335[anon_ip_104] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 07:04:55 anon_server_1 postfix/anvil[2035963]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_104) anon_hostname_35 Jun 1 06:56:26 +Jun 1 07:04:55 anon_server_1 postfix/anvil[2035963]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_104) anon_hostname_35 Jun 1 06:56:26 +Jun 1 07:04:55 anon_server_1 postfix/anvil[2035963]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 07:01:18 +Jun 1 07:13:36 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:48991 to [anon_ip_2]:25 +Jun 1 07:13:36 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:13:42 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:48991 +Jun 1 07:13:42 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:48991 +Jun 1 07:14:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:53168 to [anon_ip_2]:25 +Jun 1 07:14:05 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:14:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:53168 +Jun 1 07:14:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:53168 +Jun 1 07:15:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:54965 to [anon_ip_2]:25 +Jun 1 07:15:05 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:15:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:54965 +Jun 1 07:15:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:54965 +Jun 1 07:16:06 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:57397 to [anon_ip_2]:25 +Jun 1 07:16:06 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:16:12 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:57397 +Jun 1 07:16:12 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:57397 +Jun 1 07:17:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:56752 to [anon_ip_2]:25 +Jun 1 07:17:05 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:17:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:56752 +Jun 1 07:17:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:56752 +Jun 1 07:18:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:36572 to [anon_ip_2]:25 +Jun 1 07:18:05 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:18:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:36572 +Jun 1 07:18:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:36572 +Jun 1 07:19:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:55204 to [anon_ip_2]:25 +Jun 1 07:19:05 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:19:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:55204 +Jun 1 07:19:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:55204 +Jun 1 07:20:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:33484 to [anon_ip_2]:25 +Jun 1 07:20:05 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:20:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:33484 +Jun 1 07:20:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:33484 +Jun 1 07:21:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:55237 to [anon_ip_2]:25 +Jun 1 07:21:05 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:21:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:55237 +Jun 1 07:21:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:55237 +Jun 1 07:22:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:46924 to [anon_ip_2]:25 +Jun 1 07:22:05 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:22:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:46924 +Jun 1 07:22:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:46924 +Jun 1 07:23:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:54787 to [anon_ip_2]:25 +Jun 1 07:23:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:23:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:54787 +Jun 1 07:23:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:54787 +Jun 1 07:24:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:60732 to [anon_ip_2]:25 +Jun 1 07:24:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:24:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:60732 +Jun 1 07:24:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:60732 +Jun 1 07:25:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:36725 to [anon_ip_2]:25 +Jun 1 07:25:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:25:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:36725 +Jun 1 07:25:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:36725 +Jun 1 07:26:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:41565 to [anon_ip_2]:25 +Jun 1 07:26:05 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:26:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:41565 +Jun 1 07:26:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:41565 +Jun 1 07:27:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:40250 to [anon_ip_2]:25 +Jun 1 07:27:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:27:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:40250 +Jun 1 07:27:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:40250 +Jun 1 07:28:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:33267 to [anon_ip_2]:25 +Jun 1 07:28:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:28:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:33267 +Jun 1 07:28:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:33267 +Jun 1 07:29:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:43668 to [anon_ip_2]:25 +Jun 1 07:29:05 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:29:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:43668 +Jun 1 07:29:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:43668 +Jun 1 07:30:35 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:38756 to [anon_ip_2]:25 +Jun 1 07:30:35 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:30:41 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:38756 +Jun 1 07:30:41 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:38756 +Jun 1 07:31:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:42181 to [anon_ip_2]:25 +Jun 1 07:31:05 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:31:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:42181 +Jun 1 07:31:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:42181 +Jun 1 07:32:01 anon_server_1 postfix/smtps/smtpd[2036948]: connect from unknown[anon_ip_107] +Jun 1 07:32:04 anon_server_1 postfix/smtps/smtpd[2036948]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_107]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 07:32:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:35460 to [anon_ip_2]:25 +Jun 1 07:32:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:32:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:35460 +Jun 1 07:32:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:35460 +Jun 1 07:32:14 anon_server_1 postfix/smtps/smtpd[2036948]: anon_hostname_158: unknown[anon_ip_107]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 07:32:25 anon_server_1 postfix/smtps/smtpd[2037003]: connect from unknown[anon_ip_108] +Jun 1 07:32:27 anon_server_1 postfix/smtps/smtpd[2037003]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_108]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 07:32:35 anon_server_1 postfix/smtps/smtpd[2037003]: anon_hostname_158: unknown[anon_ip_108]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 07:33:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:37658 to [anon_ip_2]:25 +Jun 1 07:33:05 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:33:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:37658 +Jun 1 07:33:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:37658 +Jun 1 07:34:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:49518 to [anon_ip_2]:25 +Jun 1 07:34:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:34:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:49518 +Jun 1 07:34:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:49518 +Jun 1 07:35:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:48749 to [anon_ip_2]:25 +Jun 1 07:35:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:35:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:48749 +Jun 1 07:35:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:48749 +Jun 1 07:36:00 anon_server_1 postfix/smtps/smtpd[2037112]: connect from unknown[anon_ip_109] +Jun 1 07:36:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:60951 to [anon_ip_2]:25 +Jun 1 07:36:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:36:04 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_109]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 07:36:04 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_109] +Jun 1 07:36:04 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_12 from unknown[anon_ip_109] anon_hostname_18=0/0 +Jun 1 07:36:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:60951 +Jun 1 07:36:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:60951 +Jun 1 07:36:14 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_110]:65467 to [anon_ip_2]:25 +Jun 1 07:36:14 anon_server_1 postfix/postscreen[2036503]: anon_hostname_181 47 anon_hostname_122 0 from [anon_ip_110]:65467: \003\000\000/*\340\000\000\000\000\000Cookie: anon_hostname_338=anon_hostname_339\r\n\001\000\b\000\003\000\000\000 +Jun 1 07:36:14 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_110]:65467 +Jun 1 07:37:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:40614 to [anon_ip_2]:25 +Jun 1 07:37:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:37:08 anon_server_1 postfix/smtps/smtpd[2037112]: connect from unknown[anon_ip_109] +Jun 1 07:37:08 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_109]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 07:37:08 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_109] +Jun 1 07:37:08 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_12 from unknown[anon_ip_109] anon_hostname_18=0/0 +Jun 1 07:37:08 anon_server_1 postfix/smtps/smtpd[2037112]: connect from unknown[anon_ip_109] +Jun 1 07:37:09 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_109]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 07:37:09 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_158: anon_hostname_263 anon_hostname_256 from unknown[anon_ip_109]: anon_hostname_264 / anon_hostname_265/1.1 +Jun 1 07:37:09 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_12 from unknown[anon_ip_109] unknown=0/1 anon_hostname_18=0/1 +Jun 1 07:37:09 anon_server_1 postfix/smtps/smtpd[2037112]: connect from unknown[anon_ip_109] +Jun 1 07:37:09 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_109]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 07:37:09 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_109] +Jun 1 07:37:09 anon_server_1 postfix/smtps/smtpd[2037112]: anon_hostname_12 from unknown[anon_ip_109] anon_hostname_18=0/0 +Jun 1 07:37:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:40614 +Jun 1 07:37:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:40614 +Jun 1 07:37:14 anon_server_1 postfix/smtps/smtpd[2036948]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_107] +Jun 1 07:37:14 anon_server_1 postfix/smtps/smtpd[2036948]: anon_hostname_12 from unknown[anon_ip_107] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 07:37:35 anon_server_1 postfix/smtps/smtpd[2037003]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_108] +Jun 1 07:37:35 anon_server_1 postfix/smtps/smtpd[2037003]: anon_hostname_12 from unknown[anon_ip_108] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 07:38:35 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:35381 to [anon_ip_2]:25 +Jun 1 07:38:35 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:38:41 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:35381 +Jun 1 07:38:41 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:35381 +Jun 1 07:39:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:39833 to [anon_ip_2]:25 +Jun 1 07:39:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:39:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:39833 +Jun 1 07:39:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:39833 +Jun 1 07:39:24 anon_server_1 postfix/smtps/smtpd[2037300]: anon_hostname_158: anon_hostname_171 anon_hostname_340 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_111: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 07:39:24 anon_server_1 postfix/smtps/smtpd[2037300]: connect from unknown[anon_ip_111] +Jun 1 07:39:25 anon_server_1 postfix/smtps/smtpd[2037300]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_111]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 07:39:27 anon_server_1 postfix/smtps/smtpd[2037300]: anon_hostname_158: unknown[anon_ip_111]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 07:39:27 anon_server_1 postfix/smtps/smtpd[2037300]: anon_hostname_12 from unknown[anon_ip_111] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_17=1 unknown=0/1 anon_hostname_18=2/4 +Jun 1 07:39:30 anon_server_1 postfix/smtps/smtpd[2037300]: connect from unknown[anon_ip_109] +Jun 1 07:39:30 anon_server_1 postfix/smtps/smtpd[2037300]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_109]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 07:39:30 anon_server_1 postfix/smtps/smtpd[2037300]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_109] +Jun 1 07:39:30 anon_server_1 postfix/smtps/smtpd[2037300]: anon_hostname_12 from unknown[anon_ip_109] anon_hostname_13=1 anon_hostname_18=1 +Jun 1 07:40:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:58606 to [anon_ip_2]:25 +Jun 1 07:40:03 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:40:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:58606 +Jun 1 07:40:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:58606 +Jun 1 07:41:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:44415 to [anon_ip_2]:25 +Jun 1 07:41:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:41:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:44415 +Jun 1 07:41:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:44415 +Jun 1 07:42:04 anon_server_1 postfix/anvil[2036966]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 2/60s for (465:anon_ip_109) anon_hostname_35 Jun 1 07:37:09 +Jun 1 07:42:04 anon_server_1 postfix/anvil[2036966]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_107) anon_hostname_35 Jun 1 07:32:04 +Jun 1 07:42:04 anon_server_1 postfix/anvil[2036966]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 3 anon_hostname_35 Jun 1 07:37:09 +Jun 1 07:42:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:53936 to [anon_ip_2]:25 +Jun 1 07:42:05 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:42:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:53936 +Jun 1 07:42:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:53936 +Jun 1 07:43:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:45306 to [anon_ip_2]:25 +Jun 1 07:43:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:43:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:45306 +Jun 1 07:43:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:45306 +Jun 1 07:44:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:36312 to [anon_ip_2]:25 +Jun 1 07:44:03 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:44:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:36312 +Jun 1 07:44:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:36312 +Jun 1 07:45:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:41996 to [anon_ip_2]:25 +Jun 1 07:45:09 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:45:15 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:41996 +Jun 1 07:45:15 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:41996 +Jun 1 07:46:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:37667 to [anon_ip_2]:25 +Jun 1 07:46:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:46:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:37667 +Jun 1 07:46:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:37667 +Jun 1 07:47:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:58212 to [anon_ip_2]:25 +Jun 1 07:47:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:47:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:58212 +Jun 1 07:47:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:58212 +Jun 1 07:48:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:47122 to [anon_ip_2]:25 +Jun 1 07:48:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:48:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:47122 +Jun 1 07:48:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:47122 +Jun 1 07:49:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:42344 to [anon_ip_2]:25 +Jun 1 07:49:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:49:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:42344 +Jun 1 07:49:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:42344 +Jun 1 07:50:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:55443 to [anon_ip_2]:25 +Jun 1 07:50:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:50:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:55443 +Jun 1 07:50:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:55443 +Jun 1 07:51:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:52091 to [anon_ip_2]:25 +Jun 1 07:51:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:51:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:52091 +Jun 1 07:51:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:52091 +Jun 1 07:51:35 anon_server_1 postfix/smtps/smtpd[2037625]: connect from unknown[anon_ip_112] +Jun 1 07:51:38 anon_server_1 postfix/smtps/smtpd[2037625]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_112]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 07:51:51 anon_server_1 postfix/smtps/smtpd[2037625]: anon_hostname_158: unknown[anon_ip_112]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 07:52:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:51561 to [anon_ip_2]:25 +Jun 1 07:52:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:52:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:51561 +Jun 1 07:52:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:51561 +Jun 1 07:53:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:38884 to [anon_ip_2]:25 +Jun 1 07:53:05 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:53:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:38884 +Jun 1 07:53:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:38884 +Jun 1 07:54:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:59580 to [anon_ip_2]:25 +Jun 1 07:54:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:54:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:59580 +Jun 1 07:54:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:59580 +Jun 1 07:55:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:56024 to [anon_ip_2]:25 +Jun 1 07:55:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:55:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:56024 +Jun 1 07:55:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:56024 +Jun 1 07:56:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:56222 to [anon_ip_2]:25 +Jun 1 07:56:05 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:56:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:56222 +Jun 1 07:56:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:56222 +Jun 1 07:56:51 anon_server_1 postfix/smtps/smtpd[2037625]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_112] +Jun 1 07:56:51 anon_server_1 postfix/smtps/smtpd[2037625]: anon_hostname_12 from unknown[anon_ip_112] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 07:57:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:49814 to [anon_ip_2]:25 +Jun 1 07:57:05 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:57:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:49814 +Jun 1 07:57:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:49814 +Jun 1 07:58:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:45345 to [anon_ip_2]:25 +Jun 1 07:58:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:58:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:45345 +Jun 1 07:58:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:45345 +Jun 1 07:59:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:45594 to [anon_ip_2]:25 +Jun 1 07:59:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 07:59:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:45594 +Jun 1 07:59:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:45594 +Jun 1 08:00:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:45124 to [anon_ip_2]:25 +Jun 1 08:00:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:00:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:45124 +Jun 1 08:00:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:45124 +Jun 1 08:00:11 anon_server_1 postfix/anvil[2037628]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_112) anon_hostname_35 Jun 1 07:51:38 +Jun 1 08:00:11 anon_server_1 postfix/anvil[2037628]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_112) anon_hostname_35 Jun 1 07:51:38 +Jun 1 08:00:11 anon_server_1 postfix/anvil[2037628]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 07:51:38 +Jun 1 08:01:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:58279 to [anon_ip_2]:25 +Jun 1 08:01:05 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:01:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:58279 +Jun 1 08:01:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:58279 +Jun 1 08:02:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:57717 to [anon_ip_2]:25 +Jun 1 08:02:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:02:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:57717 +Jun 1 08:02:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:57717 +Jun 1 08:03:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:59640 to [anon_ip_2]:25 +Jun 1 08:03:03 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:03:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_27]:44444 to [anon_ip_2]:25 +Jun 1 08:03:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:03:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:59640 +Jun 1 08:03:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:59640 +Jun 1 08:03:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:44444 +Jun 1 08:03:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_27]:44444 +Jun 1 08:04:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:49322 to [anon_ip_2]:25 +Jun 1 08:04:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:04:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:49322 +Jun 1 08:04:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:49322 +Jun 1 08:05:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:41881 to [anon_ip_2]:25 +Jun 1 08:05:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:05:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:41881 +Jun 1 08:05:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:41881 +Jun 1 08:06:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:38864 to [anon_ip_2]:25 +Jun 1 08:06:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:06:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:38864 +Jun 1 08:06:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:38864 +Jun 1 08:07:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:55577 to [anon_ip_2]:25 +Jun 1 08:07:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:07:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:55577 +Jun 1 08:07:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:55577 +Jun 1 08:08:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:42857 to [anon_ip_2]:25 +Jun 1 08:08:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:08:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:42857 +Jun 1 08:08:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:42857 +Jun 1 08:09:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:36375 to [anon_ip_2]:25 +Jun 1 08:09:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:09:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:36375 +Jun 1 08:09:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:36375 +Jun 1 08:10:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:54022 to [anon_ip_2]:25 +Jun 1 08:10:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:10:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:54022 +Jun 1 08:10:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:54022 +Jun 1 08:11:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:33863 to [anon_ip_2]:25 +Jun 1 08:11:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:11:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:33863 +Jun 1 08:11:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:33863 +Jun 1 08:12:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:34535 to [anon_ip_2]:25 +Jun 1 08:12:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:12:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:34535 +Jun 1 08:12:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:34535 +Jun 1 08:13:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:38800 to [anon_ip_2]:25 +Jun 1 08:13:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:13:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:38800 +Jun 1 08:13:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:38800 +Jun 1 08:14:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:49257 to [anon_ip_2]:25 +Jun 1 08:14:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:14:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:49257 +Jun 1 08:14:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:49257 +Jun 1 08:15:05 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:37784 to [anon_ip_2]:25 +Jun 1 08:15:05 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:15:07 anon_server_1 postfix/smtps/smtpd[2038329]: connect from unknown[anon_ip_113] +Jun 1 08:15:09 anon_server_1 postfix/smtps/smtpd[2038329]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_113]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 08:15:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:37784 +Jun 1 08:15:11 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:37784 +Jun 1 08:15:16 anon_server_1 postfix/smtps/smtpd[2038329]: anon_hostname_158: unknown[anon_ip_113]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_13 +Jun 1 08:16:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:40572 to [anon_ip_2]:25 +Jun 1 08:16:03 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:16:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:40572 +Jun 1 08:16:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:40572 +Jun 1 08:17:03 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:39120 to [anon_ip_2]:25 +Jun 1 08:17:04 anon_server_1 postfix/dnsblog[2036504]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:17:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:39120 +Jun 1 08:17:09 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:39120 +Jun 1 08:18:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:36984 to [anon_ip_2]:25 +Jun 1 08:18:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:18:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:36984 +Jun 1 08:18:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:36984 +Jun 1 08:19:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:43685 to [anon_ip_2]:25 +Jun 1 08:19:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:19:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:43685 +Jun 1 08:19:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:43685 +Jun 1 08:20:04 anon_server_1 postfix/postscreen[2036503]: anon_hostname_1 from [anon_ip_106]:46012 to [anon_ip_2]:25 +Jun 1 08:20:04 anon_server_1 postfix/dnsblog[2036505]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:20:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:46012 +Jun 1 08:20:10 anon_server_1 postfix/postscreen[2036503]: anon_hostname_183 [anon_ip_106]:46012 +Jun 1 08:20:16 anon_server_1 postfix/smtps/smtpd[2038329]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_113] +Jun 1 08:20:16 anon_server_1 postfix/smtps/smtpd[2038329]: anon_hostname_12 from unknown[anon_ip_113] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 08:23:36 anon_server_1 postfix/anvil[2038332]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_113) anon_hostname_35 Jun 1 08:15:09 +Jun 1 08:23:36 anon_server_1 postfix/anvil[2038332]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_113) anon_hostname_35 Jun 1 08:15:09 +Jun 1 08:23:36 anon_server_1 postfix/anvil[2038332]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 08:15:09 +Jun 1 08:30:35 anon_server_1 postfix/smtps/smtpd[2038717]: connect from anon_hostname_341[anon_ip_114] +Jun 1 08:30:36 anon_server_1 postfix/smtps/smtpd[2038717]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_341[anon_ip_114]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 08:30:41 anon_server_1 postfix/smtps/smtpd[2038717]: anon_hostname_158: anon_hostname_341[anon_ip_114]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 08:30:41 anon_server_1 postfix/smtps/smtpd[2038717]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_341[anon_ip_114] +Jun 1 08:30:41 anon_server_1 postfix/smtps/smtpd[2038717]: anon_hostname_12 from anon_hostname_341[anon_ip_114] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 08:30:57 anon_server_1 postfix/smtps/smtpd[2038717]: connect from unknown[anon_ip_115] +Jun 1 08:31:00 anon_server_1 postfix/smtps/smtpd[2038717]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_115]: anon_hostname_121 anon_hostname_104 +Jun 1 08:31:00 anon_server_1 postfix/smtps/smtpd[2038717]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_115] +Jun 1 08:31:00 anon_server_1 postfix/smtps/smtpd[2038717]: anon_hostname_12 from unknown[anon_ip_115] anon_hostname_18=0/0 +Jun 1 08:31:17 anon_server_1 postfix/postscreen[2038775]: anon_hostname_1 from [anon_ip_116]:50572 to [anon_ip_2]:25 +Jun 1 08:31:17 anon_server_1 postfix/dnsblog[2038777]: anon_hostname_178 anon_ip_116 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 08:31:17 anon_server_1 postfix/dnsblog[2038777]: anon_hostname_178 anon_ip_116 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:31:23 anon_server_1 postfix/postscreen[2038775]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_116]:50572 +Jun 1 08:31:23 anon_server_1 postfix/postscreen[2038775]: anon_hostname_183 [anon_ip_116]:50572 +Jun 1 08:34:20 anon_server_1 postfix/anvil[2038720]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_114) anon_hostname_35 Jun 1 08:30:36 +Jun 1 08:34:20 anon_server_1 postfix/anvil[2038720]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_114) anon_hostname_35 Jun 1 08:30:36 +Jun 1 08:34:20 anon_server_1 postfix/anvil[2038720]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 08:30:36 +Jun 1 08:37:27 anon_server_1 postfix/postscreen[2038943]: anon_hostname_1 from [anon_ip_106]:59336 to [anon_ip_2]:25 +Jun 1 08:37:27 anon_server_1 postfix/dnsblog[2038945]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 08:37:33 anon_server_1 postfix/postscreen[2038943]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:59336 +Jun 1 08:37:33 anon_server_1 postfix/postscreen[2038943]: anon_hostname_183 [anon_ip_106]:59336 +Jun 1 08:44:10 anon_server_1 postfix/smtps/smtpd[2039164]: anon_hostname_158: anon_hostname_171 anon_hostname_342on_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_117: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 08:44:10 anon_server_1 postfix/smtps/smtpd[2039164]: connect from unknown[anon_ip_117] +Jun 1 08:44:10 anon_server_1 postfix/smtps/smtpd[2039164]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_117]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 08:44:13 anon_server_1 postfix/smtps/smtpd[2039164]: anon_hostname_158: unknown[anon_ip_117]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_11 +Jun 1 08:44:13 anon_server_1 postfix/smtps/smtpd[2039164]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_117] +Jun 1 08:44:13 anon_server_1 postfix/smtps/smtpd[2039164]: anon_hostname_12 from unknown[anon_ip_117] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 08:47:33 anon_server_1 postfix/anvil[2039167]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_117) anon_hostname_35 Jun 1 08:44:10 +Jun 1 08:47:33 anon_server_1 postfix/anvil[2039167]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_117) anon_hostname_35 Jun 1 08:44:10 +Jun 1 08:47:33 anon_server_1 postfix/anvil[2039167]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 08:44:10 +Jun 1 08:47:45 anon_server_1 postfix/smtps/smtpd[2039276]: connect from unknown[anon_ip_118] +Jun 1 08:47:45 anon_server_1 postfix/smtps/smtpd[2039276]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_118]: anon_hostname_121 anon_hostname_104 +Jun 1 08:47:45 anon_server_1 postfix/smtps/smtpd[2039276]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_118] +Jun 1 08:47:45 anon_server_1 postfix/smtps/smtpd[2039276]: anon_hostname_12 from unknown[anon_ip_118] anon_hostname_18=0/0 +Jun 1 08:47:53 anon_server_1 postfix/smtps/smtpd[2039276]: connect from anon_hostname_343[anon_ip_119] +Jun 1 08:47:54 anon_server_1 postfix/smtps/smtpd[2039276]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_343[anon_ip_119]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 08:47:57 anon_server_1 postfix/smtps/smtpd[2039284]: connect from unknown[anon_ip_120] +Jun 1 08:47:58 anon_server_1 postfix/smtps/smtpd[2039280]: connect from unknown[anon_ip_67] +Jun 1 08:47:58 anon_server_1 postfix/smtps/smtpd[2039280]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_67]: anon_hostname_121 anon_hostname_104 +Jun 1 08:47:58 anon_server_1 postfix/smtps/smtpd[2039280]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_67] +Jun 1 08:47:58 anon_server_1 postfix/smtps/smtpd[2039280]: anon_hostname_12 from unknown[anon_ip_67] anon_hostname_18=0/0 +Jun 1 08:47:59 anon_server_1 postfix/smtps/smtpd[2039284]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_120]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 08:48:01 anon_server_1 postfix/smtps/smtpd[2039276]: anon_hostname_158: anon_hostname_343[anon_ip_119]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 08:48:06 anon_server_1 postfix/smtps/smtpd[2039284]: anon_hostname_158: unknown[anon_ip_120]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_4 +Jun 1 08:48:06 anon_server_1 postfix/smtps/smtpd[2039280]: connect from unknown[anon_ip_121] +Jun 1 08:48:08 anon_server_1 postfix/smtps/smtpd[2039280]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_121]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 08:48:10 anon_server_1 postfix/smtps/smtpd[2039361]: connect from unknown[anon_ip_122] +Jun 1 08:48:11 anon_server_1 postfix/smtps/smtpd[2039361]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_122]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 08:48:14 anon_server_1 postfix/smtps/smtpd[2039280]: anon_hostname_158: unknown[anon_ip_121]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_12 +Jun 1 08:48:17 anon_server_1 postfix/smtps/smtpd[2039361]: anon_hostname_158: unknown[anon_ip_122]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_6 +Jun 1 08:52:48 anon_server_1 postfix/submission/smtpd[2039528]: connect from unknown[anon_ip_50] +Jun 1 08:52:48 anon_server_1 postfix/submission/smtpd[2039528]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_50] +Jun 1 08:52:48 anon_server_1 postfix/submission/smtpd[2039528]: anon_hostname_12 from unknown[anon_ip_50] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 08:53:01 anon_server_1 postfix/smtps/smtpd[2039276]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_343[anon_ip_119] +Jun 1 08:53:01 anon_server_1 postfix/smtps/smtpd[2039276]: anon_hostname_12 from anon_hostname_343[anon_ip_119] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 08:53:06 anon_server_1 postfix/smtps/smtpd[2039284]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_120] +Jun 1 08:53:06 anon_server_1 postfix/smtps/smtpd[2039284]: anon_hostname_12 from unknown[anon_ip_120] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 08:53:14 anon_server_1 postfix/smtps/smtpd[2039280]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_121] +Jun 1 08:53:14 anon_server_1 postfix/smtps/smtpd[2039280]: anon_hostname_12 from unknown[anon_ip_121] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 08:53:17 anon_server_1 postfix/smtps/smtpd[2039361]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_122] +Jun 1 08:53:17 anon_server_1 postfix/smtps/smtpd[2039361]: anon_hostname_12 from unknown[anon_ip_122] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 08:56:37 anon_server_1 postfix/anvil[2039281]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_119) anon_hostname_35 Jun 1 08:47:54 +Jun 1 08:56:37 anon_server_1 postfix/anvil[2039281]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_119) anon_hostname_35 Jun 1 08:47:54 +Jun 1 08:56:37 anon_server_1 postfix/anvil[2039281]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 5 anon_hostname_35 Jun 1 08:52:48 +Jun 1 08:59:47 anon_server_1 postfix/postscreen[2039712]: anon_hostname_1 from [anon_ip_123]:52543 to [anon_ip_2]:25 +Jun 1 08:59:49 anon_server_1 postfix/postscreen[2039712]: anon_hostname_241 anon_hostname_122 2 from [anon_ip_123]:52543 anon_hostname_21 anon_hostname_242 anon_hostname_243 SMTP anon_hostname_244 +Jun 1 08:59:49 anon_server_1 postfix/postscreen[2039712]: anon_hostname_183 [anon_ip_123]:52543 +Jun 1 09:02:11 anon_server_1 postfix/smtps/smtpd[2039795]: connect from anon_hostname_344[anon_ip_124] +Jun 1 09:02:12 anon_server_1 postfix/smtps/smtpd[2039795]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_344[anon_ip_124]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:02:20 anon_server_1 postfix/smtps/smtpd[2039795]: anon_hostname_158: anon_hostname_344[anon_ip_124]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 09:02:28 anon_server_1 postfix/smtps/smtpd[2039836]: connect from unknown[anon_ip_125] +Jun 1 09:02:30 anon_server_1 postfix/smtps/smtpd[2039836]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_125]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:02:37 anon_server_1 postfix/smtps/smtpd[2039836]: anon_hostname_158: unknown[anon_ip_125]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 09:02:38 anon_server_1 postfix/smtps/smtpd[2039836]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_125] +Jun 1 09:02:38 anon_server_1 postfix/smtps/smtpd[2039836]: anon_hostname_12 from unknown[anon_ip_125] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 09:02:53 anon_server_1 postfix/smtps/smtpd[2039836]: connect from unknown[anon_ip_126] +Jun 1 09:02:54 anon_server_1 postfix/smtps/smtpd[2039836]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_126]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:03:01 anon_server_1 postfix/smtps/smtpd[2039836]: anon_hostname_158: unknown[anon_ip_126]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 09:03:17 anon_server_1 postfix/smtps/smtpd[2039916]: anon_hostname_158: anon_hostname_171 anon_hostname_345on_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_127: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 09:03:17 anon_server_1 postfix/smtps/smtpd[2039916]: connect from unknown[anon_ip_127] +Jun 1 09:03:18 anon_server_1 postfix/smtps/smtpd[2039916]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_127]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:03:25 anon_server_1 postfix/smtps/smtpd[2039916]: anon_hostname_158: unknown[anon_ip_127]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 09:03:26 anon_server_1 postfix/smtps/smtpd[2039916]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_127] +Jun 1 09:03:26 anon_server_1 postfix/smtps/smtpd[2039916]: anon_hostname_12 from unknown[anon_ip_127] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 09:07:20 anon_server_1 postfix/smtps/smtpd[2039795]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_344[anon_ip_124] +Jun 1 09:07:20 anon_server_1 postfix/smtps/smtpd[2039795]: anon_hostname_12 from anon_hostname_344[anon_ip_124] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 09:08:01 anon_server_1 postfix/smtps/smtpd[2039836]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_126] +Jun 1 09:08:01 anon_server_1 postfix/smtps/smtpd[2039836]: anon_hostname_12 from unknown[anon_ip_126] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 09:11:21 anon_server_1 postfix/anvil[2039798]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_124) anon_hostname_35 Jun 1 09:02:13 +Jun 1 09:11:21 anon_server_1 postfix/anvil[2039798]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_124) anon_hostname_35 Jun 1 09:02:13 +Jun 1 09:11:21 anon_server_1 postfix/anvil[2039798]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 09:03:18 +Jun 1 09:13:04 anon_server_1 postfix/postscreen[2040248]: anon_hostname_1 from [anon_ip_27]:32884 to [anon_ip_2]:25 +Jun 1 09:13:04 anon_server_1 postfix/dnsblog[2040250]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 09:13:10 anon_server_1 postfix/postscreen[2040248]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:32884 +Jun 1 09:13:10 anon_server_1 postfix/postscreen[2040248]: anon_hostname_183 [anon_ip_27]:32884 +Jun 1 09:16:08 anon_server_1 postfix/postscreen[2040323]: anon_hostname_1 from [anon_ip_106]:46454 to [anon_ip_2]:25 +Jun 1 09:16:08 anon_server_1 postfix/dnsblog[2040325]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 09:16:14 anon_server_1 postfix/postscreen[2040323]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:46454 +Jun 1 09:16:14 anon_server_1 postfix/postscreen[2040323]: anon_hostname_183 [anon_ip_106]:46454 +Jun 1 09:16:44 anon_server_1 postfix/smtps/smtpd[2040331]: connect from anon_hostname_346[anon_ip_128] +Jun 1 09:16:44 anon_server_1 postfix/smtps/smtpd[2040331]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_346[anon_ip_128]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 09:16:47 anon_server_1 postfix/smtps/smtpd[2040331]: anon_hostname_158: anon_hostname_346[anon_ip_128]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_11 +Jun 1 09:16:47 anon_server_1 postfix/smtps/smtpd[2040331]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_346[anon_ip_128] +Jun 1 09:16:47 anon_server_1 postfix/smtps/smtpd[2040331]: anon_hostname_12 from anon_hostname_346[anon_ip_128] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 09:20:07 anon_server_1 postfix/anvil[2040334]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_128) anon_hostname_35 Jun 1 09:16:44 +Jun 1 09:20:07 anon_server_1 postfix/anvil[2040334]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_128) anon_hostname_35 Jun 1 09:16:44 +Jun 1 09:20:07 anon_server_1 postfix/anvil[2040334]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 09:16:44 +Jun 1 09:25:40 anon_server_1 postfix/smtps/smtpd[2040995]: connect from unknown[anon_ip_129] +Jun 1 09:25:42 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_129]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:25:52 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_158: unknown[anon_ip_129]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_14 +Jun 1 09:26:13 anon_server_1 postfix/smtps/smtpd[2041046]: connect from unknown[anon_ip_130] +Jun 1 09:26:14 anon_server_1 postfix/smtps/smtpd[2041046]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_130]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:26:21 anon_server_1 postfix/smtps/smtpd[2041046]: anon_hostname_158: unknown[anon_ip_130]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_15 +Jun 1 09:30:52 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_129] +Jun 1 09:30:52 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_12 from unknown[anon_ip_129] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 09:31:21 anon_server_1 postfix/smtps/smtpd[2041046]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_130] +Jun 1 09:31:21 anon_server_1 postfix/smtps/smtpd[2041046]: anon_hostname_12 from unknown[anon_ip_130] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 09:31:54 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_158: anon_hostname_171 anon_hostname_347on_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_131: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 09:31:54 anon_server_1 postfix/smtps/smtpd[2040995]: connect from unknown[anon_ip_131] +Jun 1 09:31:56 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_131]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:32:04 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_158: unknown[anon_ip_131]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 09:32:08 anon_server_1 postfix/smtps/smtpd[2041046]: anon_hostname_158: anon_hostname_171 anon_hostname_348on_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_133: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 09:32:08 anon_server_1 postfix/smtps/smtpd[2041046]: connect from unknown[anon_ip_133] +Jun 1 09:32:11 anon_server_1 postfix/smtps/smtpd[2041046]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_133]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:32:18 anon_server_1 postfix/smtps/smtpd[2041046]: anon_hostname_158: unknown[anon_ip_133]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 09:32:40 anon_server_1 postfix/postscreen[2041296]: anon_hostname_1 from [anon_ip_106]:45699 to [anon_ip_2]:25 +Jun 1 09:32:41 anon_server_1 postfix/dnsblog[2041298]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 09:32:46 anon_server_1 postfix/postscreen[2041296]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:45699 +Jun 1 09:32:46 anon_server_1 postfix/postscreen[2041296]: anon_hostname_183 [anon_ip_106]:45699 +Jun 1 09:34:30 anon_server_1 postfix/smtps/smtpd[2041338]: connect from anon_hostname_349[anon_ip_134] +Jun 1 09:34:30 anon_server_1 postfix/smtps/smtpd[2041338]: anon_hostname_175 anon_hostname_176 from anon_hostname_349[anon_ip_134]: -1 +Jun 1 09:34:30 anon_server_1 postfix/smtps/smtpd[2041338]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:1408F10B:anon_hostname_194 anon_hostname_195:anon_hostname_196:anon_hostname_350 anon_hostname_351 anon_hostname_352:../anon_hostname_201/anon_hostname_202/anon_hostname_203.c:331: +Jun 1 09:34:30 anon_server_1 postfix/smtps/smtpd[2041338]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_349[anon_ip_134] +Jun 1 09:34:30 anon_server_1 postfix/smtps/smtpd[2041338]: anon_hostname_12 from anon_hostname_349[anon_ip_134] anon_hostname_18=0/0 +Jun 1 09:35:42 anon_server_1 postfix/anvil[2040999]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_129) anon_hostname_35 Jun 1 09:25:42 +Jun 1 09:35:42 anon_server_1 postfix/anvil[2040999]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_129) anon_hostname_35 Jun 1 09:25:42 +Jun 1 09:35:42 anon_server_1 postfix/anvil[2040999]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 3 anon_hostname_35 Jun 1 09:32:11 +Jun 1 09:37:04 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_131] +Jun 1 09:37:04 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_12 from unknown[anon_ip_131] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 09:37:18 anon_server_1 postfix/smtps/smtpd[2041046]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_133] +Jun 1 09:37:18 anon_server_1 postfix/smtps/smtpd[2041046]: anon_hostname_12 from unknown[anon_ip_133] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 09:38:13 anon_server_1 postfix/submission/smtpd[2041434]: anon_hostname_158: anon_hostname_171 anon_hostname_353 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_135: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 09:38:13 anon_server_1 postfix/submission/smtpd[2041434]: connect from unknown[anon_ip_135] +Jun 1 09:38:15 anon_server_1 postfix/submission/smtpd[2041434]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_135]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:38:23 anon_server_1 postfix/submission/smtpd[2041434]: anon_hostname_158: unknown[anon_ip_135]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 09:38:29 anon_server_1 postfix/smtps/smtpd[2040995]: connect from anon_hostname_354[anon_ip_136] +Jun 1 09:38:29 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_175 anon_hostname_176 from anon_hostname_354[anon_ip_136]: -1 +Jun 1 09:38:29 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:1408F10B:anon_hostname_194 anon_hostname_195:anon_hostname_196:anon_hostname_350 anon_hostname_351 anon_hostname_352:../anon_hostname_201/anon_hostname_202/anon_hostname_203.c:331: +Jun 1 09:38:29 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_354[anon_ip_136] +Jun 1 09:38:29 anon_server_1 postfix/smtps/smtpd[2040995]: anon_hostname_12 from anon_hostname_354[anon_ip_136] anon_hostname_18=0/0 +Jun 1 09:38:32 anon_server_1 postfix/submission/smtpd[2041474]: connect from anon_hostname_355[anon_ip_137] +Jun 1 09:38:36 anon_server_1 postfix/submission/smtpd[2041474]: anon_hostname_175 anon_hostname_176 from anon_hostname_355[anon_ip_137]: anon_hostname_121 anon_hostname_104 +Jun 1 09:38:36 anon_server_1 postfix/submission/smtpd[2041474]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_356 from anon_hostname_355[anon_ip_137] +Jun 1 09:38:36 anon_server_1 postfix/submission/smtpd[2041474]: anon_hostname_12 from anon_hostname_355[anon_ip_137] anon_hostname_13=1 anon_hostname_119=0/1 anon_hostname_18=1/2 +Jun 1 09:38:51 anon_server_1 postfix/submission/smtpd[2041474]: connect from unknown[anon_ip_138] +Jun 1 09:38:51 anon_server_1 postfix/submission/smtpd[2041474]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_138] +Jun 1 09:38:51 anon_server_1 postfix/submission/smtpd[2041474]: anon_hostname_12 from unknown[anon_ip_138] anon_hostname_18=0/0 +Jun 1 09:39:09 anon_server_1 postfix/submission/smtpd[2041474]: connect from unknown[anon_ip_139] +Jun 1 09:39:11 anon_server_1 postfix/submission/smtpd[2041474]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_139]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:39:19 anon_server_1 postfix/submission/smtpd[2041474]: anon_hostname_158: unknown[anon_ip_139]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_12 +Jun 1 09:39:19 anon_server_1 postfix/submission/smtpd[2041474]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_139] +Jun 1 09:39:19 anon_server_1 postfix/submission/smtpd[2041474]: anon_hostname_12 from unknown[anon_ip_139] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_167=0/1 anon_hostname_18=3/4 +Jun 1 09:43:23 anon_server_1 postfix/submission/smtpd[2041434]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_135] +Jun 1 09:43:23 anon_server_1 postfix/submission/smtpd[2041434]: anon_hostname_12 from unknown[anon_ip_135] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_167=0/1 anon_hostname_18=3/4 +Jun 1 09:45:42 anon_server_1 postfix/anvil[2040999]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_259:anon_ip_135) anon_hostname_35 Jun 1 09:38:13 +Jun 1 09:45:42 anon_server_1 postfix/anvil[2040999]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_259:anon_ip_135) anon_hostname_35 Jun 1 09:38:13 +Jun 1 09:45:42 anon_server_1 postfix/anvil[2040999]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 09:39:08 +Jun 1 09:52:19 anon_server_1 postfix/submission/smtpd[2041893]: connect from unknown[anon_ip_140] +Jun 1 09:52:21 anon_server_1 postfix/submission/smtpd[2041893]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_140]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 09:52:24 anon_server_1 postfix/submission/smtpd[2041893]: anon_hostname_158: unknown[anon_ip_140]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 09:56:06 anon_server_1 postfix/pickup[2041748]: 4b98Rp4M1Rz2H3W: anon_hostname_221=0 from= +Jun 1 09:56:06 anon_server_1 postfix/cleanup[2042457]: 4b98Rp4M1Rz2H3W: message-anon_hostname_7= +Jun 1 09:56:06 anon_server_1 postfix/qmgr[1740239]: 4b98Rp4M1Rz2H3W: from=, anon_hostname_8=1639, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 09:56:11 anon_server_1 postfix/10025/smtpd[2042470]: connect from anon_hostname_39[anon_ip_3] +Jun 1 09:56:11 anon_server_1 postfix/10025/smtpd[2042470]: 4b98Rv2n6Hz2H3T: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 09:56:11 anon_server_1 postfix/cleanup[2042457]: 4b98Rv2n6Hz2H3T: message-anon_hostname_7= +Jun 1 09:56:11 anon_server_1 postfix/qmgr[1740239]: 4b98Rv2n6Hz2H3T: from=, anon_hostname_8=3426, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 09:56:11 anon_server_1 postfix/10025/smtpd[2042470]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 09:56:11 anon_server_1 amavis[2035100]: (2035100-01) anon_hostname_42 anon_hostname_43 {anon_hostname_225}, anon_hostname_226 anon_hostname_227 [anon_ip_3] /anon_hostname_45 -> , (), Message-anon_hostname_47: , anon_hostname_48: anon_hostname_357, b: anon_hostname_358, anon_hostname_51: -0.001, anon_hostname_8: 2111, anon_hostname_52: 4b98Rv2n6Hz2H3T, anon_hostname_53: "anon_subject_19", anon_hostname_54: , helo=, anon_hostname_58: [anon_hostname_230=-0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0, anon_hostname_231=anon_hostname_232:anon_hostname_41, 4750 anon_hostname_68 +Jun 1 09:56:11 anon_server_1 postfix/amavis/smtp[2042464]: 4b98Rp4M1Rz2H3W: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10026, anon_hostname_70=4.8, anon_hostname_71=0.05/0.01/0.02/4.7, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b98Rv2n6Hz2H3T) +Jun 1 09:56:11 anon_server_1 postfix/qmgr[1740239]: 4b98Rp4M1Rz2H3W: anon_hostname_80 +Jun 1 09:56:11 anon_server_1 postfix/pipe[2042474]: 4b98Rv2n6Hz2H3T: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.16, anon_hostname_71=0.01/0.02/0/0.13, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 09:56:11 anon_server_1 postfix/qmgr[1740239]: 4b98Rv2n6Hz2H3T: anon_hostname_80 +Jun 1 09:56:14 anon_server_1 postfix/postscreen[2042480]: anon_hostname_1 from [anon_ip_4]:39508 to [anon_ip_2]:25 +Jun 1 09:56:14 anon_server_1 postfix/postscreen[2042480]: anon_hostname_2 anon_hostname_3 [anon_ip_4]:39508 +Jun 1 09:56:14 anon_server_1 postfix/smtpd[2042483]: connect from anon_hostname_101[anon_ip_4] +Jun 1 09:56:14 anon_server_1 postfix/smtpd[2042483]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_101[anon_ip_4]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_112 (anon_hostname_113) anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 09:56:14 anon_server_1 postfix/smtpd[2042483]: 4b98Ry3fS9z2H3T: anon_hostname_5=anon_hostname_101[anon_ip_4] +Jun 1 09:56:14 anon_server_1 postfix/cleanup[2042457]: 4b98Ry3fS9z2H3T: message-anon_hostname_7= +Jun 1 09:56:14 anon_server_1 postfix/qmgr[1740239]: 4b98Ry3fS9z2H3T: from=, anon_hostname_8=49095, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 09:56:14 anon_server_1 postfix/smtpd[2042483]: anon_hostname_12 from anon_hostname_101[anon_ip_4] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_120=2 anon_hostname_17=1 anon_hostname_18=8 +Jun 1 09:56:17 anon_server_1 postfix/10025/smtpd[2042470]: connect from anon_hostname_39[anon_ip_3] +Jun 1 09:56:17 anon_server_1 postfix/10025/smtpd[2042470]: 4b98S10M0dz2H6N: anon_hostname_5=anon_hostname_39[anon_ip_3] +Jun 1 09:56:17 anon_server_1 postfix/cleanup[2042457]: 4b98S10M0dz2H6N: message-anon_hostname_7= +Jun 1 09:56:17 anon_server_1 postfix/10025/smtpd[2042470]: anon_hostname_12 from anon_hostname_39[anon_ip_3] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=1 anon_hostname_16=1 anon_hostname_17=1 anon_hostname_18=5 +Jun 1 09:56:17 anon_server_1 postfix/qmgr[1740239]: 4b98S10M0dz2H6N: from=, anon_hostname_8=49606, anon_hostname_9=1 (anon_hostname_10 anon_hostname_11) +Jun 1 09:56:17 anon_server_1 amavis[2035101]: (2035101-01) anon_hostname_42 anon_hostname_43 {anon_hostname_44}, [anon_ip_4]:39508 [anon_ip_4] anon_hostname_45/anon_hostname_45 -> , (anon_hostname_125://[anon_ip_4]:39508), anon_hostname_46: 4b98Ry3fS9z2H3T, Message-anon_hostname_47: , anon_hostname_48: anon_hostname_359, b: anon_hostname_360, anon_hostname_51: 0.002, anon_hostname_8: 49094, anon_hostname_52: 4b98S10M0dz2H6N, anon_hostname_53: "anon_subject_20", anon_hostname_54: , helo=anon_hostname_101, anon_hostname_58: [anon_hostname_59=0.001,anon_hostname_60=0.001], anon_hostname_64=anon_hostname_87 anon_hostname_66=anon_hostname_65, anon_hostname_67=0.002, 2576 anon_hostname_68 +Jun 1 09:56:17 anon_server_1 postfix/amavis/smtp[2042464]: 4b98Ry3fS9z2H3T: to=, anon_hostname_69=anon_ip_3[anon_ip_3]:10024, anon_hostname_70=2.7, anon_hostname_71=0.12/0/0.01/2.6, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (250 2.0.0 from anon_hostname_75(anon_hostname_76:[anon_ip_3]:10025): 250 2.0.0 anon_hostname_77: anon_hostname_78 anon_hostname_79 4b98S10M0dz2H6N) +Jun 1 09:56:17 anon_server_1 postfix/qmgr[1740239]: 4b98Ry3fS9z2H3T: anon_hostname_80 +Jun 1 09:56:17 anon_server_1 postfix/pipe[2042474]: 4b98S10M0dz2H6N: to=, anon_hostname_69=anon_hostname_81, anon_hostname_70=0.17, anon_hostname_71=0.05/0.01/0/0.11, anon_hostname_72=2.0.0, anon_hostname_73=anon_hostname_74 (anon_hostname_82 anon_hostname_83 anon_hostname_81 anon_hostname_84) +Jun 1 09:56:17 anon_server_1 postfix/qmgr[1740239]: 4b98S10M0dz2H6N: anon_hostname_80 +Jun 1 09:57:24 anon_server_1 postfix/submission/smtpd[2041893]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_140] +Jun 1 09:57:24 anon_server_1 postfix/submission/smtpd[2041893]: anon_hostname_12 from unknown[anon_ip_140] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_167=0/1 anon_hostname_18=3/4 +Jun 1 10:00:44 anon_server_1 postfix/anvil[2041895]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_259:anon_ip_140) anon_hostname_35 Jun 1 09:52:19 +Jun 1 10:00:44 anon_server_1 postfix/anvil[2041895]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_259:anon_ip_140) anon_hostname_35 Jun 1 09:52:19 +Jun 1 10:00:44 anon_server_1 postfix/anvil[2041895]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 09:56:14 +Jun 1 10:03:15 anon_server_1 postfix/postscreen[2042694]: anon_hostname_1 from [anon_ip_106]:45288 to [anon_ip_2]:25 +Jun 1 10:03:16 anon_server_1 postfix/dnsblog[2042696]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 10:03:21 anon_server_1 postfix/postscreen[2042694]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:45288 +Jun 1 10:03:21 anon_server_1 postfix/postscreen[2042694]: anon_hostname_183 [anon_ip_106]:45288 +Jun 1 10:07:29 anon_server_1 postfix/postscreen[2042793]: anon_hostname_1 from [anon_ip_141]:51709 to [anon_ip_2]:25 +Jun 1 10:07:29 anon_server_1 postfix/dnsblog[2042795]: anon_hostname_178 anon_ip_141 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 10:07:29 anon_server_1 postfix/dnsblog[2042795]: anon_hostname_178 anon_ip_141 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 10:07:29 anon_server_1 postfix/dnsblog[2042794]: anon_hostname_178 anon_ip_141 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_361 anon_hostname_79 anon_ip_18 +Jun 1 10:07:35 anon_server_1 postfix/postscreen[2042793]: anon_hostname_189 anon_hostname_190 5 for [anon_ip_141]:51709 +Jun 1 10:07:35 anon_server_1 postfix/postscreen[2042793]: anon_hostname_183 [anon_ip_141]:51709 +Jun 1 10:12:09 anon_server_1 postfix/postscreen[2042973]: anon_hostname_1 from [anon_ip_142]:52451 to [anon_ip_2]:25 +Jun 1 10:12:09 anon_server_1 postfix/dnsblog[2042975]: anon_hostname_178 anon_ip_142 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 10:12:09 anon_server_1 postfix/dnsblog[2042975]: anon_hostname_178 anon_ip_142 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 10:12:15 anon_server_1 postfix/postscreen[2042973]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_142]:52451 +Jun 1 10:12:15 anon_server_1 postfix/postscreen[2042973]: anon_hostname_183 [anon_ip_142]:52451 +Jun 1 10:17:32 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_158: anon_hostname_171 anon_hostname_362 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_143: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 10:17:32 anon_server_1 postfix/smtps/smtpd[2043097]: connect from unknown[anon_ip_143] +Jun 1 10:17:33 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_143]: anon_hostname_121 anon_hostname_104 +Jun 1 10:17:33 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_143] +Jun 1 10:17:33 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_12 from unknown[anon_ip_143] anon_hostname_18=0/0 +Jun 1 10:18:04 anon_server_1 postfix/postscreen[2043124]: anon_hostname_1 from [anon_ip_106]:60540 to [anon_ip_2]:25 +Jun 1 10:18:04 anon_server_1 postfix/dnsblog[2043125]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 10:18:10 anon_server_1 postfix/postscreen[2043124]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:60540 +Jun 1 10:18:10 anon_server_1 postfix/postscreen[2043124]: anon_hostname_183 [anon_ip_106]:60540 +Jun 1 10:19:07 anon_server_1 postfix/smtps/smtpd[2043097]: connect from unknown[anon_ip_144] +Jun 1 10:19:40 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_144]: anon_hostname_121 anon_hostname_104 +Jun 1 10:19:40 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_144] +Jun 1 10:19:40 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_12 from unknown[anon_ip_144] anon_hostname_18=0/0 +Jun 1 10:19:43 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_158: anon_hostname_171 anon_hostname_363 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_145: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 10:19:43 anon_server_1 postfix/smtps/smtpd[2043097]: connect from unknown[anon_ip_145] +Jun 1 10:20:12 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_145]: anon_hostname_121 anon_hostname_104 +Jun 1 10:20:12 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_145] +Jun 1 10:20:12 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_12 from unknown[anon_ip_145] anon_hostname_18=0/0 +Jun 1 10:20:28 anon_server_1 postfix/smtps/smtpd[2043097]: connect from unknown[anon_ip_146] +Jun 1 10:20:43 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_146]: anon_hostname_121 anon_hostname_104 +Jun 1 10:20:43 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_146] +Jun 1 10:20:43 anon_server_1 postfix/smtps/smtpd[2043097]: anon_hostname_12 from unknown[anon_ip_146] anon_hostname_18=0/0 +Jun 1 10:23:04 anon_server_1 postfix/postscreen[2043244]: anon_hostname_1 from [anon_ip_27]:44146 to [anon_ip_2]:25 +Jun 1 10:23:04 anon_server_1 postfix/dnsblog[2043246]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 10:23:10 anon_server_1 postfix/postscreen[2043244]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:44146 +Jun 1 10:23:10 anon_server_1 postfix/postscreen[2043244]: anon_hostname_183 [anon_ip_27]:44146 +Jun 1 10:32:05 anon_server_1 postfix/postscreen[2043468]: anon_hostname_1 from [anon_ip_106]:39789 to [anon_ip_2]:25 +Jun 1 10:32:05 anon_server_1 postfix/dnsblog[2043470]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 10:32:11 anon_server_1 postfix/postscreen[2043468]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:39789 +Jun 1 10:32:11 anon_server_1 postfix/postscreen[2043468]: anon_hostname_183 [anon_ip_106]:39789 +Jun 1 10:32:19 anon_server_1 postfix/postscreen[2043468]: anon_hostname_141 anon_hostname_364:/anon_hostname_365/anon_hostname_366/anon_hostname_367/anon_hostname_368 anon_hostname_369 anon_hostname_370: anon_hostname_371=32 anon_hostname_372=2 anon_hostname_373 +Jun 1 10:38:57 anon_server_1 postfix/smtps/smtpd[2043632]: connect from anon_hostname_374[anon_ip_147] +Jun 1 10:38:57 anon_server_1 postfix/smtps/smtpd[2043632]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_374[anon_ip_147]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 10:39:00 anon_server_1 postfix/smtps/smtpd[2043632]: anon_hostname_158: anon_hostname_374[anon_ip_147]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_11 +Jun 1 10:39:00 anon_server_1 postfix/smtps/smtpd[2043632]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_374[anon_ip_147] +Jun 1 10:39:00 anon_server_1 postfix/smtps/smtpd[2043632]: anon_hostname_12 from anon_hostname_374[anon_ip_147] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 10:39:20 anon_server_1 postfix/postscreen[2043739]: anon_hostname_1 from [anon_ip_148]:18206 to [anon_ip_2]:25 +Jun 1 10:39:20 anon_server_1 postfix/postscreen[2043739]: anon_hostname_181 170 anon_hostname_122 0 from [anon_ip_148]:18206: anon_hostname_264 / anon_hostname_265/1.1\r\anon_hostname_375: anon_ip_2:25\r\anon_hostname_376: anon_hostname_377/5.0 (anon_hostname_378; anon_hostname_379; anon_hostname_380 anon_hostname_381; anon_hostname_382:1 +Jun 1 10:39:20 anon_server_1 postfix/postscreen[2043739]: anon_hostname_183 [anon_ip_148]:18206 +Jun 1 10:39:20 anon_server_1 postfix/dnsblog[2043741]: anon_hostname_178 anon_ip_148 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 10:42:05 anon_server_1 postfix/postscreen[2043841]: anon_hostname_1 from [anon_ip_106]:36177 to [anon_ip_2]:25 +Jun 1 10:42:05 anon_server_1 postfix/dnsblog[2043842]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 10:42:11 anon_server_1 postfix/postscreen[2043841]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:36177 +Jun 1 10:42:11 anon_server_1 postfix/postscreen[2043841]: anon_hostname_183 [anon_ip_106]:36177 +Jun 1 10:42:20 anon_server_1 postfix/anvil[2043634]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_147) anon_hostname_35 Jun 1 10:38:57 +Jun 1 10:42:20 anon_server_1 postfix/anvil[2043634]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_147) anon_hostname_35 Jun 1 10:38:57 +Jun 1 10:42:20 anon_server_1 postfix/anvil[2043634]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 10:38:57 +Jun 1 10:42:56 anon_server_1 postfix/smtps/smtpd[2043849]: connect from anon_hostname_383[anon_ip_149] +Jun 1 10:42:57 anon_server_1 postfix/smtps/smtpd[2043849]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_383[anon_ip_149]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 10:43:03 anon_server_1 postfix/smtps/smtpd[2043849]: anon_hostname_158: anon_hostname_383[anon_ip_149]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 10:43:16 anon_server_1 postfix/smtps/smtpd[2043903]: connect from unknown[anon_ip_150] +Jun 1 10:43:17 anon_server_1 postfix/smtps/smtpd[2043903]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_150]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 10:43:23 anon_server_1 postfix/smtps/smtpd[2043903]: anon_hostname_158: unknown[anon_ip_150]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 10:43:24 anon_server_1 postfix/smtps/smtpd[2043903]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_150] +Jun 1 10:43:24 anon_server_1 postfix/smtps/smtpd[2043903]: anon_hostname_12 from unknown[anon_ip_150] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 10:47:04 anon_server_1 postfix/postscreen[2044024]: anon_hostname_1 from [anon_ip_106]:34806 to [anon_ip_2]:25 +Jun 1 10:47:04 anon_server_1 postfix/dnsblog[2044025]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 10:47:10 anon_server_1 postfix/postscreen[2044024]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:34806 +Jun 1 10:47:10 anon_server_1 postfix/postscreen[2044024]: anon_hostname_183 [anon_ip_106]:34806 +Jun 1 10:48:03 anon_server_1 postfix/smtps/smtpd[2043849]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_383[anon_ip_149] +Jun 1 10:48:03 anon_server_1 postfix/smtps/smtpd[2043849]: anon_hostname_12 from anon_hostname_383[anon_ip_149] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 10:51:05 anon_server_1 postfix/postscreen[2044123]: anon_hostname_1 from [anon_ip_106]:37458 to [anon_ip_2]:25 +Jun 1 10:51:05 anon_server_1 postfix/dnsblog[2044125]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 10:51:11 anon_server_1 postfix/postscreen[2044123]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:37458 +Jun 1 10:51:11 anon_server_1 postfix/postscreen[2044123]: anon_hostname_183 [anon_ip_106]:37458 +Jun 1 10:51:23 anon_server_1 postfix/anvil[2043856]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_149) anon_hostname_35 Jun 1 10:42:57 +Jun 1 10:51:23 anon_server_1 postfix/anvil[2043856]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_149) anon_hostname_35 Jun 1 10:42:57 +Jun 1 10:51:23 anon_server_1 postfix/anvil[2043856]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 10:43:17 +Jun 1 10:53:50 anon_server_1 postfix/smtps/smtpd[2044174]: connect from unknown[anon_ip_151] +Jun 1 10:54:29 anon_server_1 postfix/smtps/smtpd[2044195]: connect from unknown[anon_ip_152] +Jun 1 10:54:30 anon_server_1 postfix/smtps/smtpd[2044195]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_152]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 10:54:35 anon_server_1 postfix/smtps/smtpd[2044174]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_151]: anon_hostname_121 anon_hostname_104 +Jun 1 10:54:35 anon_server_1 postfix/smtps/smtpd[2044174]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_151] +Jun 1 10:54:35 anon_server_1 postfix/smtps/smtpd[2044174]: anon_hostname_12 from unknown[anon_ip_151] anon_hostname_18=0/0 +Jun 1 10:54:38 anon_server_1 postfix/smtps/smtpd[2044195]: anon_hostname_158: unknown[anon_ip_152]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 10:54:52 anon_server_1 postfix/smtps/smtpd[2044174]: anon_hostname_158: anon_hostname_171 anon_hostname_384 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_153: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 10:54:52 anon_server_1 postfix/smtps/smtpd[2044174]: connect from unknown[anon_ip_153] +Jun 1 10:54:53 anon_server_1 postfix/smtps/smtpd[2044174]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_153]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 10:54:59 anon_server_1 postfix/smtps/smtpd[2044174]: anon_hostname_158: unknown[anon_ip_153]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 10:54:59 anon_server_1 postfix/smtps/smtpd[2044174]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_153] +Jun 1 10:54:59 anon_server_1 postfix/smtps/smtpd[2044174]: anon_hostname_12 from unknown[anon_ip_153] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 10:59:38 anon_server_1 postfix/smtps/smtpd[2044195]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_152] +Jun 1 10:59:38 anon_server_1 postfix/smtps/smtpd[2044195]: anon_hostname_12 from unknown[anon_ip_152] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 11:02:58 anon_server_1 postfix/anvil[2044198]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_152) anon_hostname_35 Jun 1 10:54:30 +Jun 1 11:02:58 anon_server_1 postfix/anvil[2044198]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_152) anon_hostname_35 Jun 1 10:54:30 +Jun 1 11:02:58 anon_server_1 postfix/anvil[2044198]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 10:54:53 +Jun 1 11:03:17 anon_server_1 postfix/smtps/smtpd[2044531]: anon_hostname_158: anon_hostname_171 anon_hostname_385on_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_154: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 11:03:17 anon_server_1 postfix/smtps/smtpd[2044531]: connect from unknown[anon_ip_154] +Jun 1 11:03:17 anon_server_1 postfix/smtps/smtpd[2044531]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_154]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 11:03:19 anon_server_1 postfix/smtps/smtpd[2044531]: anon_hostname_158: unknown[anon_ip_154]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 11:03:19 anon_server_1 postfix/smtps/smtpd[2044531]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:1408F119:anon_hostname_194 anon_hostname_195:anon_hostname_196:anon_hostname_212 anon_hostname_29 anon_hostname_186 anon_hostname_213 anon_hostname_202 anon_hostname_214:../anon_hostname_201/anon_hostname_202/anon_hostname_203.c:676: +Jun 1 11:03:19 anon_server_1 postfix/smtps/smtpd[2044531]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_215 from unknown[anon_ip_154] +Jun 1 11:03:19 anon_server_1 postfix/smtps/smtpd[2044531]: anon_hostname_12 from unknown[anon_ip_154] anon_hostname_13=1 anon_hostname_167=0/1 unknown=0/1 anon_hostname_18=1/3 +Jun 1 11:03:48 anon_server_1 postfix/postscreen[2044570]: anon_hostname_1 from [anon_ip_43]:36656 to [anon_ip_2]:25 +Jun 1 11:03:48 anon_server_1 postfix/dnsblog[2044572]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 11:03:48 anon_server_1 postfix/dnsblog[2044572]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 11:03:54 anon_server_1 postfix/postscreen[2044570]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_43]:36656 +Jun 1 11:03:54 anon_server_1 postfix/postscreen[2044570]: anon_hostname_183 [anon_ip_43]:36656 +Jun 1 11:06:26 anon_server_1 postfix/postscreen[2044650]: anon_hostname_1 from [anon_ip_155]:38080 to [anon_ip_2]:25 +Jun 1 11:06:32 anon_server_1 postfix/postscreen[2044650]: anon_hostname_2 anon_hostname_3 [anon_ip_155]:38080 +Jun 1 11:06:32 anon_server_1 postfix/smtpd[2044654]: connect from anon_hostname_386[anon_ip_155] +Jun 1 11:06:32 anon_server_1 postfix/smtpd[2044654]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_386[anon_ip_155]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 11:06:32 anon_server_1 postfix/smtpd[2044654]: anon_hostname_12 from anon_hostname_386[anon_ip_155] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_17=1 anon_hostname_18=4 +Jun 1 11:08:14 anon_server_1 postfix/smtps/smtpd[2044700]: connect from unknown[anon_ip_156] +Jun 1 11:08:16 anon_server_1 postfix/smtps/smtpd[2044700]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_156]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 11:08:23 anon_server_1 postfix/smtps/smtpd[2044700]: anon_hostname_158: unknown[anon_ip_156]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 11:08:23 anon_server_1 postfix/smtps/smtpd[2044700]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_156] +Jun 1 11:08:23 anon_server_1 postfix/smtps/smtpd[2044700]: anon_hostname_12 from unknown[anon_ip_156] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 11:08:25 anon_server_1 postfix/smtps/smtpd[2044700]: connect from unknown[anon_ip_157] +Jun 1 11:08:27 anon_server_1 postfix/smtps/smtpd[2044700]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_157]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 11:08:34 anon_server_1 postfix/smtps/smtpd[2044700]: anon_hostname_158: unknown[anon_ip_157]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 11:09:04 anon_server_1 postfix/postscreen[2044789]: anon_hostname_1 from [anon_ip_106]:55616 to [anon_ip_2]:25 +Jun 1 11:09:04 anon_server_1 postfix/dnsblog[2044792]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 11:09:10 anon_server_1 postfix/postscreen[2044789]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:55616 +Jun 1 11:09:10 anon_server_1 postfix/postscreen[2044789]: anon_hostname_183 [anon_ip_106]:55616 +Jun 1 11:13:17 anon_server_1 postfix/anvil[2044534]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_154) anon_hostname_35 Jun 1 11:03:17 +Jun 1 11:13:17 anon_server_1 postfix/anvil[2044534]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_154) anon_hostname_35 Jun 1 11:03:17 +Jun 1 11:13:17 anon_server_1 postfix/anvil[2044534]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 11:08:27 +Jun 1 11:13:34 anon_server_1 postfix/smtps/smtpd[2044700]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_157] +Jun 1 11:13:34 anon_server_1 postfix/smtps/smtpd[2044700]: anon_hostname_12 from unknown[anon_ip_157] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 11:21:04 anon_server_1 postfix/postscreen[2045167]: anon_hostname_1 from [anon_ip_106]:59199 to [anon_ip_2]:25 +Jun 1 11:21:04 anon_server_1 postfix/dnsblog[2045168]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 11:21:10 anon_server_1 postfix/postscreen[2045167]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:59199 +Jun 1 11:21:10 anon_server_1 postfix/postscreen[2045167]: anon_hostname_183 [anon_ip_106]:59199 +Jun 1 11:26:04 anon_server_1 postfix/postscreen[2045303]: anon_hostname_1 from [anon_ip_106]:48434 to [anon_ip_2]:25 +Jun 1 11:26:05 anon_server_1 postfix/dnsblog[2045305]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 11:26:10 anon_server_1 postfix/postscreen[2045303]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:48434 +Jun 1 11:26:10 anon_server_1 postfix/postscreen[2045303]: anon_hostname_183 [anon_ip_106]:48434 +Jun 1 11:33:04 anon_server_1 postfix/postscreen[2045578]: anon_hostname_1 from [anon_ip_27]:58226 to [anon_ip_2]:25 +Jun 1 11:33:04 anon_server_1 postfix/dnsblog[2045580]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 11:33:10 anon_server_1 postfix/postscreen[2045578]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:58226 +Jun 1 11:33:10 anon_server_1 postfix/postscreen[2045578]: anon_hostname_183 [anon_ip_27]:58226 +Jun 1 11:37:05 anon_server_1 postfix/postscreen[2045669]: anon_hostname_1 from [anon_ip_106]:44945 to [anon_ip_2]:25 +Jun 1 11:37:05 anon_server_1 postfix/dnsblog[2045670]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 11:37:11 anon_server_1 postfix/postscreen[2045669]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:44945 +Jun 1 11:37:11 anon_server_1 postfix/postscreen[2045669]: anon_hostname_183 [anon_ip_106]:44945 +Jun 1 11:39:05 anon_server_1 postfix/postscreen[2045791]: anon_hostname_1 from [anon_ip_106]:33554 to [anon_ip_2]:25 +Jun 1 11:39:05 anon_server_1 postfix/dnsblog[2045792]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 11:39:11 anon_server_1 postfix/postscreen[2045791]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:33554 +Jun 1 11:39:11 anon_server_1 postfix/postscreen[2045791]: anon_hostname_183 [anon_ip_106]:33554 +Jun 1 11:41:02 anon_server_1 roundcube: Successful login for anon_user_35@anon_hostname_388 (anon_hostname_47: 25) from anon_ip_158 anon_hostname_21 anon_hostname_389 anon_hostname_390 +Jun 1 11:41:05 anon_server_1 postfix/postscreen[2045905]: anon_hostname_1 from [anon_ip_106]:43431 to [anon_ip_2]:25 +Jun 1 11:41:05 anon_server_1 postfix/dnsblog[2045907]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 11:41:11 anon_server_1 postfix/postscreen[2045905]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:43431 +Jun 1 11:41:11 anon_server_1 postfix/postscreen[2045905]: anon_hostname_183 [anon_ip_106]:43431 +Jun 1 11:42:02 anon_server_1 postfix/smtps/smtpd[2045918]: connect from unknown[anon_ip_159] +Jun 1 11:42:02 anon_server_1 postfix/smtps/smtpd[2045918]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_159]: anon_hostname_121 anon_hostname_104 +Jun 1 11:42:02 anon_server_1 postfix/smtps/smtpd[2045918]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_159] +Jun 1 11:42:02 anon_server_1 postfix/smtps/smtpd[2045918]: anon_hostname_12 from unknown[anon_ip_159] anon_hostname_18=0/0 +Jun 1 11:42:04 anon_server_1 postfix/smtps/smtpd[2045918]: connect from anon_hostname_391[anon_ip_160] +Jun 1 11:42:05 anon_server_1 postfix/smtps/smtpd[2045918]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_391[anon_ip_160]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 11:42:12 anon_server_1 postfix/smtps/smtpd[2045918]: anon_hostname_158: anon_hostname_391[anon_ip_160]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 11:42:15 anon_server_1 postfix/smtps/smtpd[2045994]: connect from anon_hostname_392non_ip_162] +Jun 1 11:42:16 anon_server_1 postfix/smtps/smtpd[2045994]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_392non_ip_162]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 11:42:21 anon_server_1 postfix/smtps/smtpd[2045994]: anon_hostname_158: anon_hostname_392non_ip_162]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 11:43:26 anon_server_1 postfix/submission/smtpd[2046084]: connect from anon_hostname_393[anon_ip_163] +Jun 1 11:43:28 anon_server_1 postfix/submission/smtpd[2046084]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_393[anon_ip_163] +Jun 1 11:43:28 anon_server_1 postfix/submission/smtpd[2046084]: anon_hostname_12 from anon_hostname_393[anon_ip_163] anon_hostname_18=0/0 +Jun 1 11:43:28 anon_server_1 postfix/submission/smtpd[2046084]: connect from anon_hostname_394[anon_ip_164] +Jun 1 11:43:42 anon_server_1 postfix/submission/smtpd[2046084]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_394[anon_ip_164]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 11:43:47 anon_server_1 postfix/submission/smtpd[2046084]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_356 from anon_hostname_394[anon_ip_164] +Jun 1 11:43:47 anon_server_1 postfix/submission/smtpd[2046084]: anon_hostname_12 from anon_hostname_394[anon_ip_164] anon_hostname_13=1 anon_hostname_119=1 anon_hostname_18=2 +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046113]: connect from anon_hostname_395[anon_ip_158] +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046116]: connect from anon_hostname_395[anon_ip_158] +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046118]: connect from anon_hostname_395[anon_ip_158] +Jun 1 11:44:41 anon_server_1 postfix/submission/smtpd[2046084]: connect from anon_hostname_395[anon_ip_158] +Jun 1 11:44:41 anon_server_1 postfix/submission/smtpd[2046084]: anon_hostname_255 anon_hostname_256 anon_hostname_257 anon_hostname_122 anon_hostname_218 from anon_hostname_395[anon_ip_158]: anon_hostname_396\r\n +Jun 1 11:44:41 anon_server_1 postfix/submission/smtpd[2046084]: anon_hostname_12 from anon_hostname_395[anon_ip_158] anon_hostname_13=1 anon_hostname_17=1 anon_hostname_18=2 +Jun 1 11:44:41 anon_server_1 postfix/submission/smtpd[2046084]: connect from anon_hostname_395[anon_ip_158] +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046118]: anon_hostname_175 anon_hostname_176 from anon_hostname_395[anon_ip_158]: -1 +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046118]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:14094412:anon_hostname_194 anon_hostname_195:anon_hostname_397:anon_hostname_398 anon_hostname_399 anon_hostname_213 anon_hostname_400:../anon_hostname_201/anon_hostname_202/anon_hostname_401.c:1571:anon_hostname_194 anon_hostname_399 anon_hostname_352 42: +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046118]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_395[anon_ip_158] +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046118]: anon_hostname_12 from anon_hostname_395[anon_ip_158] anon_hostname_18=0/0 +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046116]: anon_hostname_175 anon_hostname_176 from anon_hostname_395[anon_ip_158]: -1 +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046116]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:14094412:anon_hostname_194 anon_hostname_195:anon_hostname_397:anon_hostname_398 anon_hostname_399 anon_hostname_213 anon_hostname_400:../anon_hostname_201/anon_hostname_202/anon_hostname_401.c:1571:anon_hostname_194 anon_hostname_399 anon_hostname_352 42: +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046116]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_395[anon_ip_158] +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046116]: anon_hostname_12 from anon_hostname_395[anon_ip_158] anon_hostname_18=0/0 +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046113]: anon_hostname_175 anon_hostname_176 from anon_hostname_395[anon_ip_158]: -1 +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046113]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:14094412:anon_hostname_194 anon_hostname_195:anon_hostname_397:anon_hostname_398 anon_hostname_399 anon_hostname_213 anon_hostname_400:../anon_hostname_201/anon_hostname_202/anon_hostname_401.c:1571:anon_hostname_194 anon_hostname_399 anon_hostname_352 42: +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046113]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_395[anon_ip_158] +Jun 1 11:44:41 anon_server_1 postfix/smtps/smtpd[2046113]: anon_hostname_12 from anon_hostname_395[anon_ip_158] anon_hostname_18=0/0 +Jun 1 11:44:41 anon_server_1 postfix/submission/smtpd[2046084]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_395[anon_ip_158] +Jun 1 11:44:41 anon_server_1 postfix/submission/smtpd[2046084]: anon_hostname_12 from anon_hostname_395[anon_ip_158] anon_hostname_18=0/0 +Jun 1 11:45:05 anon_server_1 postfix/postscreen[2046152]: anon_hostname_1 from [anon_ip_106]:37271 to [anon_ip_2]:25 +Jun 1 11:45:05 anon_server_1 postfix/dnsblog[2046153]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 11:45:11 anon_server_1 postfix/postscreen[2046152]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:37271 +Jun 1 11:45:11 anon_server_1 postfix/postscreen[2046152]: anon_hostname_183 [anon_ip_106]:37271 +Jun 1 11:47:12 anon_server_1 postfix/smtps/smtpd[2045918]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_391[anon_ip_160] +Jun 1 11:47:12 anon_server_1 postfix/smtps/smtpd[2045918]: anon_hostname_12 from anon_hostname_391[anon_ip_160] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 11:47:21 anon_server_1 postfix/smtps/smtpd[2045994]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_392non_ip_162] +Jun 1 11:47:21 anon_server_1 postfix/smtps/smtpd[2045994]: anon_hostname_12 from anon_hostname_392non_ip_162] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 11:49:43 anon_server_1 postfix/smtps/smtpd[2046272]: connect from anon_hostname_402non_ip_165] +Jun 1 11:49:44 anon_server_1 postfix/smtps/smtpd[2046272]: anon_hostname_175 anon_hostname_176 from anon_hostname_402non_ip_165]: -1 +Jun 1 11:49:44 anon_server_1 postfix/smtps/smtpd[2046272]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:1408F0C6:anon_hostname_194 anon_hostname_195:anon_hostname_196:anon_hostname_197 anon_hostname_198 anon_hostname_199 anon_hostname_200:../anon_hostname_201/anon_hostname_202/anon_hostname_203.c:250: +Jun 1 11:49:44 anon_server_1 postfix/smtps/smtpd[2046272]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_402non_ip_165] +Jun 1 11:49:44 anon_server_1 postfix/smtps/smtpd[2046272]: anon_hostname_12 from anon_hostname_402non_ip_165] anon_hostname_18=0/0 +Jun 1 11:52:02 anon_server_1 postfix/anvil[2045934]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 2/60s for (anon_hostname_259:anon_ip_158) anon_hostname_35 Jun 1 11:44:41 +Jun 1 11:52:02 anon_server_1 postfix/anvil[2045934]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_160) anon_hostname_35 Jun 1 11:42:05 +Jun 1 11:52:02 anon_server_1 postfix/anvil[2045934]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 11:43:28 +Jun 1 11:59:11 anon_server_1 postfix/submission/smtpd[2046505]: connect from unknown[anon_ip_50] +Jun 1 11:59:11 anon_server_1 postfix/submission/smtpd[2046505]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_50] +Jun 1 11:59:11 anon_server_1 postfix/submission/smtpd[2046505]: anon_hostname_12 from unknown[anon_ip_50] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 12:02:31 anon_server_1 postfix/anvil[2046507]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_259:anon_ip_50) anon_hostname_35 Jun 1 11:59:11 +Jun 1 12:02:31 anon_server_1 postfix/anvil[2046507]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_259:anon_ip_50) anon_hostname_35 Jun 1 11:59:11 +Jun 1 12:02:31 anon_server_1 postfix/anvil[2046507]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 11:59:11 +Jun 1 12:02:50 anon_server_1 postfix/smtps/smtpd[2046604]: connect from anon_hostname_403[anon_ip_166] +Jun 1 12:02:50 anon_server_1 postfix/smtps/smtpd[2046604]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_403[anon_ip_166]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 12:02:53 anon_server_1 postfix/smtps/smtpd[2046604]: anon_hostname_158: anon_hostname_403[anon_ip_166]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_11 +Jun 1 12:02:53 anon_server_1 postfix/smtps/smtpd[2046604]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_403[anon_ip_166] +Jun 1 12:02:53 anon_server_1 postfix/smtps/smtpd[2046604]: anon_hostname_12 from anon_hostname_403[anon_ip_166] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 12:04:04 anon_server_1 postfix/postscreen[2046676]: anon_hostname_1 from [anon_ip_106]:43652 to [anon_ip_2]:25 +Jun 1 12:04:04 anon_server_1 postfix/dnsblog[2046678]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 12:04:10 anon_server_1 postfix/postscreen[2046676]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:43652 +Jun 1 12:04:10 anon_server_1 postfix/postscreen[2046676]: anon_hostname_183 [anon_ip_106]:43652 +Jun 1 12:05:09 anon_server_1 postfix/smtps/smtpd[2046708]: connect from unknown[anon_ip_167] +Jun 1 12:05:12 anon_server_1 postfix/smtps/smtpd[2046708]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_167]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 12:05:22 anon_server_1 postfix/smtps/smtpd[2046708]: anon_hostname_158: unknown[anon_ip_167]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 12:10:22 anon_server_1 postfix/smtps/smtpd[2046708]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_167] +Jun 1 12:10:22 anon_server_1 postfix/smtps/smtpd[2046708]: anon_hostname_12 from unknown[anon_ip_167] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 12:12:50 anon_server_1 postfix/anvil[2046608]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_166) anon_hostname_35 Jun 1 12:02:50 +Jun 1 12:12:50 anon_server_1 postfix/anvil[2046608]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_166) anon_hostname_35 Jun 1 12:02:50 +Jun 1 12:12:50 anon_server_1 postfix/anvil[2046608]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 12:02:50 +Jun 1 12:20:48 anon_server_1 postfix/postscreen[2047184]: anon_hostname_1 from [anon_ip_106]:51542 to [anon_ip_2]:25 +Jun 1 12:20:48 anon_server_1 postfix/dnsblog[2047186]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 12:20:53 anon_server_1 postfix/postscreen[2047184]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:51542 +Jun 1 12:20:53 anon_server_1 postfix/postscreen[2047184]: anon_hostname_183 [anon_ip_106]:51542 +Jun 1 12:21:04 anon_server_1 postfix/postscreen[2047184]: anon_hostname_1 from [anon_ip_106]:35591 to [anon_ip_2]:25 +Jun 1 12:21:04 anon_server_1 postfix/dnsblog[2047185]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 12:21:10 anon_server_1 postfix/postscreen[2047184]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:35591 +Jun 1 12:21:10 anon_server_1 postfix/postscreen[2047184]: anon_hostname_183 [anon_ip_106]:35591 +Jun 1 12:40:35 anon_server_1 postfix/smtps/smtpd[2047734]: anon_hostname_158: anon_hostname_171 anon_hostname_404non_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_168: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 12:40:35 anon_server_1 postfix/smtps/smtpd[2047734]: connect from unknown[anon_ip_168] +Jun 1 12:40:37 anon_server_1 postfix/smtps/smtpd[2047736]: connect from unknown[anon_ip_169] +Jun 1 12:40:38 anon_server_1 postfix/smtps/smtpd[2047736]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_169]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 12:40:39 anon_server_1 postfix/smtps/smtpd[2047734]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_168]: anon_hostname_121 anon_hostname_104 +Jun 1 12:40:39 anon_server_1 postfix/smtps/smtpd[2047734]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_168] +Jun 1 12:40:39 anon_server_1 postfix/smtps/smtpd[2047734]: anon_hostname_12 from unknown[anon_ip_168] anon_hostname_18=0/0 +Jun 1 12:40:43 anon_server_1 postfix/smtps/smtpd[2047736]: anon_hostname_158: unknown[anon_ip_169]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 12:40:44 anon_server_1 postfix/smtps/smtpd[2047736]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_169] +Jun 1 12:40:44 anon_server_1 postfix/smtps/smtpd[2047736]: anon_hostname_12 from unknown[anon_ip_169] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 12:40:46 anon_server_1 postfix/smtps/smtpd[2047734]: anon_hostname_158: anon_hostname_171 anon_hostname_405n_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_171: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 12:40:46 anon_server_1 postfix/smtps/smtpd[2047734]: connect from unknown[anon_ip_171] +Jun 1 12:40:47 anon_server_1 postfix/smtps/smtpd[2047734]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_171]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 12:40:53 anon_server_1 postfix/smtps/smtpd[2047734]: anon_hostname_158: unknown[anon_ip_171]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 12:43:04 anon_server_1 postfix/postscreen[2047870]: anon_hostname_1 from [anon_ip_27]:36152 to [anon_ip_2]:25 +Jun 1 12:43:04 anon_server_1 postfix/dnsblog[2047872]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 12:43:10 anon_server_1 postfix/postscreen[2047870]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:36152 +Jun 1 12:43:10 anon_server_1 postfix/postscreen[2047870]: anon_hostname_183 [anon_ip_27]:36152 +Jun 1 12:45:53 anon_server_1 postfix/smtps/smtpd[2047734]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_171] +Jun 1 12:45:53 anon_server_1 postfix/smtps/smtpd[2047734]: anon_hostname_12 from unknown[anon_ip_171] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 12:49:13 anon_server_1 postfix/anvil[2047738]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_169) anon_hostname_35 Jun 1 12:40:38 +Jun 1 12:49:13 anon_server_1 postfix/anvil[2047738]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_169) anon_hostname_35 Jun 1 12:40:38 +Jun 1 12:49:13 anon_server_1 postfix/anvil[2047738]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 12:40:47 +Jun 1 12:54:06 anon_server_1 postfix/postscreen[2048144]: anon_hostname_1 from [anon_ip_106]:46896 to [anon_ip_2]:25 +Jun 1 12:54:06 anon_server_1 postfix/dnsblog[2048146]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 12:54:12 anon_server_1 postfix/postscreen[2048144]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:46896 +Jun 1 12:54:12 anon_server_1 postfix/postscreen[2048144]: anon_hostname_183 [anon_ip_106]:46896 +Jun 1 12:56:53 anon_server_1 postfix/postscreen[2048219]: anon_hostname_1 from [anon_ip_106]:49959 to [anon_ip_2]:25 +Jun 1 12:56:54 anon_server_1 postfix/dnsblog[2048220]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 12:56:59 anon_server_1 postfix/postscreen[2048219]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:49959 +Jun 1 12:56:59 anon_server_1 postfix/postscreen[2048219]: anon_hostname_183 [anon_ip_106]:49959 +Jun 1 12:59:06 anon_server_1 postfix/postscreen[2048288]: anon_hostname_1 from [anon_ip_106]:45764 to [anon_ip_2]:25 +Jun 1 12:59:06 anon_server_1 postfix/dnsblog[2048289]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 12:59:12 anon_server_1 postfix/postscreen[2048288]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:45764 +Jun 1 12:59:12 anon_server_1 postfix/postscreen[2048288]: anon_hostname_183 [anon_ip_106]:45764 +Jun 1 12:59:25 anon_server_1 postfix/smtps/smtpd[2048293]: connect from unknown[anon_ip_172] +Jun 1 12:59:25 anon_server_1 postfix/smtps/smtpd[2048293]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_172]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 12:59:32 anon_server_1 postfix/smtps/smtpd[2048293]: anon_hostname_158: unknown[anon_ip_172]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_4 +Jun 1 12:59:41 anon_server_1 postfix/smtps/smtpd[2048332]: connect from unknown[anon_ip_173] +Jun 1 12:59:42 anon_server_1 postfix/smtps/smtpd[2048332]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_173]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 12:59:44 anon_server_1 postfix/smtps/smtpd[2048333]: connect from anon_hostname_406[anon_ip_174] +Jun 1 12:59:46 anon_server_1 postfix/smtps/smtpd[2048333]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_406[anon_ip_174]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 12:59:49 anon_server_1 postfix/smtps/smtpd[2048330]: connect from unknown[anon_ip_175] +Jun 1 12:59:49 anon_server_1 postfix/smtps/smtpd[2048330]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_175]: anon_hostname_121 anon_hostname_104 +Jun 1 12:59:49 anon_server_1 postfix/smtps/smtpd[2048330]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_175] +Jun 1 12:59:49 anon_server_1 postfix/smtps/smtpd[2048330]: anon_hostname_12 from unknown[anon_ip_175] anon_hostname_18=0/0 +Jun 1 12:59:50 anon_server_1 postfix/smtps/smtpd[2048332]: anon_hostname_158: unknown[anon_ip_173]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_6 +Jun 1 12:59:59 anon_server_1 postfix/smtps/smtpd[2048333]: anon_hostname_158: anon_hostname_406[anon_ip_174]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 13:03:58 anon_server_1 postfix/submission/smtpd[2048507]: connect from unknown[anon_ip_176] +Jun 1 13:04:04 anon_server_1 postfix/postscreen[2048521]: anon_hostname_1 from [anon_ip_106]:60538 to [anon_ip_2]:25 +Jun 1 13:04:04 anon_server_1 postfix/dnsblog[2048522]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:04:05 anon_server_1 postfix/submission/smtpd[2048507]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_176]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 13:04:10 anon_server_1 postfix/postscreen[2048521]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:60538 +Jun 1 13:04:10 anon_server_1 postfix/postscreen[2048521]: anon_hostname_183 [anon_ip_106]:60538 +Jun 1 13:04:15 anon_server_1 postfix/submission/smtpd[2048507]: anon_hostname_158: unknown[anon_ip_176]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 13:04:16 anon_server_1 postfix/submission/smtpd[2048507]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_176] +Jun 1 13:04:16 anon_server_1 postfix/submission/smtpd[2048507]: anon_hostname_12 from unknown[anon_ip_176] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_167=0/1 anon_hostname_18=3/4 +Jun 1 13:04:18 anon_server_1 postfix/submission/smtpd[2048507]: connect from unknown[anon_ip_177] +Jun 1 13:04:25 anon_server_1 postfix/submission/smtpd[2048507]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_177]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 13:04:32 anon_server_1 postfix/smtps/smtpd[2048293]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_172] +Jun 1 13:04:32 anon_server_1 postfix/smtps/smtpd[2048293]: anon_hostname_12 from unknown[anon_ip_172] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 13:04:35 anon_server_1 postfix/submission/smtpd[2048507]: anon_hostname_158: unknown[anon_ip_177]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_12 +Jun 1 13:04:50 anon_server_1 postfix/smtps/smtpd[2048332]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_173] +Jun 1 13:04:50 anon_server_1 postfix/smtps/smtpd[2048332]: anon_hostname_12 from unknown[anon_ip_173] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 13:04:59 anon_server_1 postfix/smtps/smtpd[2048333]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_406[anon_ip_174] +Jun 1 13:04:59 anon_server_1 postfix/smtps/smtpd[2048333]: anon_hostname_12 from anon_hostname_406[anon_ip_174] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 13:05:04 anon_server_1 postfix/postscreen[2048521]: anon_hostname_1 from [anon_ip_106]:59147 to [anon_ip_2]:25 +Jun 1 13:05:04 anon_server_1 postfix/dnsblog[2048522]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:05:10 anon_server_1 postfix/postscreen[2048521]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:59147 +Jun 1 13:05:10 anon_server_1 postfix/postscreen[2048521]: anon_hostname_183 [anon_ip_106]:59147 +Jun 1 13:06:42 anon_server_1 postfix/postscreen[2048521]: anon_hostname_1 from [anon_ip_106]:46297 to [anon_ip_2]:25 +Jun 1 13:06:42 anon_server_1 postfix/dnsblog[2048522]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:06:48 anon_server_1 postfix/postscreen[2048521]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:46297 +Jun 1 13:06:48 anon_server_1 postfix/postscreen[2048521]: anon_hostname_183 [anon_ip_106]:46297 +Jun 1 13:09:25 anon_server_1 postfix/anvil[2048296]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_172) anon_hostname_35 Jun 1 12:59:25 +Jun 1 13:09:25 anon_server_1 postfix/anvil[2048296]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_172) anon_hostname_35 Jun 1 12:59:25 +Jun 1 13:09:25 anon_server_1 postfix/anvil[2048296]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 5 anon_hostname_35 Jun 1 13:04:18 +Jun 1 13:09:35 anon_server_1 postfix/submission/smtpd[2048507]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_177] +Jun 1 13:09:35 anon_server_1 postfix/submission/smtpd[2048507]: anon_hostname_12 from unknown[anon_ip_177] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_167=0/1 anon_hostname_18=3/4 +Jun 1 13:13:59 anon_server_1 postfix/smtps/smtpd[2048872]: connect from anon_hostname_407non_ip_179] +Jun 1 13:14:01 anon_server_1 postfix/smtps/smtpd[2048872]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_407non_ip_179]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 13:14:06 anon_server_1 postfix/smtps/smtpd[2048872]: anon_hostname_158: anon_hostname_407non_ip_179]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 13:14:06 anon_server_1 postfix/smtps/smtpd[2048872]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_407non_ip_179] +Jun 1 13:14:06 anon_server_1 postfix/smtps/smtpd[2048872]: anon_hostname_12 from anon_hostname_407non_ip_179] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 13:14:11 anon_server_1 postfix/smtps/smtpd[2048872]: connect from unknown[anon_ip_180] +Jun 1 13:14:11 anon_server_1 postfix/smtps/smtpd[2048872]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_180]: -1 +Jun 1 13:14:11 anon_server_1 postfix/smtps/smtpd[2048872]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:1408F0C6:anon_hostname_194 anon_hostname_195:anon_hostname_196:anon_hostname_197 anon_hostname_198 anon_hostname_199 anon_hostname_200:../anon_hostname_201/anon_hostname_202/anon_hostname_203.c:250: +Jun 1 13:14:11 anon_server_1 postfix/smtps/smtpd[2048872]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_180] +Jun 1 13:14:11 anon_server_1 postfix/smtps/smtpd[2048872]: anon_hostname_12 from unknown[anon_ip_180] anon_hostname_18=0/0 +Jun 1 13:16:04 anon_server_1 postfix/postscreen[2048973]: anon_hostname_1 from [anon_ip_106]:52179 to [anon_ip_2]:25 +Jun 1 13:16:04 anon_server_1 postfix/dnsblog[2048975]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:16:10 anon_server_1 postfix/postscreen[2048973]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:52179 +Jun 1 13:16:10 anon_server_1 postfix/postscreen[2048973]: anon_hostname_183 [anon_ip_106]:52179 +Jun 1 13:17:31 anon_server_1 postfix/anvil[2048887]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_179) anon_hostname_35 Jun 1 13:14:01 +Jun 1 13:17:31 anon_server_1 postfix/anvil[2048887]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_179) anon_hostname_35 Jun 1 13:14:01 +Jun 1 13:17:31 anon_server_1 postfix/anvil[2048887]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 13:14:01 +Jun 1 13:18:29 anon_server_1 postfix/smtps/smtpd[2049029]: connect from unknown[anon_ip_181] +Jun 1 13:18:31 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_181]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 13:18:37 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_158: unknown[anon_ip_181]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 13:21:29 anon_server_1 postfix/postscreen[2049136]: anon_hostname_1 from [anon_ip_182]:50946 to [anon_ip_2]:25 +Jun 1 13:21:29 anon_server_1 postfix/dnsblog[2049138]: anon_hostname_178 anon_ip_182 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:21:29 anon_server_1 postfix/dnsblog[2049138]: anon_hostname_178 anon_ip_182 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 13:21:35 anon_server_1 postfix/postscreen[2049136]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_182]:50946 +Jun 1 13:21:35 anon_server_1 postfix/postscreen[2049136]: anon_hostname_183 [anon_ip_182]:50946 +Jun 1 13:23:37 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_181] +Jun 1 13:23:37 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from unknown[anon_ip_181] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 13:24:18 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_408[anon_ip_183] +Jun 1 13:24:19 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_408[anon_ip_183]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 13:24:23 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_408[anon_ip_183] anon_hostname_13=1 anon_hostname_17=1 anon_hostname_18=2 +Jun 1 13:24:24 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_409[anon_ip_184] +Jun 1 13:24:24 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_409[anon_ip_184]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 13:24:24 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_409[anon_ip_184] +Jun 1 13:24:24 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_409[anon_ip_184] anon_hostname_18=0/0 +Jun 1 13:24:57 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_410[anon_ip_185] +Jun 1 13:24:57 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_410[anon_ip_185]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 13:24:57 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_410[anon_ip_185] +Jun 1 13:24:57 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_410[anon_ip_185] anon_hostname_18=0/0 +Jun 1 13:25:30 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_411[anon_ip_186] +Jun 1 13:25:30 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_411[anon_ip_186]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 13:25:30 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_411[anon_ip_186] +Jun 1 13:25:30 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_411[anon_ip_186] anon_hostname_18=0/0 +Jun 1 13:26:03 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_410[anon_ip_185] +Jun 1 13:26:03 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_410[anon_ip_185]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 13:26:03 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_410[anon_ip_185] +Jun 1 13:26:03 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_410[anon_ip_185] anon_hostname_18=0/0 +Jun 1 13:26:36 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_412[anon_ip_187] +Jun 1 13:26:36 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_412[anon_ip_187]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 13:26:36 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_412[anon_ip_187] +Jun 1 13:26:36 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_412[anon_ip_187] anon_hostname_18=0/0 +Jun 1 13:27:06 anon_server_1 postfix/postscreen[2049292]: anon_hostname_1 from [anon_ip_106]:54405 to [anon_ip_2]:25 +Jun 1 13:27:06 anon_server_1 postfix/dnsblog[2049293]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:27:09 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_413[anon_ip_188] +Jun 1 13:27:09 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_413[anon_ip_188]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 13:27:09 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_413[anon_ip_188] +Jun 1 13:27:09 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_413[anon_ip_188] anon_hostname_18=0/0 +Jun 1 13:27:12 anon_server_1 postfix/postscreen[2049292]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:54405 +Jun 1 13:27:12 anon_server_1 postfix/postscreen[2049292]: anon_hostname_183 [anon_ip_106]:54405 +Jun 1 13:27:42 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_414[anon_ip_189] +Jun 1 13:27:42 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_414[anon_ip_189]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 13:27:42 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_414[anon_ip_189] +Jun 1 13:27:42 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_414[anon_ip_189] anon_hostname_18=0/0 +Jun 1 13:28:16 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_415[anon_ip_190] +Jun 1 13:28:16 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_415[anon_ip_190]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 13:28:16 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_415[anon_ip_190] +Jun 1 13:28:16 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_415[anon_ip_190] anon_hostname_18=0/0 +Jun 1 13:28:31 anon_server_1 postfix/anvil[2049033]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_181) anon_hostname_35 Jun 1 13:18:31 +Jun 1 13:28:31 anon_server_1 postfix/anvil[2049033]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_181) anon_hostname_35 Jun 1 13:18:31 +Jun 1 13:28:31 anon_server_1 postfix/anvil[2049033]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 13:24:19 +Jun 1 13:28:49 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_416[anon_ip_191] +Jun 1 13:28:49 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_416[anon_ip_191]: -1 +Jun 1 13:28:49 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:142090C1:anon_hostname_194 anon_hostname_195:anon_hostname_417:anon_hostname_65 anon_hostname_418 anon_hostname_108:../anon_hostname_201/anon_hostname_419/anon_hostname_420.c:1779: +Jun 1 13:28:49 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_416[anon_ip_191] +Jun 1 13:28:49 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_416[anon_ip_191] anon_hostname_18=0/0 +Jun 1 13:29:22 anon_server_1 postfix/smtps/smtpd[2049029]: connect from anon_hostname_421[anon_ip_192] +Jun 1 13:29:22 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_175 anon_hostname_176 from anon_hostname_421[anon_ip_192]: -1 +Jun 1 13:29:22 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_158: anon_hostname_103 anon_hostname_192 anon_hostname_193: anon_hostname_176:141CF06C:anon_hostname_194 anon_hostname_195:anon_hostname_422:anon_hostname_213 anon_hostname_423 anon_hostname_424:../anon_hostname_201/anon_hostname_419/anon_hostname_425.c:697: +Jun 1 13:29:22 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_421[anon_ip_192] +Jun 1 13:29:22 anon_server_1 postfix/smtps/smtpd[2049029]: anon_hostname_12 from anon_hostname_421[anon_ip_192] anon_hostname_18=0/0 +Jun 1 13:31:04 anon_server_1 postfix/postscreen[2049390]: anon_hostname_1 from [anon_ip_106]:59687 to [anon_ip_2]:25 +Jun 1 13:31:04 anon_server_1 postfix/dnsblog[2049391]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:31:10 anon_server_1 postfix/postscreen[2049390]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:59687 +Jun 1 13:31:10 anon_server_1 postfix/postscreen[2049390]: anon_hostname_183 [anon_ip_106]:59687 +Jun 1 13:35:23 anon_server_1 postfix/submission/smtpd[2049496]: anon_hostname_158: anon_hostname_171 anon_hostname_426 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_193: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 13:35:23 anon_server_1 postfix/submission/smtpd[2049496]: connect from unknown[anon_ip_193] +Jun 1 13:35:23 anon_server_1 postfix/submission/smtpd[2049496]: anon_hostname_255 anon_hostname_256 anon_hostname_257 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_193]: \026\003\001\000\356\001\000\000\352\003\003#\232\305\251\202\366u\355KU\250o\345y\365\330 \246\001\236\n\277L\v\356\2620\334\212\204\032p _\377\331\352\361\355\r\226#\350\024\261n\37514\316/\273;|9\321\261\253J\034\334\316S5Q\000&\314\250\314\251\300/\3000\300+\300,\300\023\300\t\300\024\300\n\000\234 +Jun 1 13:35:23 anon_server_1 postfix/submission/smtpd[2049496]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_215 from unknown[anon_ip_193] +Jun 1 13:35:23 anon_server_1 postfix/submission/smtpd[2049496]: anon_hostname_12 from unknown[anon_ip_193] unknown=0/1 anon_hostname_18=0/1 +Jun 1 13:37:55 anon_server_1 postfix/postscreen[2049596]: anon_hostname_1 from [anon_ip_106]:58451 to [anon_ip_2]:25 +Jun 1 13:37:55 anon_server_1 postfix/dnsblog[2049598]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:38:01 anon_server_1 postfix/postscreen[2049596]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:58451 +Jun 1 13:38:01 anon_server_1 postfix/postscreen[2049596]: anon_hostname_183 [anon_ip_106]:58451 +Jun 1 13:38:43 anon_server_1 postfix/anvil[2049498]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_259:anon_ip_193) anon_hostname_35 Jun 1 13:35:23 +Jun 1 13:38:43 anon_server_1 postfix/anvil[2049498]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_259:anon_ip_193) anon_hostname_35 Jun 1 13:35:23 +Jun 1 13:38:43 anon_server_1 postfix/anvil[2049498]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 13:35:23 +Jun 1 13:46:04 anon_server_1 postfix/postscreen[2049846]: anon_hostname_1 from [anon_ip_106]:45702 to [anon_ip_2]:25 +Jun 1 13:46:04 anon_server_1 postfix/dnsblog[2049847]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:46:10 anon_server_1 postfix/postscreen[2049846]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:45702 +Jun 1 13:46:10 anon_server_1 postfix/postscreen[2049846]: anon_hostname_183 [anon_ip_106]:45702 +Jun 1 13:53:04 anon_server_1 postfix/postscreen[2050014]: anon_hostname_1 from [anon_ip_27]:39060 to [anon_ip_2]:25 +Jun 1 13:53:04 anon_server_1 postfix/dnsblog[2050016]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:53:10 anon_server_1 postfix/postscreen[2050014]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:39060 +Jun 1 13:53:10 anon_server_1 postfix/postscreen[2050014]: anon_hostname_183 [anon_ip_27]:39060 +Jun 1 13:56:54 anon_server_1 postfix/smtps/smtpd[2050102]: connect from unknown[anon_ip_194] +Jun 1 13:56:57 anon_server_1 postfix/smtps/smtpd[2050102]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_194]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 13:57:06 anon_server_1 postfix/smtps/smtpd[2050102]: anon_hostname_158: unknown[anon_ip_194]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 13:57:12 anon_server_1 postfix/smtps/smtpd[2050163]: connect from unknown[anon_ip_195] +Jun 1 13:57:19 anon_server_1 postfix/smtps/smtpd[2050163]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_195]: anon_hostname_121 anon_hostname_104 +Jun 1 13:57:19 anon_server_1 postfix/smtps/smtpd[2050163]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_195] +Jun 1 13:57:19 anon_server_1 postfix/smtps/smtpd[2050163]: anon_hostname_12 from unknown[anon_ip_195] anon_hostname_18=0/0 +Jun 1 13:57:26 anon_server_1 postfix/smtps/smtpd[2050163]: connect from unknown[anon_ip_196] +Jun 1 13:57:27 anon_server_1 postfix/smtps/smtpd[2050163]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_196]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 13:57:35 anon_server_1 postfix/smtps/smtpd[2050163]: anon_hostname_158: unknown[anon_ip_196]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 13:58:06 anon_server_1 postfix/postscreen[2050212]: anon_hostname_1 from [anon_ip_106]:53037 to [anon_ip_2]:25 +Jun 1 13:58:06 anon_server_1 postfix/dnsblog[2050214]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 13:58:12 anon_server_1 postfix/postscreen[2050212]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:53037 +Jun 1 13:58:12 anon_server_1 postfix/postscreen[2050212]: anon_hostname_183 [anon_ip_106]:53037 +Jun 1 14:02:06 anon_server_1 postfix/smtps/smtpd[2050102]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_194] +Jun 1 14:02:06 anon_server_1 postfix/smtps/smtpd[2050102]: anon_hostname_12 from unknown[anon_ip_194] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 14:02:35 anon_server_1 postfix/smtps/smtpd[2050163]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_196] +Jun 1 14:02:35 anon_server_1 postfix/smtps/smtpd[2050163]: anon_hostname_12 from unknown[anon_ip_196] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 14:05:55 anon_server_1 postfix/anvil[2050108]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_194) anon_hostname_35 Jun 1 13:56:57 +Jun 1 14:05:55 anon_server_1 postfix/anvil[2050108]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_194) anon_hostname_35 Jun 1 13:56:57 +Jun 1 14:05:55 anon_server_1 postfix/anvil[2050108]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 13:57:27 +Jun 1 14:13:05 anon_server_1 postfix/postscreen[2050659]: anon_hostname_1 from [anon_ip_106]:50904 to [anon_ip_2]:25 +Jun 1 14:13:05 anon_server_1 postfix/dnsblog[2050660]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 14:13:11 anon_server_1 postfix/postscreen[2050659]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:50904 +Jun 1 14:13:11 anon_server_1 postfix/postscreen[2050659]: anon_hostname_183 [anon_ip_106]:50904 +Jun 1 14:15:05 anon_server_1 postfix/postscreen[2050709]: anon_hostname_1 from [anon_ip_106]:36422 to [anon_ip_2]:25 +Jun 1 14:15:05 anon_server_1 postfix/dnsblog[2050711]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 14:15:11 anon_server_1 postfix/postscreen[2050709]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:36422 +Jun 1 14:15:11 anon_server_1 postfix/postscreen[2050709]: anon_hostname_183 [anon_ip_106]:36422 +Jun 1 14:17:04 anon_server_1 postfix/postscreen[2050764]: anon_hostname_1 from [anon_ip_106]:53160 to [anon_ip_2]:25 +Jun 1 14:17:04 anon_server_1 postfix/dnsblog[2050765]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 14:17:10 anon_server_1 postfix/postscreen[2050764]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:53160 +Jun 1 14:17:10 anon_server_1 postfix/postscreen[2050764]: anon_hostname_183 [anon_ip_106]:53160 +Jun 1 14:24:04 anon_server_1 postfix/postscreen[2050923]: anon_hostname_1 from [anon_ip_106]:53318 to [anon_ip_2]:25 +Jun 1 14:24:04 anon_server_1 postfix/dnsblog[2050924]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 14:24:10 anon_server_1 postfix/postscreen[2050923]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:53318 +Jun 1 14:24:10 anon_server_1 postfix/postscreen[2050923]: anon_hostname_183 [anon_ip_106]:53318 +Jun 1 14:24:50 anon_server_1 postfix/postscreen[2050923]: anon_hostname_1 from [anon_ip_43]:57826 to [anon_ip_2]:25 +Jun 1 14:24:50 anon_server_1 postfix/dnsblog[2050924]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 14:24:50 anon_server_1 postfix/dnsblog[2050924]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 14:24:56 anon_server_1 postfix/postscreen[2050923]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_43]:57826 +Jun 1 14:24:56 anon_server_1 postfix/postscreen[2050923]: anon_hostname_183 [anon_ip_43]:57826 +Jun 1 14:32:24 anon_server_1 postfix/smtps/smtpd[2051125]: connect from unknown[anon_ip_197] +Jun 1 14:32:25 anon_server_1 postfix/smtps/smtpd[2051125]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_197]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 14:32:31 anon_server_1 postfix/smtps/smtpd[2051125]: anon_hostname_158: unknown[anon_ip_197]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 14:32:34 anon_server_1 postfix/smtps/smtpd[2051165]: connect from unknown[anon_ip_198] +Jun 1 14:32:35 anon_server_1 postfix/smtps/smtpd[2051165]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_198]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 14:32:41 anon_server_1 postfix/smtps/smtpd[2051165]: anon_hostname_158: unknown[anon_ip_198]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 14:35:23 anon_server_1 postfix/smtps/smtpd[2051273]: connect from anon_hostname_427[anon_ip_199] +Jun 1 14:35:23 anon_server_1 postfix/smtps/smtpd[2051273]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_427[anon_ip_199]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 14:35:28 anon_server_1 postfix/smtps/smtpd[2051273]: anon_hostname_158: anon_hostname_427[anon_ip_199]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 14:35:37 anon_server_1 postfix/smtps/smtpd[2051307]: connect from anon_hostname_428[anon_ip_200] +Jun 1 14:35:38 anon_server_1 postfix/smtps/smtpd[2051307]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_428[anon_ip_200]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 14:35:44 anon_server_1 postfix/smtps/smtpd[2051307]: anon_hostname_158: anon_hostname_428[anon_ip_200]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 14:37:06 anon_server_1 postfix/postscreen[2051381]: anon_hostname_1 from [anon_ip_106]:37225 to [anon_ip_2]:25 +Jun 1 14:37:06 anon_server_1 postfix/dnsblog[2051383]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 14:37:12 anon_server_1 postfix/postscreen[2051381]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:37225 +Jun 1 14:37:12 anon_server_1 postfix/postscreen[2051381]: anon_hostname_183 [anon_ip_106]:37225 +Jun 1 14:37:31 anon_server_1 postfix/smtps/smtpd[2051125]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_197] +Jun 1 14:37:31 anon_server_1 postfix/smtps/smtpd[2051125]: anon_hostname_12 from unknown[anon_ip_197] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 14:37:41 anon_server_1 postfix/smtps/smtpd[2051165]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_198] +Jun 1 14:37:41 anon_server_1 postfix/smtps/smtpd[2051165]: anon_hostname_12 from unknown[anon_ip_198] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 14:40:14 anon_server_1 postfix/smtps/smtpd[2051516]: connect from unknown[anon_ip_201] +Jun 1 14:40:15 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_201]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 14:40:18 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_158: unknown[anon_ip_201]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 14:40:18 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_201] +Jun 1 14:40:18 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_12 from unknown[anon_ip_201] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 14:40:28 anon_server_1 postfix/smtps/smtpd[2051273]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_427[anon_ip_199] +Jun 1 14:40:28 anon_server_1 postfix/smtps/smtpd[2051273]: anon_hostname_12 from anon_hostname_427[anon_ip_199] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 14:40:44 anon_server_1 postfix/smtps/smtpd[2051307]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_428[anon_ip_200] +Jun 1 14:40:44 anon_server_1 postfix/smtps/smtpd[2051307]: anon_hostname_12 from anon_hostname_428[anon_ip_200] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 14:41:05 anon_server_1 postfix/postscreen[2051575]: anon_hostname_1 from [anon_ip_106]:56774 to [anon_ip_2]:25 +Jun 1 14:41:05 anon_server_1 postfix/dnsblog[2051576]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 14:41:11 anon_server_1 postfix/postscreen[2051575]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:56774 +Jun 1 14:41:11 anon_server_1 postfix/postscreen[2051575]: anon_hostname_183 [anon_ip_106]:56774 +Jun 1 14:41:34 anon_server_1 postfix/postscreen[2051575]: anon_hostname_1 from [anon_ip_90]:50109 to [anon_ip_2]:25 +Jun 1 14:41:34 anon_server_1 postfix/dnsblog[2051576]: anon_hostname_178 anon_ip_90 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 14:41:34 anon_server_1 postfix/dnsblog[2051576]: anon_hostname_178 anon_ip_90 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 14:41:40 anon_server_1 postfix/postscreen[2051575]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_90]:50109 +Jun 1 14:41:40 anon_server_1 postfix/postscreen[2051575]: anon_hostname_183 [anon_ip_90]:50109 +Jun 1 14:41:46 anon_server_1 postfix/smtps/smtpd[2051516]: connect from unknown[anon_ip_202] +Jun 1 14:42:08 anon_server_1 postfix/postscreen[2051575]: anon_hostname_1 from [anon_ip_203]:12732 to [anon_ip_2]:25 +Jun 1 14:42:08 anon_server_1 postfix/dnsblog[2051577]: anon_hostname_178 anon_ip_203 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 14:42:08 anon_server_1 postfix/dnsblog[2051577]: anon_hostname_178 anon_ip_203 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 14:42:08 anon_server_1 postfix/postscreen[2051575]: anon_hostname_181 12 anon_hostname_122 0.25 from [anon_ip_203]:12732: anon_hostname_13 anon_hostname_182\r\n +Jun 1 14:42:08 anon_server_1 postfix/postscreen[2051575]: anon_hostname_183 [anon_ip_203]:12732 +Jun 1 14:42:25 anon_server_1 postfix/anvil[2051128]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_197) anon_hostname_35 Jun 1 14:32:25 +Jun 1 14:42:25 anon_server_1 postfix/anvil[2051128]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_197) anon_hostname_35 Jun 1 14:32:25 +Jun 1 14:42:25 anon_server_1 postfix/anvil[2051128]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 14:35:38 +Jun 1 14:42:28 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_202]: anon_hostname_121 anon_hostname_104 +Jun 1 14:42:28 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_202] +Jun 1 14:42:28 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_12 from unknown[anon_ip_202] anon_hostname_18=0/0 +Jun 1 14:42:35 anon_server_1 postfix/smtps/smtpd[2051516]: connect from unknown[anon_ip_204] +Jun 1 14:43:05 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_204]: anon_hostname_121 anon_hostname_104 +Jun 1 14:43:05 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_204] +Jun 1 14:43:05 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_12 from unknown[anon_ip_204] anon_hostname_18=0/0 +Jun 1 14:43:20 anon_server_1 postfix/smtps/smtpd[2051516]: connect from unknown[anon_ip_205] +Jun 1 14:43:23 anon_server_1 postfix/smtps/smtpd[2051657]: connect from anon_hostname_429[anon_ip_206] +Jun 1 14:43:24 anon_server_1 postfix/smtps/smtpd[2051657]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_429[anon_ip_206]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 14:43:29 anon_server_1 postfix/smtps/smtpd[2051657]: anon_hostname_158: anon_hostname_429[anon_ip_206]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 14:43:29 anon_server_1 postfix/smtps/smtpd[2051657]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_429[anon_ip_206] +Jun 1 14:43:29 anon_server_1 postfix/smtps/smtpd[2051657]: anon_hostname_12 from anon_hostname_429[anon_ip_206] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 14:43:32 anon_server_1 postfix/smtps/smtpd[2051657]: connect from unknown[anon_ip_207] +Jun 1 14:43:34 anon_server_1 postfix/smtps/smtpd[2051657]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_207]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 14:43:35 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_205]: anon_hostname_121 anon_hostname_104 +Jun 1 14:43:35 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_205] +Jun 1 14:43:35 anon_server_1 postfix/smtps/smtpd[2051516]: anon_hostname_12 from unknown[anon_ip_205] anon_hostname_18=0/0 +Jun 1 14:43:41 anon_server_1 postfix/smtps/smtpd[2051657]: anon_hostname_158: unknown[anon_ip_207]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 14:48:41 anon_server_1 postfix/smtps/smtpd[2051657]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_207] +Jun 1 14:48:41 anon_server_1 postfix/smtps/smtpd[2051657]: anon_hostname_12 from unknown[anon_ip_207] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 14:49:04 anon_server_1 postfix/postscreen[2051862]: anon_hostname_1 from [anon_ip_106]:40526 to [anon_ip_2]:25 +Jun 1 14:49:04 anon_server_1 postfix/dnsblog[2051863]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 14:49:10 anon_server_1 postfix/postscreen[2051862]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:40526 +Jun 1 14:49:10 anon_server_1 postfix/postscreen[2051862]: anon_hostname_183 [anon_ip_106]:40526 +Jun 1 14:52:01 anon_server_1 postfix/anvil[2051128]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_206) anon_hostname_35 Jun 1 14:43:24 +Jun 1 14:52:01 anon_server_1 postfix/anvil[2051128]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_206) anon_hostname_35 Jun 1 14:43:24 +Jun 1 14:52:01 anon_server_1 postfix/anvil[2051128]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 14:43:34 +Jun 1 15:00:32 anon_server_1 postfix/smtps/smtpd[2052133]: connect from unknown[anon_ip_208] +Jun 1 15:00:34 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_208]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 15:00:42 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_158: unknown[anon_ip_208]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 15:00:59 anon_server_1 postfix/smtps/smtpd[2052176]: connect from unknown[anon_ip_209] +Jun 1 15:00:59 anon_server_1 postfix/smtps/smtpd[2052176]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_209]: anon_hostname_121 anon_hostname_104 +Jun 1 15:00:59 anon_server_1 postfix/smtps/smtpd[2052176]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_209] +Jun 1 15:00:59 anon_server_1 postfix/smtps/smtpd[2052176]: anon_hostname_12 from unknown[anon_ip_209] anon_hostname_18=0/0 +Jun 1 15:01:04 anon_server_1 postfix/postscreen[2052208]: anon_hostname_1 from [anon_ip_106]:59003 to [anon_ip_2]:25 +Jun 1 15:01:04 anon_server_1 postfix/dnsblog[2052210]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:01:10 anon_server_1 postfix/postscreen[2052208]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:59003 +Jun 1 15:01:10 anon_server_1 postfix/postscreen[2052208]: anon_hostname_183 [anon_ip_106]:59003 +Jun 1 15:02:04 anon_server_1 postfix/postscreen[2052208]: anon_hostname_1 from [anon_ip_106]:53242 to [anon_ip_2]:25 +Jun 1 15:02:04 anon_server_1 postfix/dnsblog[2052209]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:02:10 anon_server_1 postfix/postscreen[2052208]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:53242 +Jun 1 15:02:10 anon_server_1 postfix/postscreen[2052208]: anon_hostname_183 [anon_ip_106]:53242 +Jun 1 15:03:04 anon_server_1 postfix/postscreen[2052208]: anon_hostname_1 from [anon_ip_27]:34408 to [anon_ip_2]:25 +Jun 1 15:03:04 anon_server_1 postfix/dnsblog[2052209]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:03:10 anon_server_1 postfix/postscreen[2052208]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:34408 +Jun 1 15:03:10 anon_server_1 postfix/postscreen[2052208]: anon_hostname_183 [anon_ip_27]:34408 +Jun 1 15:05:42 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_208] +Jun 1 15:05:42 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_12 from unknown[anon_ip_208] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:05:48 anon_server_1 postfix/smtps/smtpd[2052313]: connect from unknown[anon_ip_210] +Jun 1 15:05:49 anon_server_1 postfix/smtps/smtpd[2052313]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_210]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 15:05:53 anon_server_1 postfix/smtps/smtpd[2052316]: connect from anon_hostname_430[anon_ip_211] +Jun 1 15:05:57 anon_server_1 postfix/smtps/smtpd[2052133]: connect from unknown[anon_ip_212] +Jun 1 15:05:57 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_212]: anon_hostname_121 anon_hostname_104 +Jun 1 15:05:57 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_212] +Jun 1 15:05:57 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_12 from unknown[anon_ip_212] anon_hostname_18=0/0 +Jun 1 15:05:58 anon_server_1 postfix/smtps/smtpd[2052313]: anon_hostname_158: unknown[anon_ip_210]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_4 +Jun 1 15:05:59 anon_server_1 postfix/smtps/smtpd[2052313]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_210] +Jun 1 15:05:59 anon_server_1 postfix/smtps/smtpd[2052313]: anon_hostname_12 from unknown[anon_ip_210] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:06:00 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_158: anon_hostname_171 anon_hostname_431non_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_213: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 15:06:00 anon_server_1 postfix/smtps/smtpd[2052133]: connect from unknown[anon_ip_213] +Jun 1 15:06:01 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_213]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 15:06:02 anon_server_1 postfix/submission/smtpd[2052363]: connect from unknown[anon_ip_50] +Jun 1 15:06:02 anon_server_1 postfix/submission/smtpd[2052363]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_50] +Jun 1 15:06:02 anon_server_1 postfix/submission/smtpd[2052363]: anon_hostname_12 from unknown[anon_ip_50] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:06:06 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_158: unknown[anon_ip_213]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 15:06:06 anon_server_1 postfix/smtps/smtpd[2052315]: connect from unknown[anon_ip_100] +Jun 1 15:06:06 anon_server_1 postfix/smtps/smtpd[2052315]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_100]: anon_hostname_121 anon_hostname_104 +Jun 1 15:06:06 anon_server_1 postfix/smtps/smtpd[2052315]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_100] +Jun 1 15:06:06 anon_server_1 postfix/smtps/smtpd[2052315]: anon_hostname_12 from unknown[anon_ip_100] anon_hostname_18=0/0 +Jun 1 15:06:07 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_213] +Jun 1 15:06:07 anon_server_1 postfix/smtps/smtpd[2052133]: anon_hostname_12 from unknown[anon_ip_213] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:06:17 anon_server_1 postfix/smtps/smtpd[2052316]: anon_hostname_175 anon_hostname_176 from anon_hostname_430[anon_ip_211]: anon_hostname_121 anon_hostname_104 +Jun 1 15:06:17 anon_server_1 postfix/smtps/smtpd[2052316]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from anon_hostname_430[anon_ip_211] +Jun 1 15:06:17 anon_server_1 postfix/smtps/smtpd[2052316]: anon_hostname_12 from anon_hostname_430[anon_ip_211] anon_hostname_18=0/0 +Jun 1 15:06:34 anon_server_1 postfix/smtps/smtpd[2052313]: connect from unknown[anon_ip_214] +Jun 1 15:06:34 anon_server_1 postfix/smtps/smtpd[2052313]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_214]: anon_hostname_121 anon_hostname_104 +Jun 1 15:06:34 anon_server_1 postfix/smtps/smtpd[2052313]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_214] +Jun 1 15:06:34 anon_server_1 postfix/smtps/smtpd[2052313]: anon_hostname_12 from unknown[anon_ip_214] anon_hostname_18=0/0 +Jun 1 15:09:54 anon_server_1 postfix/anvil[2052136]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_208) anon_hostname_35 Jun 1 15:00:34 +Jun 1 15:09:54 anon_server_1 postfix/anvil[2052136]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_208) anon_hostname_35 Jun 1 15:00:34 +Jun 1 15:09:54 anon_server_1 postfix/anvil[2052136]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 15:06:02 +Jun 1 15:14:04 anon_server_1 postfix/postscreen[2052654]: anon_hostname_1 from [anon_ip_106]:51740 to [anon_ip_2]:25 +Jun 1 15:14:04 anon_server_1 postfix/dnsblog[2052655]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:14:10 anon_server_1 postfix/postscreen[2052654]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:51740 +Jun 1 15:14:10 anon_server_1 postfix/postscreen[2052654]: anon_hostname_183 [anon_ip_106]:51740 +Jun 1 15:14:53 anon_server_1 postfix/smtps/smtpd[2052666]: connect from anon_hostname_432[anon_ip_215] +Jun 1 15:14:53 anon_server_1 postfix/smtps/smtpd[2052666]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_432[anon_ip_215]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 15:14:55 anon_server_1 postfix/smtps/smtpd[2052666]: anon_hostname_158: anon_hostname_432[anon_ip_215]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 15:14:55 anon_server_1 postfix/smtps/smtpd[2052666]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_432[anon_ip_215] +Jun 1 15:14:55 anon_server_1 postfix/smtps/smtpd[2052666]: anon_hostname_12 from anon_hostname_432[anon_ip_215] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:16:34 anon_server_1 postfix/postscreen[2052752]: anon_hostname_1 from [anon_ip_106]:36661 to [anon_ip_2]:25 +Jun 1 15:16:34 anon_server_1 postfix/dnsblog[2052754]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:16:40 anon_server_1 postfix/postscreen[2052752]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:36661 +Jun 1 15:16:40 anon_server_1 postfix/postscreen[2052752]: anon_hostname_183 [anon_ip_106]:36661 +Jun 1 15:18:15 anon_server_1 postfix/anvil[2052669]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_215) anon_hostname_35 Jun 1 15:14:53 +Jun 1 15:18:15 anon_server_1 postfix/anvil[2052669]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_215) anon_hostname_35 Jun 1 15:14:53 +Jun 1 15:18:15 anon_server_1 postfix/anvil[2052669]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 15:14:53 +Jun 1 15:20:30 anon_server_1 postfix/smtps/smtpd[2052862]: connect from anon_hostname_433[anon_ip_216] +Jun 1 15:20:32 anon_server_1 postfix/smtps/smtpd[2052862]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_433[anon_ip_216]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 15:20:39 anon_server_1 postfix/smtps/smtpd[2052862]: anon_hostname_158: anon_hostname_433[anon_ip_216]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 15:20:46 anon_server_1 postfix/smtps/smtpd[2052907]: connect from unknown[anon_ip_217] +Jun 1 15:20:49 anon_server_1 postfix/smtps/smtpd[2052907]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_217]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 15:20:59 anon_server_1 postfix/smtps/smtpd[2052907]: anon_hostname_158: unknown[anon_ip_217]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 15:24:05 anon_server_1 postfix/postscreen[2053023]: anon_hostname_1 from [anon_ip_106]:40675 to [anon_ip_2]:25 +Jun 1 15:24:05 anon_server_1 postfix/dnsblog[2053024]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:24:11 anon_server_1 postfix/postscreen[2053023]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:40675 +Jun 1 15:24:11 anon_server_1 postfix/postscreen[2053023]: anon_hostname_183 [anon_ip_106]:40675 +Jun 1 15:25:39 anon_server_1 postfix/smtps/smtpd[2052862]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_433[anon_ip_216] +Jun 1 15:25:39 anon_server_1 postfix/smtps/smtpd[2052862]: anon_hostname_12 from anon_hostname_433[anon_ip_216] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:25:59 anon_server_1 postfix/smtps/smtpd[2052907]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_217] +Jun 1 15:25:59 anon_server_1 postfix/smtps/smtpd[2052907]: anon_hostname_12 from unknown[anon_ip_217] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:26:21 anon_server_1 postfix/smtps/smtpd[2052862]: anon_hostname_158: anon_hostname_171 anon_hostname_434 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_218: anon_hostname_305 address anon_hostname_329 anon_hostname_107 anon_hostname_171 +Jun 1 15:26:21 anon_server_1 postfix/smtps/smtpd[2052862]: connect from unknown[anon_ip_218] +Jun 1 15:26:22 anon_server_1 postfix/smtps/smtpd[2052862]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_218]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 15:26:29 anon_server_1 postfix/smtps/smtpd[2052862]: anon_hostname_158: unknown[anon_ip_218]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 15:26:38 anon_server_1 postfix/smtps/smtpd[2052907]: connect from anon_hostname_435[anon_ip_219] +Jun 1 15:26:40 anon_server_1 postfix/smtps/smtpd[2052907]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_435[anon_ip_219]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 15:26:45 anon_server_1 postfix/smtps/smtpd[2052907]: anon_hostname_158: anon_hostname_435[anon_ip_219]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 15:26:45 anon_server_1 postfix/smtps/smtpd[2052907]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_435[anon_ip_219] +Jun 1 15:26:45 anon_server_1 postfix/smtps/smtpd[2052907]: anon_hostname_12 from anon_hostname_435[anon_ip_219] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:30:32 anon_server_1 postfix/anvil[2052866]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_216) anon_hostname_35 Jun 1 15:20:32 +Jun 1 15:30:32 anon_server_1 postfix/anvil[2052866]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_216) anon_hostname_35 Jun 1 15:20:32 +Jun 1 15:30:32 anon_server_1 postfix/anvil[2052866]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 3 anon_hostname_35 Jun 1 15:26:22 +Jun 1 15:31:04 anon_server_1 postfix/postscreen[2053363]: anon_hostname_1 from [anon_ip_106]:41769 to [anon_ip_2]:25 +Jun 1 15:31:04 anon_server_1 postfix/dnsblog[2053364]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:31:10 anon_server_1 postfix/postscreen[2053363]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:41769 +Jun 1 15:31:10 anon_server_1 postfix/postscreen[2053363]: anon_hostname_183 [anon_ip_106]:41769 +Jun 1 15:31:29 anon_server_1 postfix/smtps/smtpd[2052862]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_218] +Jun 1 15:31:29 anon_server_1 postfix/smtps/smtpd[2052862]: anon_hostname_12 from unknown[anon_ip_218] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:34:04 anon_server_1 postfix/postscreen[2053428]: anon_hostname_1 from [anon_ip_106]:33032 to [anon_ip_2]:25 +Jun 1 15:34:04 anon_server_1 postfix/dnsblog[2053430]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:34:10 anon_server_1 postfix/postscreen[2053428]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:33032 +Jun 1 15:34:10 anon_server_1 postfix/postscreen[2053428]: anon_hostname_183 [anon_ip_106]:33032 +Jun 1 15:35:00 anon_server_1 postfix/smtps/smtpd[2053441]: connect from unknown[anon_ip_220] +Jun 1 15:35:03 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_220]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 15:35:03 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_220] +Jun 1 15:35:03 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_12 from unknown[anon_ip_220] anon_hostname_18=0/0 +Jun 1 15:35:59 anon_server_1 postfix/smtps/smtpd[2053441]: connect from unknown[anon_ip_220] +Jun 1 15:36:00 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_220]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 15:36:00 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_220] +Jun 1 15:36:00 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_12 from unknown[anon_ip_220] anon_hostname_18=0/0 +Jun 1 15:36:00 anon_server_1 postfix/smtps/smtpd[2053441]: connect from unknown[anon_ip_220] +Jun 1 15:36:00 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_220]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 15:36:00 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_158: anon_hostname_263 anon_hostname_256 from unknown[anon_ip_220]: anon_hostname_264 / anon_hostname_265/1.1 +Jun 1 15:36:00 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_12 from unknown[anon_ip_220] unknown=0/1 anon_hostname_18=0/1 +Jun 1 15:36:01 anon_server_1 postfix/smtps/smtpd[2053441]: connect from unknown[anon_ip_220] +Jun 1 15:36:01 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_220]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 15:36:02 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_220] +Jun 1 15:36:02 anon_server_1 postfix/smtps/smtpd[2053441]: anon_hostname_12 from unknown[anon_ip_220] anon_hostname_18=0/0 +Jun 1 15:38:16 anon_server_1 postfix/smtps/smtpd[2053543]: connect from unknown[anon_ip_220] +Jun 1 15:38:16 anon_server_1 postfix/smtps/smtpd[2053543]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_220]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 15:38:17 anon_server_1 postfix/smtps/smtpd[2053543]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_220] +Jun 1 15:38:17 anon_server_1 postfix/smtps/smtpd[2053543]: anon_hostname_12 from unknown[anon_ip_220] anon_hostname_13=1 anon_hostname_18=1 +Jun 1 15:41:37 anon_server_1 postfix/anvil[2053463]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 2/60s for (465:anon_ip_220) anon_hostname_35 Jun 1 15:36:01 +Jun 1 15:41:37 anon_server_1 postfix/anvil[2053463]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_220) anon_hostname_35 Jun 1 15:36:00 +Jun 1 15:41:37 anon_server_1 postfix/anvil[2053463]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 15:36:00 +Jun 1 15:45:43 anon_server_1 postfix/smtps/smtpd[2053768]: connect from unknown[anon_ip_221] +Jun 1 15:45:47 anon_server_1 postfix/smtps/smtpd[2053768]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_221]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 15:45:51 anon_server_1 postfix/smtps/smtpd[2053765]: connect from unknown[anon_ip_222] +Jun 1 15:45:51 anon_server_1 postfix/smtps/smtpd[2053765]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_222]: anon_hostname_121 anon_hostname_104 +Jun 1 15:45:51 anon_server_1 postfix/smtps/smtpd[2053765]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_222] +Jun 1 15:45:51 anon_server_1 postfix/smtps/smtpd[2053765]: anon_hostname_12 from unknown[anon_ip_222] anon_hostname_18=0/0 +Jun 1 15:45:58 anon_server_1 postfix/smtps/smtpd[2053768]: anon_hostname_158: unknown[anon_ip_221]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 15:46:06 anon_server_1 postfix/smtps/smtpd[2053765]: connect from unknown[anon_ip_195] +Jun 1 15:46:08 anon_server_1 postfix/smtps/smtpd[2053765]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_195]: anon_hostname_121 anon_hostname_104 +Jun 1 15:46:08 anon_server_1 postfix/smtps/smtpd[2053765]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_195] +Jun 1 15:46:08 anon_server_1 postfix/smtps/smtpd[2053765]: anon_hostname_12 from unknown[anon_ip_195] anon_hostname_18=0/0 +Jun 1 15:50:58 anon_server_1 postfix/smtps/smtpd[2053768]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_221] +Jun 1 15:50:58 anon_server_1 postfix/smtps/smtpd[2053768]: anon_hostname_12 from unknown[anon_ip_221] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 15:51:05 anon_server_1 postfix/postscreen[2053939]: anon_hostname_1 from [anon_ip_106]:60642 to [anon_ip_2]:25 +Jun 1 15:51:05 anon_server_1 postfix/dnsblog[2053941]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:51:11 anon_server_1 postfix/postscreen[2053939]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:60642 +Jun 1 15:51:11 anon_server_1 postfix/postscreen[2053939]: anon_hostname_183 [anon_ip_106]:60642 +Jun 1 15:54:18 anon_server_1 postfix/anvil[2053770]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_221) anon_hostname_35 Jun 1 15:45:47 +Jun 1 15:54:18 anon_server_1 postfix/anvil[2053770]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_221) anon_hostname_35 Jun 1 15:45:47 +Jun 1 15:54:18 anon_server_1 postfix/anvil[2053770]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 15:45:47 +Jun 1 15:55:47 anon_server_1 postfix/postscreen[2054040]: anon_hostname_1 from [anon_ip_106]:49506 to [anon_ip_2]:25 +Jun 1 15:55:47 anon_server_1 postfix/dnsblog[2054041]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 15:55:53 anon_server_1 postfix/postscreen[2054040]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:49506 +Jun 1 15:55:53 anon_server_1 postfix/postscreen[2054040]: anon_hostname_183 [anon_ip_106]:49506 +Jun 1 16:04:07 anon_server_1 postfix/postscreen[2054274]: anon_hostname_1 from [anon_ip_106]:48173 to [anon_ip_2]:25 +Jun 1 16:04:07 anon_server_1 postfix/dnsblog[2054275]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 16:04:13 anon_server_1 postfix/postscreen[2054274]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:48173 +Jun 1 16:04:13 anon_server_1 postfix/postscreen[2054274]: anon_hostname_183 [anon_ip_106]:48173 +Jun 1 16:08:29 anon_server_1 postfix/smtps/smtpd[2054373]: connect from anon_hostname_436[anon_ip_223] +Jun 1 16:08:30 anon_server_1 postfix/smtps/smtpd[2054373]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_436[anon_ip_223]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 16:08:32 anon_server_1 postfix/smtps/smtpd[2054373]: anon_hostname_158: anon_hostname_436[anon_ip_223]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 16:08:32 anon_server_1 postfix/smtps/smtpd[2054373]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_436[anon_ip_223] +Jun 1 16:08:32 anon_server_1 postfix/smtps/smtpd[2054373]: anon_hostname_12 from anon_hostname_436[anon_ip_223] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 16:08:32 anon_server_1 postfix/smtps/smtpd[2054373]: connect from unknown[anon_ip_224] +Jun 1 16:08:33 anon_server_1 postfix/smtps/smtpd[2054373]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_224]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 16:08:36 anon_server_1 postfix/smtps/smtpd[2054373]: anon_hostname_158: unknown[anon_ip_224]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 16:08:36 anon_server_1 postfix/smtps/smtpd[2054373]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_224] +Jun 1 16:08:36 anon_server_1 postfix/smtps/smtpd[2054373]: anon_hostname_12 from unknown[anon_ip_224] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 16:10:07 anon_server_1 postfix/postscreen[2054544]: anon_hostname_1 from [anon_ip_106]:53657 to [anon_ip_2]:25 +Jun 1 16:10:07 anon_server_1 postfix/dnsblog[2054546]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 16:10:13 anon_server_1 postfix/postscreen[2054544]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:53657 +Jun 1 16:10:13 anon_server_1 postfix/postscreen[2054544]: anon_hostname_183 [anon_ip_106]:53657 +Jun 1 16:11:56 anon_server_1 postfix/anvil[2054376]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_223) anon_hostname_35 Jun 1 16:08:30 +Jun 1 16:11:56 anon_server_1 postfix/anvil[2054376]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_223) anon_hostname_35 Jun 1 16:08:30 +Jun 1 16:11:56 anon_server_1 postfix/anvil[2054376]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 16:08:33 +Jun 1 16:13:04 anon_server_1 postfix/postscreen[2054618]: anon_hostname_1 from [anon_ip_27]:51078 to [anon_ip_2]:25 +Jun 1 16:13:04 anon_server_1 postfix/dnsblog[2054620]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 16:13:10 anon_server_1 postfix/postscreen[2054618]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:51078 +Jun 1 16:13:10 anon_server_1 postfix/postscreen[2054618]: anon_hostname_183 [anon_ip_27]:51078 +Jun 1 16:19:05 anon_server_1 postfix/postscreen[2054760]: anon_hostname_1 from [anon_ip_106]:50961 to [anon_ip_2]:25 +Jun 1 16:19:05 anon_server_1 postfix/dnsblog[2054761]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 16:19:11 anon_server_1 postfix/postscreen[2054760]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:50961 +Jun 1 16:19:11 anon_server_1 postfix/postscreen[2054760]: anon_hostname_183 [anon_ip_106]:50961 +Jun 1 16:25:05 anon_server_1 postfix/postscreen[2054897]: anon_hostname_1 from [anon_ip_106]:54029 to [anon_ip_2]:25 +Jun 1 16:25:05 anon_server_1 postfix/dnsblog[2054898]: anon_hostname_178 anon_ip_106 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 16:25:11 anon_server_1 postfix/postscreen[2054897]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_106]:54029 +Jun 1 16:25:11 anon_server_1 postfix/postscreen[2054897]: anon_hostname_183 [anon_ip_106]:54029 +Jun 1 16:31:47 anon_server_1 postfix/postscreen[2055053]: anon_hostname_1 from [anon_ip_225]:35850 to [anon_ip_2]:25 +Jun 1 16:31:53 anon_server_1 postfix/postscreen[2055053]: anon_hostname_2 anon_hostname_3 [anon_ip_225]:35850 +Jun 1 16:31:53 anon_server_1 postfix/smtpd[2055057]: connect from unknown[anon_ip_225] +Jun 1 16:31:53 anon_server_1 postfix/smtpd[2055057]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_225] +Jun 1 16:31:53 anon_server_1 postfix/smtpd[2055057]: anon_hostname_12 from unknown[anon_ip_225] anon_hostname_18=0/0 +Jun 1 16:35:13 anon_server_1 postfix/anvil[2055059]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_139:anon_ip_225) anon_hostname_35 Jun 1 16:31:53 +Jun 1 16:35:13 anon_server_1 postfix/anvil[2055059]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_139:anon_ip_225) anon_hostname_35 Jun 1 16:31:53 +Jun 1 16:35:13 anon_server_1 postfix/anvil[2055059]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 16:31:53 +Jun 1 16:49:36 anon_server_1 postfix/smtps/smtpd[2055541]: connect from anon_hostname_437[anon_ip_226] +Jun 1 16:49:36 anon_server_1 postfix/smtps/smtpd[2055541]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_437[anon_ip_226]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 16:49:41 anon_server_1 postfix/smtps/smtpd[2055541]: anon_hostname_158: anon_hostname_437[anon_ip_226]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 16:49:41 anon_server_1 postfix/smtps/smtpd[2055541]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_437[anon_ip_226] +Jun 1 16:49:41 anon_server_1 postfix/smtps/smtpd[2055541]: anon_hostname_12 from anon_hostname_437[anon_ip_226] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 16:49:45 anon_server_1 postfix/smtps/smtpd[2055541]: anon_hostname_158: anon_hostname_171 anon_hostname_438 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_227: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 16:49:45 anon_server_1 postfix/smtps/smtpd[2055541]: connect from unknown[anon_ip_227] +Jun 1 16:49:46 anon_server_1 postfix/smtps/smtpd[2055541]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_227]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 16:49:52 anon_server_1 postfix/smtps/smtpd[2055541]: anon_hostname_158: unknown[anon_ip_227]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 16:54:52 anon_server_1 postfix/smtps/smtpd[2055541]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_227] +Jun 1 16:54:52 anon_server_1 postfix/smtps/smtpd[2055541]: anon_hostname_12 from unknown[anon_ip_227] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 16:55:18 anon_server_1 postfix/postscreen[2055752]: anon_hostname_1 from [anon_ip_228]:22923 to [anon_ip_2]:25 +Jun 1 16:55:24 anon_server_1 postfix/postscreen[2055752]: anon_hostname_2 anon_hostname_439 [anon_ip_228]:22923 +Jun 1 16:55:25 anon_server_1 postfix/smtpd[2055756]: connect from anon_hostname_440[anon_ip_228] +Jun 1 16:55:26 anon_server_1 postfix/smtpd[2055756]: NOQUEUE: reject: RCPT from anon_hostname_440[anon_ip_228]: 550 5.1.1 : anon_hostname_444 address anon_hostname_323: anon_hostname_304 unknown; from= to= proto=anon_hostname_45 helo= +Jun 1 16:55:26 anon_server_1 postfix/smtpd[2055756]: anon_hostname_12 from anon_hostname_440[anon_ip_228] anon_hostname_13=1 anon_hostname_14=1 anon_hostname_15=0/1 anon_hostname_17=1 anon_hostname_18=3/4 +Jun 1 16:58:46 anon_server_1 postfix/anvil[2055544]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_226) anon_hostname_35 Jun 1 16:49:36 +Jun 1 16:58:46 anon_server_1 postfix/anvil[2055544]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_226) anon_hostname_35 Jun 1 16:49:36 +Jun 1 16:58:46 anon_server_1 postfix/anvil[2055544]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 16:49:46 +Jun 1 17:00:54 anon_server_1 postfix/postscreen[2055892]: anon_hostname_1 from [anon_ip_43]:33090 to [anon_ip_2]:25 +Jun 1 17:00:54 anon_server_1 postfix/dnsblog[2055894]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 17:00:54 anon_server_1 postfix/dnsblog[2055894]: anon_hostname_178 anon_ip_43 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 17:01:00 anon_server_1 postfix/postscreen[2055892]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_43]:33090 +Jun 1 17:01:00 anon_server_1 postfix/postscreen[2055892]: anon_hostname_183 [anon_ip_43]:33090 +Jun 1 17:02:32 anon_server_1 postfix/smtps/smtpd[2055954]: connect from unknown[anon_ip_229] +Jun 1 17:02:35 anon_server_1 postfix/smtps/smtpd[2055954]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_229]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 17:02:42 anon_server_1 postfix/smtps/smtpd[2055954]: anon_hostname_158: unknown[anon_ip_229]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 17:03:02 anon_server_1 postfix/smtps/smtpd[2055992]: connect from unknown[anon_ip_230] +Jun 1 17:03:02 anon_server_1 postfix/smtps/smtpd[2055992]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_230]: anon_hostname_121 anon_hostname_104 +Jun 1 17:03:02 anon_server_1 postfix/smtps/smtpd[2055992]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_230] +Jun 1 17:03:02 anon_server_1 postfix/smtps/smtpd[2055992]: anon_hostname_12 from unknown[anon_ip_230] anon_hostname_18=0/0 +Jun 1 17:07:42 anon_server_1 postfix/smtps/smtpd[2055954]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_229] +Jun 1 17:07:42 anon_server_1 postfix/smtps/smtpd[2055954]: anon_hostname_12 from unknown[anon_ip_229] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 17:11:02 anon_server_1 postfix/anvil[2055957]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_229) anon_hostname_35 Jun 1 17:02:35 +Jun 1 17:11:02 anon_server_1 postfix/anvil[2055957]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_229) anon_hostname_35 Jun 1 17:02:35 +Jun 1 17:11:02 anon_server_1 postfix/anvil[2055957]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 17:02:35 +Jun 1 17:13:05 anon_server_1 postfix/smtps/smtpd[2056298]: connect from unknown[anon_ip_231] +Jun 1 17:13:06 anon_server_1 postfix/smtps/smtpd[2056298]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_231]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 17:13:06 anon_server_1 postfix/smtps/smtpd[2056281]: connect from unknown[anon_ip_232] +Jun 1 17:13:06 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_232]: anon_hostname_121 anon_hostname_104 +Jun 1 17:13:06 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_232] +Jun 1 17:13:06 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_12 from unknown[anon_ip_232] anon_hostname_18=0/0 +Jun 1 17:13:11 anon_server_1 postfix/smtps/smtpd[2056298]: anon_hostname_158: unknown[anon_ip_231]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 17:13:32 anon_server_1 postfix/smtps/smtpd[2056281]: connect from unknown[anon_ip_233] +Jun 1 17:13:32 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_233]: anon_hostname_121 anon_hostname_104 +Jun 1 17:13:32 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_233] +Jun 1 17:13:32 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_12 from unknown[anon_ip_233] anon_hostname_18=0/0 +Jun 1 17:13:58 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_158: anon_hostname_171 anon_hostname_426 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_234: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 17:13:58 anon_server_1 postfix/smtps/smtpd[2056281]: connect from unknown[anon_ip_234] +Jun 1 17:13:58 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_234]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_445 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 17:13:59 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_234] +Jun 1 17:13:59 anon_server_1 postfix/smtps/smtpd[2056281]: anon_hostname_12 from unknown[anon_ip_234] anon_hostname_13=0/1 anon_hostname_18=0/1 +Jun 1 17:18:11 anon_server_1 postfix/smtps/smtpd[2056298]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_231] +Jun 1 17:18:11 anon_server_1 postfix/smtps/smtpd[2056298]: anon_hostname_12 from unknown[anon_ip_231] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 17:20:24 anon_server_1 postfix/smtps/smtpd[2056510]: anon_hostname_158: anon_hostname_171 anon_hostname_446 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_235: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 17:20:24 anon_server_1 postfix/smtps/smtpd[2056510]: connect from unknown[anon_ip_235] +Jun 1 17:20:25 anon_server_1 postfix/smtps/smtpd[2056510]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_235]: anon_hostname_121 anon_hostname_104 +Jun 1 17:20:25 anon_server_1 postfix/smtps/smtpd[2056510]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_235] +Jun 1 17:20:25 anon_server_1 postfix/smtps/smtpd[2056510]: anon_hostname_12 from unknown[anon_ip_235] anon_hostname_18=0/0 +Jun 1 17:23:04 anon_server_1 postfix/postscreen[2056579]: anon_hostname_1 from [anon_ip_27]:42556 to [anon_ip_2]:25 +Jun 1 17:23:04 anon_server_1 postfix/dnsblog[2056581]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 17:23:06 anon_server_1 postfix/anvil[2056300]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_231) anon_hostname_35 Jun 1 17:13:06 +Jun 1 17:23:06 anon_server_1 postfix/anvil[2056300]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_231) anon_hostname_35 Jun 1 17:13:06 +Jun 1 17:23:06 anon_server_1 postfix/anvil[2056300]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 17:13:58 +Jun 1 17:23:10 anon_server_1 postfix/postscreen[2056579]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:42556 +Jun 1 17:23:10 anon_server_1 postfix/postscreen[2056579]: anon_hostname_183 [anon_ip_27]:42556 +Jun 1 17:27:28 anon_server_1 postfix/smtps/smtpd[2056680]: connect from unknown[anon_ip_236] +Jun 1 17:27:30 anon_server_1 postfix/smtps/smtpd[2056680]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_236]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 17:27:41 anon_server_1 postfix/smtps/smtpd[2056680]: anon_hostname_158: unknown[anon_ip_236]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 17:28:03 anon_server_1 postfix/smtps/smtpd[2056722]: connect from unknown[anon_ip_76] +Jun 1 17:28:03 anon_server_1 postfix/smtps/smtpd[2056722]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_76]: anon_hostname_121 anon_hostname_104 +Jun 1 17:28:03 anon_server_1 postfix/smtps/smtpd[2056722]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_76] +Jun 1 17:28:03 anon_server_1 postfix/smtps/smtpd[2056722]: anon_hostname_12 from unknown[anon_ip_76] anon_hostname_18=0/0 +Jun 1 17:32:41 anon_server_1 postfix/smtps/smtpd[2056680]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_236] +Jun 1 17:32:41 anon_server_1 postfix/smtps/smtpd[2056680]: anon_hostname_12 from unknown[anon_ip_236] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 17:35:17 anon_server_1 postfix/smtps/smtpd[2056903]: connect from unknown[anon_ip_237] +Jun 1 17:35:20 anon_server_1 postfix/smtps/smtpd[2056903]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_237]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 17:35:25 anon_server_1 postfix/smtps/smtpd[2056903]: anon_hostname_158: unknown[anon_ip_237]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 17:35:31 anon_server_1 postfix/smtps/smtpd[2056942]: connect from unknown[anon_ip_238] +Jun 1 17:35:32 anon_server_1 postfix/smtps/smtpd[2056942]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_238]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 17:35:43 anon_server_1 postfix/smtps/smtpd[2056942]: anon_hostname_158: unknown[anon_ip_238]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 17:37:30 anon_server_1 postfix/anvil[2056683]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_236) anon_hostname_35 Jun 1 17:27:30 +Jun 1 17:37:30 anon_server_1 postfix/anvil[2056683]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_236) anon_hostname_35 Jun 1 17:27:30 +Jun 1 17:37:30 anon_server_1 postfix/anvil[2056683]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 17:35:32 +Jun 1 17:40:25 anon_server_1 postfix/smtps/smtpd[2056903]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_237] +Jun 1 17:40:25 anon_server_1 postfix/smtps/smtpd[2056903]: anon_hostname_12 from unknown[anon_ip_237] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 17:40:43 anon_server_1 postfix/smtps/smtpd[2056942]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_238] +Jun 1 17:40:43 anon_server_1 postfix/smtps/smtpd[2056942]: anon_hostname_12 from unknown[anon_ip_238] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 17:48:50 anon_server_1 postfix/smtps/smtpd[2057341]: connect from unknown[anon_ip_239] +Jun 1 17:48:54 anon_server_1 postfix/smtps/smtpd[2057341]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_239]: anon_hostname_236 anon_hostname_237 anon_hostname_180 anon_hostname_238 +Jun 1 17:48:54 anon_server_1 postfix/smtps/smtpd[2057341]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_239] +Jun 1 17:48:54 anon_server_1 postfix/smtps/smtpd[2057341]: anon_hostname_12 from unknown[anon_ip_239] anon_hostname_18=0/0 +Jun 1 17:49:52 anon_server_1 postfix/smtps/smtpd[2057341]: connect from unknown[anon_ip_239] +Jun 1 17:49:52 anon_server_1 postfix/smtps/smtpd[2057341]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_239]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 17:49:52 anon_server_1 postfix/smtps/smtpd[2057341]: anon_hostname_158: anon_hostname_263 anon_hostname_256 from unknown[anon_ip_239]: anon_hostname_264 / anon_hostname_265/1.1 +Jun 1 17:49:52 anon_server_1 postfix/smtps/smtpd[2057341]: anon_hostname_12 from unknown[anon_ip_239] unknown=0/1 anon_hostname_18=0/1 +Jun 1 17:49:52 anon_server_1 postfix/smtps/smtpd[2057341]: connect from unknown[anon_ip_239] +Jun 1 17:49:52 anon_server_1 postfix/smtps/smtpd[2057341]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_239]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_109 (256/256 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 17:49:52 anon_server_1 postfix/smtps/smtpd[2057341]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_239] +Jun 1 17:49:52 anon_server_1 postfix/smtps/smtpd[2057341]: anon_hostname_12 from unknown[anon_ip_239] anon_hostname_18=0/0 +Jun 1 17:53:13 anon_server_1 postfix/anvil[2057344]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 2/60s for (465:anon_ip_239) anon_hostname_35 Jun 1 17:49:52 +Jun 1 17:53:13 anon_server_1 postfix/anvil[2057344]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_239) anon_hostname_35 Jun 1 17:49:52 +Jun 1 17:53:13 anon_server_1 postfix/anvil[2057344]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 17:49:52 +Jun 1 17:54:15 anon_server_1 postfix/smtps/smtpd[2057476]: connect from anon_hostname_447[anon_ip_240] +Jun 1 17:54:15 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_447[anon_ip_240]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 17:54:18 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_158: anon_hostname_447[anon_ip_240]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_11 +Jun 1 17:54:18 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_447[anon_ip_240] +Jun 1 17:54:18 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_12 from anon_hostname_447[anon_ip_240] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 17:54:19 anon_server_1 postfix/smtps/smtpd[2057476]: connect from anon_hostname_448[anon_ip_241] +Jun 1 17:54:19 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_448[anon_ip_241]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 17:54:22 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_158: anon_hostname_448[anon_ip_241]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_11 +Jun 1 17:54:22 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_448[anon_ip_241] +Jun 1 17:54:22 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_12 from anon_hostname_448[anon_ip_241] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 17:54:23 anon_server_1 postfix/smtps/smtpd[2057476]: connect from anon_hostname_449[anon_ip_242] +Jun 1 17:54:23 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_449[anon_ip_242]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 17:54:26 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_158: anon_hostname_449[anon_ip_242]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_11 +Jun 1 17:54:26 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_449[anon_ip_242] +Jun 1 17:54:26 anon_server_1 postfix/smtps/smtpd[2057476]: anon_hostname_12 from anon_hostname_449[anon_ip_242] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 17:57:46 anon_server_1 postfix/anvil[2057479]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_240) anon_hostname_35 Jun 1 17:54:15 +Jun 1 17:57:46 anon_server_1 postfix/anvil[2057479]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_240) anon_hostname_35 Jun 1 17:54:15 +Jun 1 17:57:46 anon_server_1 postfix/anvil[2057479]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 3 anon_hostname_35 Jun 1 17:54:23 +Jun 1 18:05:45 anon_server_1 postfix/submission/smtpd[2057880]: connect from unknown[anon_ip_243] +Jun 1 18:05:45 anon_server_1 postfix/submission/smtpd[2057880]: anon_hostname_255 anon_hostname_256 anon_hostname_257 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_243]: \r\n\r\n +Jun 1 18:05:49 anon_server_1 postfix/submission/smtpd[2057880]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_243] +Jun 1 18:05:49 anon_server_1 postfix/submission/smtpd[2057880]: anon_hostname_12 from unknown[anon_ip_243] anon_hostname_18=0/0 +Jun 1 18:06:06 anon_server_1 postfix/smtps/smtpd[2057898]: connect from unknown[anon_ip_244] +Jun 1 18:06:08 anon_server_1 postfix/smtps/smtpd[2057898]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_244]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 18:06:16 anon_server_1 postfix/smtps/smtpd[2057898]: anon_hostname_158: unknown[anon_ip_244]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 18:06:21 anon_server_1 postfix/smtps/smtpd[2057937]: connect from anon_hostname_450[anon_ip_245] +Jun 1 18:06:22 anon_server_1 postfix/smtps/smtpd[2057937]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_450[anon_ip_245]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 18:06:29 anon_server_1 postfix/smtps/smtpd[2057937]: anon_hostname_158: anon_hostname_450[anon_ip_245]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 18:06:55 anon_server_1 postfix/submission/smtpd[2057880]: connect from unknown[anon_ip_243] +Jun 1 18:06:55 anon_server_1 postfix/submission/smtpd[2057880]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_243] +Jun 1 18:06:55 anon_server_1 postfix/submission/smtpd[2057880]: anon_hostname_12 from unknown[anon_ip_243] anon_hostname_13=1 anon_hostname_18=1 +Jun 1 18:11:16 anon_server_1 postfix/smtps/smtpd[2057898]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_244] +Jun 1 18:11:16 anon_server_1 postfix/smtps/smtpd[2057898]: anon_hostname_12 from unknown[anon_ip_244] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 18:11:29 anon_server_1 postfix/smtps/smtpd[2057937]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_450[anon_ip_245] +Jun 1 18:11:29 anon_server_1 postfix/smtps/smtpd[2057937]: anon_hostname_12 from anon_hostname_450[anon_ip_245] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 18:13:03 anon_server_1 postfix/submission/smtpd[2058188]: connect from unknown[anon_ip_50] +Jun 1 18:13:03 anon_server_1 postfix/submission/smtpd[2058188]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_50] +Jun 1 18:13:03 anon_server_1 postfix/submission/smtpd[2058188]: anon_hostname_12 from unknown[anon_ip_50] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 18:15:45 anon_server_1 postfix/anvil[2057882]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_259:anon_ip_243) anon_hostname_35 Jun 1 18:05:45 +Jun 1 18:15:45 anon_server_1 postfix/anvil[2057882]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_259:anon_ip_243) anon_hostname_35 Jun 1 18:05:45 +Jun 1 18:15:45 anon_server_1 postfix/anvil[2057882]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 3 anon_hostname_35 Jun 1 18:06:22 +Jun 1 18:19:00 anon_server_1 postfix/smtps/smtpd[2058318]: connect from unknown[anon_ip_205] +Jun 1 18:19:18 anon_server_1 postfix/smtps/smtpd[2058318]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_205]: anon_hostname_121 anon_hostname_104 +Jun 1 18:19:18 anon_server_1 postfix/smtps/smtpd[2058318]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_205] +Jun 1 18:19:18 anon_server_1 postfix/smtps/smtpd[2058318]: anon_hostname_12 from unknown[anon_ip_205] anon_hostname_18=0/0 +Jun 1 18:19:23 anon_server_1 postfix/smtps/smtpd[2058318]: connect from unknown[anon_ip_246] +Jun 1 18:19:53 anon_server_1 postfix/smtps/smtpd[2058318]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_246]: anon_hostname_121 anon_hostname_104 +Jun 1 18:19:53 anon_server_1 postfix/smtps/smtpd[2058318]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_246] +Jun 1 18:19:53 anon_server_1 postfix/smtps/smtpd[2058318]: anon_hostname_12 from unknown[anon_ip_246] anon_hostname_18=0/0 +Jun 1 18:20:10 anon_server_1 postfix/smtps/smtpd[2058318]: connect from unknown[anon_ip_247] +Jun 1 18:20:43 anon_server_1 postfix/smtps/smtpd[2058318]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_247]: anon_hostname_121 anon_hostname_104 +Jun 1 18:20:43 anon_server_1 postfix/smtps/smtpd[2058318]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_247] +Jun 1 18:20:43 anon_server_1 postfix/smtps/smtpd[2058318]: anon_hostname_12 from unknown[anon_ip_247] anon_hostname_18=0/0 +Jun 1 18:31:25 anon_server_1 postfix/smtps/smtpd[2058624]: connect from anon_hostname_451[anon_ip_248] +Jun 1 18:31:26 anon_server_1 postfix/smtps/smtpd[2058624]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_451[anon_ip_248]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 18:31:32 anon_server_1 postfix/smtps/smtpd[2058624]: anon_hostname_158: anon_hostname_451[anon_ip_248]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 18:31:32 anon_server_1 postfix/smtps/smtpd[2058624]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_451[anon_ip_248] +Jun 1 18:31:32 anon_server_1 postfix/smtps/smtpd[2058624]: anon_hostname_12 from anon_hostname_451[anon_ip_248] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 18:31:44 anon_server_1 postfix/smtps/smtpd[2058624]: anon_hostname_158: anon_hostname_171 anon_hostname_452on_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_250: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 18:31:44 anon_server_1 postfix/smtps/smtpd[2058624]: connect from unknown[anon_ip_250] +Jun 1 18:31:45 anon_server_1 postfix/smtps/smtpd[2058624]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_250]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 18:31:50 anon_server_1 postfix/smtps/smtpd[2058624]: anon_hostname_158: unknown[anon_ip_250]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 18:31:50 anon_server_1 postfix/smtps/smtpd[2058624]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_250] +Jun 1 18:31:50 anon_server_1 postfix/smtps/smtpd[2058624]: anon_hostname_12 from unknown[anon_ip_250] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 18:33:04 anon_server_1 postfix/postscreen[2058740]: anon_hostname_1 from [anon_ip_27]:34162 to [anon_ip_2]:25 +Jun 1 18:33:04 anon_server_1 postfix/dnsblog[2058742]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 18:33:10 anon_server_1 postfix/postscreen[2058740]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:34162 +Jun 1 18:33:10 anon_server_1 postfix/postscreen[2058740]: anon_hostname_183 [anon_ip_27]:34162 +Jun 1 18:34:58 anon_server_1 postfix/postscreen[2058772]: anon_hostname_1 from [anon_ip_251]:52275 to [anon_ip_2]:25 +Jun 1 18:34:58 anon_server_1 postfix/dnsblog[2058774]: anon_hostname_178 anon_ip_251 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 18:34:58 anon_server_1 postfix/dnsblog[2058774]: anon_hostname_178 anon_ip_251 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 18:35:04 anon_server_1 postfix/postscreen[2058772]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_251]:52275 +Jun 1 18:35:04 anon_server_1 postfix/postscreen[2058772]: anon_hostname_183 [anon_ip_251]:52275 +Jun 1 18:35:10 anon_server_1 postfix/anvil[2058627]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_248) anon_hostname_35 Jun 1 18:31:26 +Jun 1 18:35:10 anon_server_1 postfix/anvil[2058627]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_248) anon_hostname_35 Jun 1 18:31:26 +Jun 1 18:35:10 anon_server_1 postfix/anvil[2058627]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 18:31:44 +Jun 1 18:35:17 anon_server_1 postfix/smtps/smtpd[2058799]: connect from anon_hostname_453[anon_ip_252] +Jun 1 18:35:17 anon_server_1 postfix/smtps/smtpd[2058799]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_453[anon_ip_252]: anon_hostname_106.3 anon_hostname_107 anon_hostname_108 anon_hostname_205 (128/128 anon_hostname_110) anon_hostname_111 anon_hostname_206 anon_hostname_114 anon_hostname_115 (2048 anon_hostname_110) anon_hostname_116 anon_hostname_117 +Jun 1 18:35:20 anon_server_1 postfix/smtps/smtpd[2058799]: anon_hostname_158: anon_hostname_453[anon_ip_252]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 18:39:34 anon_server_1 postfix/smtps/smtpd[2058993]: connect from unknown[anon_ip_253] +Jun 1 18:39:35 anon_server_1 postfix/smtps/smtpd[2058993]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_253]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 18:39:42 anon_server_1 postfix/smtps/smtpd[2058993]: anon_hostname_158: unknown[anon_ip_253]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 18:40:20 anon_server_1 postfix/smtps/smtpd[2058799]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_453[anon_ip_252] +Jun 1 18:40:20 anon_server_1 postfix/smtps/smtpd[2058799]: anon_hostname_12 from anon_hostname_453[anon_ip_252] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 18:44:42 anon_server_1 postfix/smtps/smtpd[2058993]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_253] +Jun 1 18:44:42 anon_server_1 postfix/smtps/smtpd[2058993]: anon_hostname_12 from unknown[anon_ip_253] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 18:45:17 anon_server_1 postfix/anvil[2058801]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_252) anon_hostname_35 Jun 1 18:35:17 +Jun 1 18:45:17 anon_server_1 postfix/anvil[2058801]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_252) anon_hostname_35 Jun 1 18:35:17 +Jun 1 18:45:17 anon_server_1 postfix/anvil[2058801]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 18:39:35 +Jun 1 18:49:07 anon_server_1 postfix/smtps/smtpd[2059244]: connect from unknown[anon_ip_254] +Jun 1 18:49:24 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_254]: anon_hostname_121 anon_hostname_104 +Jun 1 18:49:24 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_254] +Jun 1 18:49:24 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_12 from unknown[anon_ip_254] anon_hostname_18=0/0 +Jun 1 18:49:25 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_158: anon_hostname_171 anon_hostname_454 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_255: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 18:49:25 anon_server_1 postfix/smtps/smtpd[2059244]: connect from unknown[anon_ip_255] +Jun 1 18:49:56 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_255]: anon_hostname_121 anon_hostname_104 +Jun 1 18:49:56 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_255] +Jun 1 18:49:56 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_12 from unknown[anon_ip_255] anon_hostname_18=0/0 +Jun 1 18:50:02 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_158: anon_hostname_171 anon_hostname_455 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_256: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 18:50:02 anon_server_1 postfix/smtps/smtpd[2059244]: connect from unknown[anon_ip_256] +Jun 1 18:50:33 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_256]: anon_hostname_121 anon_hostname_104 +Jun 1 18:50:33 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_256] +Jun 1 18:50:33 anon_server_1 postfix/smtps/smtpd[2059244]: anon_hostname_12 from unknown[anon_ip_256] anon_hostname_18=0/0 +Jun 1 18:56:53 anon_server_1 postfix/postscreen[2059442]: anon_hostname_1 from [anon_ip_257]:40913 to [anon_ip_2]:25 +Jun 1 18:56:53 anon_server_1 postfix/dnsblog[2059444]: anon_hostname_178 anon_ip_257 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 18:56:53 anon_server_1 postfix/dnsblog[2059444]: anon_hostname_178 anon_ip_257 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_18 +Jun 1 18:56:53 anon_server_1 postfix/dnsblog[2059444]: anon_hostname_178 anon_ip_257 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 18:56:53 anon_server_1 postfix/dnsblog[2059443]: anon_hostname_178 anon_ip_257 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_361 anon_hostname_79 anon_ip_18 +Jun 1 18:56:59 anon_server_1 postfix/postscreen[2059442]: anon_hostname_189 anon_hostname_190 5 for [anon_ip_257]:40913 +Jun 1 18:56:59 anon_server_1 postfix/postscreen[2059442]: anon_hostname_183 [anon_ip_257]:40913 +Jun 1 19:09:02 anon_server_1 postfix/smtps/smtpd[2059741]: connect from unknown[anon_ip_258] +Jun 1 19:09:03 anon_server_1 postfix/smtps/smtpd[2059741]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_258]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 19:09:10 anon_server_1 postfix/smtps/smtpd[2059741]: anon_hostname_158: unknown[anon_ip_258]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 19:09:15 anon_server_1 postfix/smtps/smtpd[2059857]: connect from anon_hostname_456[anon_ip_259] +Jun 1 19:09:16 anon_server_1 postfix/smtps/smtpd[2059857]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_456[anon_ip_259]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 19:09:22 anon_server_1 postfix/smtps/smtpd[2059857]: anon_hostname_158: anon_hostname_456[anon_ip_259]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_9 +Jun 1 19:09:22 anon_server_1 postfix/smtps/smtpd[2059857]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_456[anon_ip_259] +Jun 1 19:09:22 anon_server_1 postfix/smtps/smtpd[2059857]: anon_hostname_12 from anon_hostname_456[anon_ip_259] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 19:14:10 anon_server_1 postfix/smtps/smtpd[2059741]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_258] +Jun 1 19:14:10 anon_server_1 postfix/smtps/smtpd[2059741]: anon_hostname_12 from unknown[anon_ip_258] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 19:17:30 anon_server_1 postfix/anvil[2059815]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_258) anon_hostname_35 Jun 1 19:09:03 +Jun 1 19:17:30 anon_server_1 postfix/anvil[2059815]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_258) anon_hostname_35 Jun 1 19:09:03 +Jun 1 19:17:30 anon_server_1 postfix/anvil[2059815]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 19:09:16 +Jun 1 19:18:45 anon_server_1 postfix/smtps/smtpd[2060101]: connect from unknown[anon_ip_260] +Jun 1 19:18:47 anon_server_1 postfix/smtps/smtpd[2060101]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_260]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 19:18:54 anon_server_1 postfix/smtps/smtpd[2060101]: anon_hostname_158: unknown[anon_ip_260]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 19:18:55 anon_server_1 postfix/smtps/smtpd[2060101]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_260] +Jun 1 19:18:55 anon_server_1 postfix/smtps/smtpd[2060101]: anon_hostname_12 from unknown[anon_ip_260] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 19:18:57 anon_server_1 postfix/smtps/smtpd[2060101]: anon_hostname_158: anon_hostname_171 anon_hostname_457n_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_262: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 19:18:57 anon_server_1 postfix/smtps/smtpd[2060101]: connect from unknown[anon_ip_262] +Jun 1 19:18:57 anon_server_1 postfix/smtps/smtpd[2060101]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_262]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 19:19:03 anon_server_1 postfix/smtps/smtpd[2060101]: anon_hostname_158: unknown[anon_ip_262]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_12 +Jun 1 19:22:57 anon_server_1 postfix/smtps/smtpd[2060278]: anon_hostname_158: anon_hostname_171 anon_hostname_458 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_263: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 19:22:57 anon_server_1 postfix/smtps/smtpd[2060278]: connect from unknown[anon_ip_263] +Jun 1 19:22:58 anon_server_1 postfix/smtps/smtpd[2060278]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_263]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 19:23:03 anon_server_1 postfix/smtps/smtpd[2060278]: anon_hostname_158: unknown[anon_ip_263]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_8 +Jun 1 19:23:04 anon_server_1 postfix/smtps/smtpd[2060278]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_263] +Jun 1 19:23:04 anon_server_1 postfix/smtps/smtpd[2060278]: anon_hostname_12 from unknown[anon_ip_263] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 19:24:03 anon_server_1 postfix/smtps/smtpd[2060101]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_262] +Jun 1 19:24:03 anon_server_1 postfix/smtps/smtpd[2060101]: anon_hostname_12 from unknown[anon_ip_262] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 19:27:23 anon_server_1 postfix/anvil[2060104]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_260) anon_hostname_35 Jun 1 19:18:47 +Jun 1 19:27:23 anon_server_1 postfix/anvil[2060104]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_260) anon_hostname_35 Jun 1 19:18:47 +Jun 1 19:27:23 anon_server_1 postfix/anvil[2060104]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 19:18:57 +Jun 1 19:32:47 anon_server_1 postfix/smtps/smtpd[2060549]: connect from unknown[anon_ip_264] +Jun 1 19:32:49 anon_server_1 postfix/smtps/smtpd[2060549]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_264]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 19:32:55 anon_server_1 postfix/smtps/smtpd[2060549]: anon_hostname_158: unknown[anon_ip_264]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 19:32:58 anon_server_1 postfix/smtps/smtpd[2060591]: connect from unknown[anon_ip_265] +Jun 1 19:33:00 anon_server_1 postfix/smtps/smtpd[2060591]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_265]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 19:33:06 anon_server_1 postfix/smtps/smtpd[2060591]: anon_hostname_158: unknown[anon_ip_265]: anon_hostname_159 anon_hostname_160 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 19:33:07 anon_server_1 postfix/smtps/smtpd[2060591]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_265] +Jun 1 19:33:07 anon_server_1 postfix/smtps/smtpd[2060591]: anon_hostname_12 from unknown[anon_ip_265] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 19:33:15 anon_server_1 postfix/smtps/smtpd[2060591]: connect from unknown[anon_ip_266] +Jun 1 19:33:34 anon_server_1 postfix/smtps/smtpd[2060643]: anon_hostname_158: anon_hostname_171 anon_hostname_459non_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_267: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 19:33:34 anon_server_1 postfix/smtps/smtpd[2060643]: connect from unknown[anon_ip_267] +Jun 1 19:33:37 anon_server_1 postfix/smtps/smtpd[2060643]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_267]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 19:33:44 anon_server_1 postfix/smtps/smtpd[2060643]: anon_hostname_158: unknown[anon_ip_267]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 19:33:48 anon_server_1 postfix/smtps/smtpd[2060676]: connect from unknown[anon_ip_268] +Jun 1 19:33:49 anon_server_1 postfix/smtps/smtpd[2060676]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_268]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 19:33:55 anon_server_1 postfix/smtps/smtpd[2060676]: anon_hostname_158: unknown[anon_ip_268]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_7 +Jun 1 19:37:55 anon_server_1 postfix/smtps/smtpd[2060549]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_264] +Jun 1 19:37:55 anon_server_1 postfix/smtps/smtpd[2060549]: anon_hostname_12 from unknown[anon_ip_264] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 19:38:20 anon_server_1 postfix/smtps/smtpd[2060591]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_266]: anon_hostname_236 anon_hostname_460 anon_hostname_461 +Jun 1 19:38:20 anon_server_1 postfix/smtps/smtpd[2060591]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_266] +Jun 1 19:38:20 anon_server_1 postfix/smtps/smtpd[2060591]: anon_hostname_12 from unknown[anon_ip_266] anon_hostname_18=0/0 +Jun 1 19:38:44 anon_server_1 postfix/smtps/smtpd[2060643]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_267] +Jun 1 19:38:44 anon_server_1 postfix/smtps/smtpd[2060643]: anon_hostname_12 from unknown[anon_ip_267] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 19:38:55 anon_server_1 postfix/smtps/smtpd[2060676]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_268] +Jun 1 19:38:55 anon_server_1 postfix/smtps/smtpd[2060676]: anon_hostname_12 from unknown[anon_ip_268] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 19:42:15 anon_server_1 postfix/anvil[2060552]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_264) anon_hostname_35 Jun 1 19:32:49 +Jun 1 19:42:15 anon_server_1 postfix/anvil[2060552]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_264) anon_hostname_35 Jun 1 19:32:49 +Jun 1 19:42:15 anon_server_1 postfix/anvil[2060552]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 4 anon_hostname_35 Jun 1 19:33:49 +Jun 1 19:43:04 anon_server_1 postfix/postscreen[2061001]: anon_hostname_1 from [anon_ip_27]:59592 to [anon_ip_2]:25 +Jun 1 19:43:04 anon_server_1 postfix/dnsblog[2061003]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 19:43:10 anon_server_1 postfix/postscreen[2061001]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:59592 +Jun 1 19:43:10 anon_server_1 postfix/postscreen[2061001]: anon_hostname_183 [anon_ip_27]:59592 +Jun 1 20:07:23 anon_server_1 postfix/postscreen[2061591]: anon_hostname_1 from [anon_ip_269]:39040 to [anon_ip_2]:25 +Jun 1 20:07:23 anon_server_1 postfix/dnsblog[2061593]: anon_hostname_178 anon_ip_269 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 20:07:29 anon_server_1 postfix/postscreen[2061591]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_269]:39040 +Jun 1 20:07:29 anon_server_1 postfix/postscreen[2061591]: anon_hostname_183 [anon_ip_269]:39040 +Jun 1 20:18:33 anon_server_1 postfix/postscreen[2061897]: anon_hostname_1 from [anon_ip_270]:34618 to [anon_ip_2]:25 +Jun 1 20:18:33 anon_server_1 postfix/dnsblog[2061899]: anon_hostname_178 anon_ip_270 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 20:18:33 anon_server_1 postfix/dnsblog[2061899]: anon_hostname_178 anon_ip_270 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 20:18:39 anon_server_1 postfix/postscreen[2061897]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_270]:34618 +Jun 1 20:18:39 anon_server_1 postfix/postscreen[2061897]: anon_hostname_183 [anon_ip_270]:34618 +Jun 1 20:25:02 anon_server_1 postfix/smtps/smtpd[2062045]: connect from unknown[anon_ip_271] +Jun 1 20:25:03 anon_server_1 postfix/smtps/smtpd[2062045]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_271]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 20:25:10 anon_server_1 postfix/smtps/smtpd[2062045]: anon_hostname_158: unknown[anon_ip_271]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 20:25:13 anon_server_1 postfix/smtps/smtpd[2062107]: connect from anon_hostname_462[anon_ip_272] +Jun 1 20:25:14 anon_server_1 postfix/smtps/smtpd[2062107]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_462[anon_ip_272]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 20:25:19 anon_server_1 postfix/smtps/smtpd[2062107]: anon_hostname_158: anon_hostname_462[anon_ip_272]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 20:25:19 anon_server_1 postfix/smtps/smtpd[2062107]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from anon_hostname_462[anon_ip_272] +Jun 1 20:25:19 anon_server_1 postfix/smtps/smtpd[2062107]: anon_hostname_12 from anon_hostname_462[anon_ip_272] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 20:30:10 anon_server_1 postfix/smtps/smtpd[2062045]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_271] +Jun 1 20:30:10 anon_server_1 postfix/smtps/smtpd[2062045]: anon_hostname_12 from unknown[anon_ip_271] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 20:33:30 anon_server_1 postfix/anvil[2062067]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_271) anon_hostname_35 Jun 1 20:25:03 +Jun 1 20:33:30 anon_server_1 postfix/anvil[2062067]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_271) anon_hostname_35 Jun 1 20:25:03 +Jun 1 20:33:30 anon_server_1 postfix/anvil[2062067]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 20:25:14 +Jun 1 20:46:11 anon_server_1 postfix/postscreen[2062690]: anon_hostname_1 from [anon_ip_90]:43871 to [anon_ip_2]:25 +Jun 1 20:46:11 anon_server_1 postfix/dnsblog[2062692]: anon_hostname_178 anon_ip_90 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 20:46:11 anon_server_1 postfix/dnsblog[2062692]: anon_hostname_178 anon_ip_90 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 20:46:17 anon_server_1 postfix/postscreen[2062690]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_90]:43871 +Jun 1 20:46:17 anon_server_1 postfix/postscreen[2062690]: anon_hostname_183 [anon_ip_90]:43871 +Jun 1 20:53:04 anon_server_1 postfix/postscreen[2062856]: anon_hostname_1 from [anon_ip_27]:36486 to [anon_ip_2]:25 +Jun 1 20:53:04 anon_server_1 postfix/dnsblog[2062858]: anon_hostname_178 anon_ip_27 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 20:53:10 anon_server_1 postfix/postscreen[2062856]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_27]:36486 +Jun 1 20:53:10 anon_server_1 postfix/postscreen[2062856]: anon_hostname_183 [anon_ip_27]:36486 +Jun 1 21:01:33 anon_server_1 postfix/submission/smtpd[2063103]: connect from unknown[anon_ip_273] +Jun 1 21:01:40 anon_server_1 postfix/submission/smtpd[2063103]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_273]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 21:01:49 anon_server_1 postfix/submission/smtpd[2063103]: anon_hostname_158: unknown[anon_ip_273]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_11 +Jun 1 21:06:30 anon_server_1 postfix/postscreen[2063265]: anon_hostname_1 from [anon_ip_274]:48012 to [anon_ip_2]:25 +Jun 1 21:06:30 anon_server_1 postfix/postscreen[2063265]: anon_hostname_181 284 anon_hostname_122 0 from [anon_ip_274]:48012: \026\003\001\001\027\001\000\001\023\003\003\2412\210\306\021\225\332:"A\f\310"\257x\330\f\304\\"\36 +Jun 1 21:06:30 anon_server_1 postfix/postscreen[2063265]: anon_hostname_183 [anon_ip_274]:48012 +Jun 1 21:06:30 anon_server_1 postfix/dnsblog[2063267]: anon_hostname_178 anon_ip_274 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_18 +Jun 1 21:06:30 anon_server_1 postfix/dnsblog[2063267]: anon_hostname_178 anon_ip_274 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 21:06:30 anon_server_1 postfix/dnsblog[2063267]: anon_hostname_178 anon_ip_274 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 21:06:30 anon_server_1 postfix/postscreen[2063265]: anon_hostname_1 from [anon_ip_274]:48026 to [anon_ip_2]:25 +Jun 1 21:06:30 anon_server_1 postfix/dnsblog[2063268]: anon_hostname_178 anon_ip_274 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_18 +Jun 1 21:06:30 anon_server_1 postfix/dnsblog[2063268]: anon_hostname_178 anon_ip_274 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_16 +Jun 1 21:06:30 anon_server_1 postfix/dnsblog[2063268]: anon_hostname_178 anon_ip_274 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 21:06:36 anon_server_1 postfix/postscreen[2063265]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_274]:48026 +Jun 1 21:06:36 anon_server_1 postfix/postscreen[2063265]: anon_hostname_183 [anon_ip_274]:48026 +Jun 1 21:06:49 anon_server_1 postfix/submission/smtpd[2063103]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_273] +Jun 1 21:06:49 anon_server_1 postfix/submission/smtpd[2063103]: anon_hostname_12 from unknown[anon_ip_273] anon_hostname_13=2 anon_hostname_119=1 anon_hostname_167=0/1 anon_hostname_18=3/4 +Jun 1 21:08:47 anon_server_1 postfix/postscreen[2063351]: anon_hostname_1 from [anon_ip_275]:63601 to [anon_ip_2]:25 +Jun 1 21:08:47 anon_server_1 postfix/postscreen[2063351]: anon_hostname_241 anon_hostname_122 0 from [anon_ip_275]:63601 anon_hostname_21 anon_hostname_242 anon_hostname_243 SMTP anon_hostname_244 +Jun 1 21:08:47 anon_server_1 postfix/postscreen[2063351]: anon_hostname_183 [anon_ip_275]:63601 +Jun 1 21:08:47 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_276 +Jun 1 21:08:47 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 21:08:47 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_18 +Jun 1 21:08:47 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 21:08:47 anon_server_1 postfix/postscreen[2063351]: anon_hostname_1 from [anon_ip_275]:53064 to [anon_ip_2]:25 +Jun 1 21:08:47 anon_server_1 postfix/dnsblog[2063352]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_276 +Jun 1 21:08:47 anon_server_1 postfix/dnsblog[2063352]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_18 +Jun 1 21:08:47 anon_server_1 postfix/dnsblog[2063352]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 21:08:47 anon_server_1 postfix/dnsblog[2063352]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 21:08:53 anon_server_1 postfix/postscreen[2063351]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_275]:53064 +Jun 1 21:08:53 anon_server_1 postfix/postscreen[2063351]: anon_hostname_183 [anon_ip_275]:53064 +Jun 1 21:09:15 anon_server_1 postfix/postscreen[2063351]: anon_hostname_1 from [anon_ip_275]:64855 to [anon_ip_2]:25 +Jun 1 21:09:15 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_276 +Jun 1 21:09:15 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 21:09:15 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_18 +Jun 1 21:09:15 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 21:09:21 anon_server_1 postfix/postscreen[2063351]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_275]:64855 +Jun 1 21:09:21 anon_server_1 postfix/postscreen[2063351]: anon_hostname_183 [anon_ip_275]:64855 +Jun 1 21:09:26 anon_server_1 postfix/postscreen[2063351]: anon_hostname_1 from [anon_ip_275]:54837 to [anon_ip_2]:25 +Jun 1 21:09:26 anon_server_1 postfix/dnsblog[2063352]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 21:09:26 anon_server_1 postfix/dnsblog[2063352]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_18 +Jun 1 21:09:26 anon_server_1 postfix/dnsblog[2063352]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 21:09:26 anon_server_1 postfix/dnsblog[2063352]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_276 +Jun 1 21:09:32 anon_server_1 postfix/postscreen[2063351]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_275]:54837 +Jun 1 21:09:32 anon_server_1 postfix/postscreen[2063351]: anon_hostname_183 [anon_ip_275]:54837 +Jun 1 21:09:33 anon_server_1 postfix/postscreen[2063351]: anon_hostname_1 from [anon_ip_275]:62491 to [anon_ip_2]:25 +Jun 1 21:09:33 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_17 +Jun 1 21:09:33 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 21:09:33 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_18 +Jun 1 21:09:33 anon_server_1 postfix/dnsblog[2063353]: anon_hostname_178 anon_ip_275 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_276 +Jun 1 21:09:39 anon_server_1 postfix/postscreen[2063351]: anon_hostname_189 anon_hostname_190 3 for [anon_ip_275]:62491 +Jun 1 21:09:39 anon_server_1 postfix/postscreen[2063351]: anon_hostname_183 [anon_ip_275]:62491 +Jun 1 21:10:09 anon_server_1 postfix/anvil[2063112]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_259:anon_ip_273) anon_hostname_35 Jun 1 21:01:33 +Jun 1 21:10:09 anon_server_1 postfix/anvil[2063112]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_259:anon_ip_273) anon_hostname_35 Jun 1 21:01:33 +Jun 1 21:10:09 anon_server_1 postfix/anvil[2063112]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 21:01:33 +Jun 1 21:12:24 anon_server_1 postfix/smtps/smtpd[2063508]: connect from unknown[anon_ip_277] +Jun 1 21:12:24 anon_server_1 postfix/smtps/smtpd[2063508]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_277]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 21:12:31 anon_server_1 postfix/smtps/smtpd[2063508]: anon_hostname_158: unknown[anon_ip_277]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_2 +Jun 1 21:12:34 anon_server_1 postfix/smtps/smtpd[2063550]: connect from unknown[anon_ip_278] +Jun 1 21:12:36 anon_server_1 postfix/smtps/smtpd[2063550]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_278]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 21:12:43 anon_server_1 postfix/smtps/smtpd[2063550]: anon_hostname_158: unknown[anon_ip_278]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_3 +Jun 1 21:17:31 anon_server_1 postfix/smtps/smtpd[2063508]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_277] +Jun 1 21:17:31 anon_server_1 postfix/smtps/smtpd[2063508]: anon_hostname_12 from unknown[anon_ip_277] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 21:17:43 anon_server_1 postfix/smtps/smtpd[2063550]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_278] +Jun 1 21:17:43 anon_server_1 postfix/smtps/smtpd[2063550]: anon_hostname_12 from unknown[anon_ip_278] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 21:21:03 anon_server_1 postfix/anvil[2063511]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_277) anon_hostname_35 Jun 1 21:12:24 +Jun 1 21:21:03 anon_server_1 postfix/anvil[2063511]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_277) anon_hostname_35 Jun 1 21:12:24 +Jun 1 21:21:03 anon_server_1 postfix/anvil[2063511]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 21:12:36 +Jun 1 21:21:56 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_158: anon_hostname_171 anon_hostname_463 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_279: anon_hostname_185 anon_hostname_186 anon_hostname_84 anon_hostname_173 anon_hostname_187 +Jun 1 21:21:56 anon_server_1 postfix/smtps/smtpd[2063813]: connect from unknown[anon_ip_279] +Jun 1 21:22:04 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_279]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 21:22:13 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_279] +Jun 1 21:22:13 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_12 from unknown[anon_ip_279] anon_hostname_13=0/1 anon_hostname_18=0/1 +Jun 1 21:22:39 anon_server_1 postfix/smtps/smtpd[2063813]: connect from unknown[anon_ip_280] +Jun 1 21:22:40 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_280]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 21:22:48 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_158: unknown[anon_ip_280]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_16 +Jun 1 21:22:48 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_280] +Jun 1 21:22:48 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_12 from unknown[anon_ip_280] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 21:24:23 anon_server_1 postfix/smtps/smtpd[2063813]: connect from unknown[anon_ip_281] +Jun 1 21:24:24 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_281]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 21:24:32 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_158: unknown[anon_ip_281]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_4 +Jun 1 21:24:33 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_281] +Jun 1 21:24:33 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_12 from unknown[anon_ip_281] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 21:24:47 anon_server_1 postfix/smtps/smtpd[2063813]: connect from unknown[anon_ip_282] +Jun 1 21:24:48 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from unknown[anon_ip_282]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 21:24:55 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_158: unknown[anon_ip_282]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_5 +Jun 1 21:29:55 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from unknown[anon_ip_282] +Jun 1 21:29:55 anon_server_1 postfix/smtps/smtpd[2063813]: anon_hostname_12 from unknown[anon_ip_282] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 21:32:04 anon_server_1 postfix/anvil[2063829]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_279) anon_hostname_35 Jun 1 21:22:04 +Jun 1 21:32:04 anon_server_1 postfix/anvil[2063829]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_279) anon_hostname_35 Jun 1 21:22:04 +Jun 1 21:32:04 anon_server_1 postfix/anvil[2063829]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 2 anon_hostname_35 Jun 1 21:22:40 +Jun 1 21:39:32 anon_server_1 postfix/smtps/smtpd[2064392]: connect from unknown[anon_ip_283] +Jun 1 21:39:32 anon_server_1 postfix/smtps/smtpd[2064392]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_283]: anon_hostname_121 anon_hostname_104 +Jun 1 21:39:32 anon_server_1 postfix/smtps/smtpd[2064392]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_283] +Jun 1 21:39:32 anon_server_1 postfix/smtps/smtpd[2064392]: anon_hostname_12 from unknown[anon_ip_283] anon_hostname_18=0/0 +Jun 1 21:39:44 anon_server_1 postfix/smtps/smtpd[2064398]: connect from anon_hostname_464[anon_ip_284] +Jun 1 21:39:47 anon_server_1 postfix/smtps/smtpd[2064398]: anon_hostname_102 anon_hostname_103 anon_hostname_104 anon_hostname_105 from anon_hostname_464[anon_ip_284]: anon_hostname_106.2 anon_hostname_107 anon_hostname_108 anon_hostname_157 (256/256 anon_hostname_110) +Jun 1 21:39:49 anon_server_1 postfix/smtps/smtpd[2064392]: connect from unknown[anon_ip_285] +Jun 1 21:39:49 anon_server_1 postfix/smtps/smtpd[2064392]: anon_hostname_175 anon_hostname_176 from unknown[anon_ip_285]: anon_hostname_121 anon_hostname_104 +Jun 1 21:39:49 anon_server_1 postfix/smtps/smtpd[2064392]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_285] +Jun 1 21:39:49 anon_server_1 postfix/smtps/smtpd[2064392]: anon_hostname_12 from unknown[anon_ip_285] anon_hostname_18=0/0 +Jun 1 21:40:00 anon_server_1 postfix/smtps/smtpd[2064398]: anon_hostname_158: anon_hostname_464[anon_ip_284]: anon_hostname_159 anon_hostname_165 anon_hostname_161 anon_hostname_29: (anon_hostname_162 anon_hostname_163), anon_hostname_164=anon_sasl_user_1 +Jun 1 21:44:11 anon_server_1 postfix/postscreen[2064548]: anon_hostname_1 from [anon_ip_286]:42811 to [anon_ip_2]:25 +Jun 1 21:44:11 anon_server_1 postfix/dnsblog[2064550]: anon_hostname_178 anon_ip_286 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 21:44:11 anon_server_1 postfix/postscreen[2064548]: anon_hostname_241 anon_hostname_122 0.31 from [anon_ip_286]:42811 anon_hostname_21 anon_hostname_242 anon_hostname_243 SMTP anon_hostname_244 +Jun 1 21:44:11 anon_server_1 postfix/postscreen[2064548]: anon_hostname_183 [anon_ip_286]:42811 +Jun 1 21:44:11 anon_server_1 postfix/postscreen[2064548]: anon_hostname_1 from [anon_ip_286]:57653 to [anon_ip_2]:25 +Jun 1 21:44:11 anon_server_1 postfix/dnsblog[2064549]: anon_hostname_178 anon_ip_286 anon_hostname_179 anon_hostname_180 anon_hostname_144 anon_hostname_177 anon_hostname_79 anon_ip_15 +Jun 1 21:44:12 anon_server_1 postfix/postscreen[2064548]: anon_hostname_181 20 anon_hostname_122 0.44 from [anon_ip_286]:57653: anon_hostname_218 anon_ip_2\r\n +Jun 1 21:44:12 anon_server_1 postfix/postscreen[2064548]: anon_hostname_183 [anon_ip_286]:57653 +Jun 1 21:45:00 anon_server_1 postfix/smtps/smtpd[2064398]: anon_hostname_152 anon_hostname_122 anon_hostname_166 from anon_hostname_464[anon_ip_284] +Jun 1 21:45:00 anon_server_1 postfix/smtps/smtpd[2064398]: anon_hostname_12 from anon_hostname_464[anon_ip_284] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 21:48:20 anon_server_1 postfix/anvil[2064396]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (465:anon_ip_284) anon_hostname_35 Jun 1 21:39:48 +Jun 1 21:48:20 anon_server_1 postfix/anvil[2064396]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (465:anon_ip_284) anon_hostname_35 Jun 1 21:39:48 +Jun 1 21:48:20 anon_server_1 postfix/anvil[2064396]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 21:39:48 +Jun 1 21:51:16 anon_server_1 postfix/submission/smtpd[2064748]: anon_hostname_158: anon_hostname_171 anon_hostname_465 anon_hostname_172 anon_hostname_173 anon_hostname_174 to address anon_ip_287 +Jun 1 21:51:16 anon_server_1 postfix/submission/smtpd[2064748]: connect from unknown[anon_ip_287] +Jun 1 21:51:16 anon_server_1 postfix/submission/smtpd[2064748]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_1 from unknown[anon_ip_287] +Jun 1 21:51:16 anon_server_1 postfix/submission/smtpd[2064748]: anon_hostname_12 from unknown[anon_ip_287] anon_hostname_18=0/0 +Jun 1 21:54:05 anon_server_1 postfix/submission/smtpd[2064816]: connect from unknown[anon_ip_288] +Jun 1 21:54:05 anon_server_1 postfix/submission/smtpd[2064816]: anon_hostname_121 anon_hostname_104 anon_hostname_122 anon_hostname_218 from unknown[anon_ip_288] +Jun 1 21:54:05 anon_server_1 postfix/submission/smtpd[2064816]: anon_hostname_12 from unknown[anon_ip_288] anon_hostname_13=1 anon_hostname_167=0/1 anon_hostname_18=1/2 +Jun 1 21:57:25 anon_server_1 postfix/anvil[2064750]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_138 1/60s for (anon_hostname_259:anon_ip_287) anon_hostname_35 Jun 1 21:51:16 +Jun 1 21:57:25 anon_server_1 postfix/anvil[2064750]: anon_hostname_136: anon_hostname_137 anon_hostname_104 anon_hostname_140 1 for (anon_hostname_259:anon_ip_287) anon_hostname_35 Jun 1 21:51:16 +Jun 1 21:57:25 anon_server_1 postfix/anvil[2064750]: anon_hostname_136: anon_hostname_137 anon_hostname_141 anon_hostname_8 1 anon_hostname_35 Jun 1 21:51:16 + diff --git a/docs/dataset/sample_sasl.log b/docs/dataset/sample_sasl.log new file mode 100644 index 0000000..1346939 --- /dev/null +++ b/docs/dataset/sample_sasl.log @@ -0,0 +1,139 @@ +Sep 28 00:33:04 srv postfix/smtps/smtpd[999544]: warning: unknown[119.207.78.191]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 28 00:33:22 srv postfix/smtps/smtpd[999542]: warning: unknown[220.180.37.144]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin +Sep 28 01:27:18 srv postfix/smtps/smtpd[1001570]: warning: unknown[182.78.159.82]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 01:27:33 srv postfix/smtps/smtpd[1001619]: warning: unknown[58.222.188.154]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 28 03:05:55 srv postfix/smtps/smtpd[1005215]: warning: unknown[102.207.152.72]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 03:06:26 srv postfix/smtps/smtpd[1005270]: warning: unknown[114.244.157.44]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 28 04:12:02 srv postfix/smtps/smtpd[1007913]: warning: unknown[58.252.212.233]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 05:54:32 srv postfix/smtps/smtpd[1011548]: warning: unknown[183.167.193.127]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 28 05:54:52 srv postfix/smtps/smtpd[1011548]: warning: unknown[183.182.99.92]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 28 06:13:07 srv postfix/smtps/smtpd[1012360]: warning: mobile-166-130-176-136.mycingular.net[166.130.176.136]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 06:13:15 srv postfix/smtps/smtpd[1012417]: warning: unknown[91.126.40.54]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 28 06:57:49 srv postfix/smtps/smtpd[1014898]: warning: 165.199.148.122.sta.wbroadband.net.au[122.148.199.165]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 28 08:36:02 srv postfix/smtps/smtpd[1018704]: warning: host-cotesma-114-143-79.smandes.com.ar[181.114.143.79]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 10:07:13 srv postfix/smtps/smtpd[1022424]: warning: unknown[218.146.133.117]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 28 12:03:47 srv postfix/smtps/smtpd[1026440]: warning: 220-135-248-246.hinet-ip.hinet.net[220.135.248.246]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 28 13:26:13 srv postfix/smtps/smtpd[1029364]: warning: unknown[59.23.3.146]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 13:26:33 srv postfix/smtps/smtpd[1029364]: warning: unknown[187.50.194.182]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 28 16:09:37 srv postfix/smtps/smtpd[1035248]: warning: unknown[172.191.74.151]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 16:09:47 srv postfix/smtps/smtpd[1035287]: warning: unknown[183.171.7.156]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 28 17:32:44 srv postfix/smtps/smtpd[1038147]: warning: unknown[124.167.20.113]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 28 20:37:42 srv postfix/smtps/smtpd[1044598]: warning: unknown[37.75.89.78]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 20:37:58 srv postfix/smtps/smtpd[1044635]: warning: unknown[77.22.182.230]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 28 21:53:46 srv postfix/smtps/smtpd[1047243]: warning: unknown[112.28.62.63]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 21:54:00 srv postfix/smtps/smtpd[1047281]: warning: unknown[49.246.3.236]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 28 22:47:50 srv postfix/smtps/smtpd[1049353]: warning: unknown[81.22.19.176]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 28 22:48:21 srv postfix/smtps/smtpd[1049353]: warning: unknown[121.160.166.161]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin +Sep 28 23:22:13 srv postfix/smtps/smtpd[1050608]: warning: unknown[27.123.98.174]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 28 23:22:34 srv postfix/smtps/smtpd[1050652]: warning: unknown[1.24.210.27]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 29 00:33:16 srv postfix/smtps/smtpd[1053336]: warning: unknown[183.236.102.233]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 00:33:36 srv postfix/smtps/smtpd[1053376]: warning: unknown[39.152.196.78]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 29 01:44:58 srv postfix/smtps/smtpd[1056179]: warning: unknown[180.165.16.127]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 29 03:21:58 srv postfix/smtps/smtpd[1059694]: warning: syn-174-134-044-030.res.spectrum.com[174.134.44.30]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 04:38:03 srv postfix/smtps/smtpd[1062462]: warning: unknown[122.188.142.113]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 04:38:34 srv postfix/smtps/smtpd[1062459]: warning: unknown[45.170.50.2]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 29 05:29:29 srv postfix/smtps/smtpd[1064274]: warning: c-50-149-161-131.hsd1.tn.comcast.net[50.149.161.131]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 06:45:30 srv postfix/smtps/smtpd[1067737]: warning: unknown[31.43.192.2]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 07:01:36 srv postfix/smtps/smtpd[1068675]: warning: unknown[60.184.33.3]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 29 08:03:17 srv postfix/smtps/smtpd[1070841]: warning: unknown[151.237.115.206]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 29 11:08:27 srv postfix/smtps/smtpd[1077782]: warning: unknown[164.164.117.23]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 29 12:12:50 srv postfix/smtps/smtpd[1079934]: warning: unknown[119.92.76.210]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 12:13:02 srv postfix/smtps/smtpd[1079971]: warning: unknown[103.69.9.16]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 29 13:02:32 srv postfix/smtps/smtpd[1081525]: warning: unknown[109.195.69.156]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain.tld +Sep 29 13:03:05 srv postfix/smtps/smtpd[1081566]: warning: unknown[221.167.21.148]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin +Sep 29 13:32:32 srv postfix/smtps/smtpd[1082491]: warning: unknown[5.79.216.38]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 13:32:52 srv postfix/smtps/smtpd[1082491]: warning: unknown[113.108.88.121]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 29 13:56:39 srv postfix/smtps/smtpd[1083262]: warning: unknown[114.98.63.18]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Sep 29 14:35:31 srv postfix/smtps/smtpd[1084480]: warning: unknown[111.23.117.97]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 14:35:45 srv postfix/smtps/smtpd[1084517]: warning: unknown[112.80.174.62]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 29 15:46:14 srv postfix/smtps/smtpd[1087110]: warning: unknown[118.39.27.8]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Sep 29 15:46:33 srv postfix/smtps/smtpd[1087148]: warning: unknown[134.56.58.179]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Sep 29 16:19:11 srv postfix/smtps/smtpd[1088286]: warning: unknown[212.120.163.110]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 16:19:25 srv postfix/smtps/smtpd[1088323]: warning: unknown[182.78.79.134]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 29 18:50:25 srv postfix/smtps/smtpd[1093121]: warning: unknown[5.100.120.147]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 18:50:34 srv postfix/smtps/smtpd[1093121]: warning: d54c70cda.static.telenet.be[84.199.12.218]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 29 20:34:42 srv postfix/smtps/smtpd[1096450]: warning: 221-120-4-36.emome-ip.hinet.net[221.120.4.36]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 20:34:53 srv postfix/smtps/smtpd[1096491]: warning: unknown[65.20.233.82]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 29 22:56:35 srv postfix/smtps/smtpd[1100987]: warning: unknown[128.185.215.38]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 29 22:56:55 srv postfix/smtps/smtpd[1100987]: warning: 82-65-140-218.subs.proxad.net[82.65.140.218]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 30 03:25:01 srv postfix/smtps/smtpd[1109894]: warning: unknown[121.73.168.113]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain +Sep 30 03:25:12 srv postfix/smtps/smtpd[1109894]: warning: unknown[27.13.28.154]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin +Sep 30 03:31:58 srv postfix/smtps/smtpd[1109894]: warning: unknown[14.177.165.218]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=contact@domain +Sep 30 03:32:07 srv postfix/smtps/smtpd[1110339]: warning: unknown[120.244.231.207]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=contact +Sep 30 03:40:52 srv postfix/smtps/smtpd[1110691]: warning: unknown[122.168.127.166]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 30 03:41:04 srv postfix/smtps/smtpd[1110689]: warning: unknown[112.98.177.66]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 30 04:23:49 srv postfix/smtps/smtpd[1112063]: warning: unknown[125.19.222.186]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 30 05:56:02 srv postfix/smtps/smtpd[1114951]: warning: unknown[207.194.4.66]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Sep 30 05:56:21 srv postfix/smtps/smtpd[1115006]: warning: unknown[122.186.200.10]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Sep 30 06:26:30 srv postfix/smtps/smtpd[1116182]: warning: unknown[61.1.105.105]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 30 06:26:57 srv postfix/smtps/smtpd[1116219]: warning: unknown[77.34.6.62]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 30 07:45:53 srv postfix/smtps/smtpd[1119667]: warning: unknown[183.66.145.42]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Sep 30 07:46:02 srv postfix/smtps/smtpd[1119669]: warning: unknown[111.26.115.124]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Sep 30 07:46:18 srv postfix/smtps/smtpd[1119748]: warning: unknown[59.144.79.102]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Sep 30 07:46:32 srv postfix/smtps/smtpd[1119781]: warning: 110-25-104-101.adsl.fetnet.net[110.25.104.101]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Sep 30 08:53:35 srv postfix/smtps/smtpd[1121948]: warning: unknown[165.90.125.99]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=inf@domain +Sep 30 08:53:42 srv postfix/smtps/smtpd[1121948]: warning: unknown[77.34.6.177]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=inf +Sep 30 10:36:19 srv postfix/smtps/smtpd[1125583]: warning: unknown[122.144.14.204]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 30 10:36:45 srv postfix/smtps/smtpd[1125620]: warning: unknown[147.92.66.188]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 30 11:53:18 srv postfix/smtps/smtpd[1127982]: warning: unknown[183.233.166.200]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Sep 30 11:53:33 srv postfix/smtps/smtpd[1128035]: warning: unknown[118.121.233.158]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Sep 30 13:42:18 srv postfix/smtps/smtpd[1131785]: warning: unknown[171.244.61.137]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Sep 30 13:42:29 srv postfix/smtps/smtpd[1131791]: warning: unknown[223.93.162.142]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Sep 30 13:42:42 srv postfix/smtps/smtpd[1131828]: warning: unknown[116.98.104.138]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Sep 30 13:42:48 srv postfix/smtps/smtpd[1131860]: warning: unknown[45.127.120.34]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Sep 30 17:58:28 srv postfix/smtps/smtpd[1139882]: warning: unknown[46.35.117.94]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Sep 30 17:58:49 srv postfix/smtps/smtpd[1139919]: warning: unknown[196.190.41.137]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Sep 30 21:20:29 srv postfix/smtps/smtpd[1146245]: warning: 78-82-109-248.customers.ownit.se[78.82.109.248]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 00:43:33 srv postfix/smtps/smtpd[1152593]: warning: 111-70-23-253.emome-ip.hinet.net[111.70.23.253]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 00:43:55 srv postfix/smtps/smtpd[1152642]: warning: unknown[61.186.136.36]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 1 01:22:05 srv postfix/smtps/smtpd[1153723]: warning: unknown[46.146.223.104]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 02:50:26 srv postfix/smtps/smtpd[1156413]: warning: 111-70-49-185.emome-ip.hinet.net[111.70.49.185]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 02:50:46 srv postfix/smtps/smtpd[1156450]: warning: unknown[219.248.4.146]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 1 03:30:47 srv postfix/smtps/smtpd[1158246]: warning: 220-134-25-203.hinet-ip.hinet.net[220.134.25.203]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 06:49:17 srv postfix/smtps/smtpd[1165133]: warning: unknown[118.130.168.67]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 06:49:32 srv postfix/smtps/smtpd[1165172]: warning: unknown[116.72.9.151]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 1 09:37:40 srv postfix/smtps/smtpd[1170737]: warning: unknown[109.207.35.147]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 09:37:56 srv postfix/smtps/smtpd[1170776]: warning: unknown[103.251.31.166]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 1 11:16:14 srv postfix/smtps/smtpd[1174456]: warning: unknown[112.186.241.102]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 13:24:55 srv postfix/smtps/smtpd[1178472]: warning: 063.40.246.220.static.netvigator.com[220.246.40.63]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Oct 1 13:25:47 srv postfix/smtps/smtpd[1178542]: warning: 61-216-7-163.hinet-ip.hinet.net[61.216.7.163]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Oct 1 14:05:53 srv postfix/smtps/smtpd[1179776]: warning: 9-40-127-151.dsl.ovh.fr[151.127.40.9]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 14:44:14 srv postfix/smtps/smtpd[1180986]: warning: 221-120-4-42.emome-ip.hinet.net[221.120.4.42]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 15:15:20 srv postfix/smtps/smtpd[1181916]: warning: unknown[111.26.95.254]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Oct 1 15:15:40 srv postfix/smtps/smtpd[1181956]: warning: unknown[117.247.239.202]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Oct 1 16:08:08 srv postfix/smtps/smtpd[1183618]: warning: fixed-148-230-129-48.totalplay.net[148.230.129.48]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user6@domain +Oct 1 16:08:17 srv postfix/smtps/smtpd[1183618]: warning: unknown[27.13.153.46]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user6 +Oct 1 18:28:19 srv postfix/smtps/smtpd[1188082]: warning: unknown[61.97.17.208]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 18:28:43 srv postfix/smtps/smtpd[1188119]: warning: unknown[211.116.107.222]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 1 21:17:42 srv postfix/smtps/smtpd[1193702]: warning: unknown[222.71.129.90]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 21:17:52 srv postfix/smtps/smtpd[1193739]: warning: unknown[27.123.107.146]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 1 21:22:16 srv postfix/smtps/smtpd[1193912]: warning: node-abo.pool-182-53.dynamic.totinternet.net[182.53.52.68]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 1 23:53:29 srv postfix/submission/smtpd[1198565]: warning: unknown[103.99.3.226]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@domain +Oct 2 02:57:04 srv postfix/smtps/smtpd[1204396]: warning: unknown[218.1.150.242]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 04:35:15 srv postfix/smtps/smtpd[1207595]: warning: unknown[58.252.222.80]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 05:44:27 srv postfix/smtps/smtpd[1209733]: warning: unknown[121.133.246.95]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 05:44:35 srv postfix/smtps/smtpd[1209774]: warning: unknown[185.175.107.59]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 2 07:26:12 srv postfix/smtps/smtpd[1213545]: warning: unknown[137.131.24.170]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 10:19:57 srv postfix/smtps/smtpd[1219812]: warning: unknown[103.190.84.56]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 10:20:08 srv postfix/smtps/smtpd[1219809]: warning: unknown[151.237.115.208]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 2 12:37:01 srv postfix/smtps/smtpd[1224337]: warning: unknown[117.31.217.57]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 12:37:39 srv postfix/smtps/smtpd[1224391]: warning: unknown[183.196.144.45]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 2 13:13:38 srv postfix/smtps/smtpd[1225576]: warning: unknown[91.74.145.27]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 13:13:52 srv postfix/smtps/smtpd[1225576]: warning: unknown[59.6.75.186]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 2 15:36:03 srv postfix/smtps/smtpd[1229801]: warning: 89-179-119-222.static.corbina.ru[89.179.119.222]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 16:15:39 srv postfix/submission/smtpd[1231014]: warning: unknown[103.147.184.7]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=contact@domain +Oct 2 17:46:23 srv postfix/smtps/smtpd[1233768]: warning: unknown[41.219.149.76]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 19:01:39 srv postfix/smtps/smtpd[1236003]: warning: unknown[211.92.128.192]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=contact@domain +Oct 2 19:01:47 srv postfix/smtps/smtpd[1236027]: warning: unknown[213.154.80.36]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Oct 2 19:01:49 srv postfix/smtps/smtpd[1236070]: warning: unknown[27.13.24.201]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=contact +Oct 2 19:53:14 srv postfix/smtps/smtpd[1237642]: warning: unknown[27.123.104.142]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 2 19:53:24 srv postfix/smtps/smtpd[1237628]: warning: unknown[46.160.91.231]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 2 20:51:09 srv postfix/smtps/smtpd[1239427]: warning: unknown[115.187.39.165]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Oct 2 20:51:10 srv postfix/smtps/smtpd[1239446]: warning: p5df1e80e.dip0.t-ipconnect.de[93.241.232.14]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info@domain +Oct 2 20:51:35 srv postfix/smtps/smtpd[1239446]: warning: unknown[112.15.144.140]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Oct 2 20:51:42 srv postfix/smtps/smtpd[1239514]: warning: unknown[118.122.255.5]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info +Oct 2 22:43:59 srv postfix/smtps/smtpd[1242884]: warning: unknown[122.187.116.62]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 3 04:23:24 srv postfix/smtps/smtpd[1253784]: warning: unknown[203.252.10.4]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 3 04:23:49 srv postfix/smtps/smtpd[1253824]: warning: unknown[122.175.193.134]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 +Oct 3 06:03:05 srv postfix/smtps/smtpd[1256745]: warning: unknown[27.24.141.95]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user3 +Oct 3 06:03:14 srv postfix/smtps/smtpd[1256745]: warning: unknown[2.54.85.220]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user4 diff --git a/docs/maillogsentinel-install-guide-debian.md b/docs/maillogsentinel-install-guide-debian.md new file mode 100644 index 0000000..26fc5e5 --- /dev/null +++ b/docs/maillogsentinel-install-guide-debian.md @@ -0,0 +1,569 @@ +# MailLogSentinel Installation and Configuration Guide + +## πŸ“‹ Table of Contents + +- [Overview](#overview) +- [Prerequisites](#prerequisites) +- [System Preparation](#system-preparation) +- [Installation Process](#installation-process) +- [Initial Configuration](#initial-configuration) +- [Verification and Testing](#verification-and-testing) +- [Service Configuration](#service-configuration) +- [Advanced Configuration](#advanced-configuration) +- [Troubleshooting](#troubleshooting) +- [Security Considerations](#security-considerations) + +--- + +## πŸ” Overview + +**MailLogSentinel** is a log monitoring and reporting tool designed for mail servers running on Debian-based systems. It extracts, processes, and reports mail log data, with support for SQL export/import functionality. + +### Key Features +- **Real-time analysis** of Postfix logs (`/var/log/mail.log`) +- **SASL authentication failure detection** (LOGIN, PLAIN, CRAM-MD5, etc.) +- **Geographic IP enrichment** with ASN/ASO information +- **Automated email reporting** with CSV attachments +- **Systemd timer integration** for scheduled operations +- **SQL export capabilities** for data analysis + +--- + +## πŸ›  Prerequisites + +### System Requirements + +Before installing **MailLogSentinel**, ensure your system meets the following requirements: + +| Requirement | Details | +|-------------|---------| +| **Operating System** | Fresh installation of Debian 12 or 13 | +| **Memory** | Minimum 4 GB RAM (for low-traffic production mail servers) | +| **System Tools** | `sudo`, `rsyslog`, `git` (optional, you can use the native wget tool) | +| **Mail Server** | Postfix (optional for testing) | + +> [!IMPORTANT] +> This guide assumes a fresh Debian installation. Installing on an existing system may require additional configuration steps. + +### Required Services + +Before installing **MailLogSentinel**, ensure the following services are properly configured: + +1. **Working Debian installation** (fresh recommended) +2. **rsyslog** installed and configured +3. **sudo** access configured +4. **Git** for repository cloning (optional) +5. **SMTP server access** for email reports (optional for testing) + +--- + +## βš™οΈ System Preparation + +### Step 1: Install sudo + +On a fresh Debian installation, `sudo` may not be available by default: + +```bash +# Switch to root user +su - + +# Update package index and install sudo +apt update && apt install sudo -y + +# Add user to sudoers group (replace user by your username) +adduser user sudo + +# Reboot to ensure proper initialization +reboot +``` + +### Step 2: Configure rsyslog + +**MailLogSentinel** requires rsyslog for proper log handling: + +```bash +# Install rsyslog if not present +sudo apt install rsyslog + +# Start and enable rsyslog service +sudo systemctl start rsyslog +sudo systemctl enable --now rsyslog + +# Verify rsyslog status +sudo systemctl status rsyslog +``` + +Configure systemd journal forwarding to syslog: + +```bash +# Edit journald configuration +sudo vim /etc/systemd/journald.conf +``` + +Add or modify the following lines: + +```ini +[Journal] +Storage=none +ForwardToSyslog=yes +``` + +Apply the configuration: + +```bash +# Reload systemd daemon and restart services +sudo systemctl daemon-reexec +sudo systemctl restart systemd-journald +sudo systemctl restart rsyslog +``` + +--- + +## πŸ“₯ Installation Process + +### Option 1: Using Debian native tools + +```bash +# Download the latest release +wget https://github.com/monozoide/MailLogSentinel/archive/refs/tags/v5.14.15.zip -O MailLogSentinel.zip + +# Unzip the archive in user home directory +python3 -m zipfile -e MailLogSentinel.zip ~/ +``` + +Or + +### Option 2: Clone the Repository with git + +```bash +# Install git +sudo apt install git -y + +# Clone MailLogSentinel repository +git clone https://github.com/monozoide/MailLogSentinel.git +cd MailLogSentinel +``` + +### Install Scripts and Libraries + +```bash +# Make scripts executable +chmod +x bin/*.py && chmod +x lib/maillogsentinel/*.py + +# Copy executables to system binary directory +sudo cp bin/*.py /usr/local/bin/ + +# Copy library modules to system library directory +sudo cp -r lib/maillogsentinel /usr/local/lib/ +``` + +```bash +# Run initial installation +sudo python3 /usr/local/bin/maillogsentinel.py --setup --interactive +``` + +The `--setup --interactive` argument allows you to run an interactive step-by-step installation to install and configure: + +```bash +# The main configuration file +/etc/maillogsentinel.conf + +# Systemd units and timers +ipinfo-update.service +ipinfo-update.timer +maillogsentinel-extract.timer +maillogsentinel-report.service +maillogsentinel-report.timer +maillogsentinel.service +maillogsentinel-sql-export.service +maillogsentinel-sql-export.timer +maillogsentinel-sql-import.service +maillogsentinel-sql-import.timer + +# Access rights & Directory creation +/var/log/maillogsentinel/ +/var/lib/maillogsentinel/ +Adding user to 'adm' group (if not already a member) +``` +--- + +## πŸ”§ Initial Configuration + +### Setup Configuration Files + +**MailLogSentinel** uses a configuration-driven approach. + +The main configuration file is created in `/etc/maillogsentinel.conf` on first run with `--setup --interractive`. + +**Basic configuration structure:** + +```ini +[paths] +working_dir = /var/log/maillogsentinel +state_dir = /var/lib/maillogsentinel +mail_log = /var/log/mail.log + +[report] +email = security-team@example.org +report_subject_prefix = [MailLogSentinel] + +[geolocation] +country_db_path = /var/lib/maillogsentinel/country_aside.csv +asn_db_path = /var/lib/maillogsentinel/asn.csv + +[general] +log_level = INFO +``` + +--- + +## βœ… Verification and Testing + +### Check Service Status + +After installation, verify that **MailLogSentinel** services are properly configured: + +```bash +# List MailLogSentinel related systemd units +systemctl list-units --all "*maillogsentinel*" "*ipinfo-update*" +``` + +Expected output should show: +- `maillogsentinel-extract.timer` - Active/waiting +- `maillogsentinel-report.timer` - Active/waiting +- `maillogsentinel-sql-export.timer` - Active/waiting +- `maillogsentinel-sql-import.timer` - Active/waiting +- `ipinfo-update.timer`- Active/waiting + +> [!NOTE] +> It's normal for the service units to show as *failed* initially, as they haven't been triggered yet. The timers should be in "waiting" state. + +### Verify Timer Configuration + +```bash +# Check timer status and next execution times +systemctl list-timers --all '*maillogsentinel*' '*ipinfo-update*' +``` + +This command displays scheduled execution times for all **MailLogSentinel** timers. + +### Initial Run + +#### 1. Manual Log Extraction + +Execute the first data extraction manually: + +```bash +# Run initial log analysis +python3 /usr/local/bin/maillogsentinel.py +``` + +> [!NOTE] +> The first extraction may take a long time depending on the size of your log files. Subsequent extractions are much faster because the script does not reread the logs entirely. + +Verify output generation: + +```bash +# Check created files +ls -l /var/log/maillogsentinel/ + +# Monitor real-time CSV output +tail -f /var/log/maillogsentinel/maillogsentinel.csv +``` + +#### 2. Test Report Generation + +For testing purposes (especially on systems without active Postfix), use sample data: + +```bash +# Copy sample mail log for testing +sudo cp docs/dataset/sample.mail.log /var/log/mail.log && sudo chown root:adm /var/log/mail.log + +# Generate test report +python3 /usr/local/bin/maillogsentinel.py --report +``` + +#### 3. Email Report Testing + +If using local mail delivery for reports, install a mail client to verify output: + +```bash +# Install neomutt for local email reading +sudo apt install neomutt -y +``` + +To read generated reports: + +1. Launch `neomutt` +2. Confirm creation of `/home/$USER/Mail` folder +3. Select the **MailLogSentinel** email +4. Press `v` key to view attachments +5. Select `maillogsentinel.csv` to review the data + +#### 4. SQL Export Testing + +Test the SQL export functionality: + +```bash +# Generate SQL export +python3 /usr/local/bin/maillogsentinel.py --sql-export +``` + +Verify the export file location: + +```bash +# Check exported SQL files +ls -l /var/lib/maillogsentinel/ +``` + +--- + +## ⏰ Service Configuration + +### Timer Customization + +**MailLogSentinel** uses `systemd` timers for automated operations. You can customize execution intervals: + +#### 1. Log Extraction Timer + +```bash +# Edit extraction timer +sudo vim /etc/systemd/system/maillogsentinel-extract.timer +``` + +Modify the `OnCalendar` value: +```ini +OnCalendar=hourly +``` + +#### 2. Email Reporting Timer + +```bash +# Edit reporting timer +sudo vim /etc/systemd/system/maillogsentinel-report.timer +``` + +Set daily execution: +```ini +OnCalendar=daily +``` + +#### 3. SQL Export Timer + +```bash +# Edit SQL export timer +sudo vim /etc/systemd/system/maillogsentinel-sql-export.timer +``` + +Configure 4-minute intervals: +```ini +OnCalendar=*:0/4 +``` + +#### 4. SQL Import Timer + +```bash +# Edit SQL import timer +sudo vim /etc/systemd/system/maillogsentinel-sql-import.timer +``` + +Configure 5-minute intervals: +```ini +OnCalendar=*:0/5 +``` + +### Applying Timer Changes + +After modifying timer configurations: + +```bash +# Reload systemd daemon +sudo systemctl daemon-reload + +# Restart affected timers +sudo systemctl restart maillogsentinel-extract.timer +sudo systemctl restart maillogsentinel-report.timer +sudo systemctl restart maillogsentinel-sql-export.timer +sudo systemctl restart maillogsentinel-sql-import.timer +``` + +### Systemd Timer Syntax + +The `OnCalendar` field uses standard systemd time syntax: + +| Value | Description | +|-------|-------------| +| `hourly` | Run once per hour (at minute 0) | +| `daily` | Run once per day (at 00:00) | +| `*:0/5` | Run every 5 minutes | +| `Mon *-*-* 09:00:00` | Run every Monday at 9:00 AM | + +For advanced timer configuration, refer to the [systemd/Timers documentation](https://wiki.archlinux.org/title/Systemd/Timers) for complete syntax options. + +--- + +## πŸ”§ Advanced Configuration + +### Geographic Database Updates + +**MailLogSentinel** uses IP geolocation databases that require periodic updates: + +The `ipinfo.py` script is executed daily via the `ipinfo-update.timer` and retrieves the databases from [ip-location-db](https://github.com/sapics/ip-location-db/tree/main), a project that provides IP to location databases in CSV and MMDB formats: + +- [asn-country](https://github.com/sapics/ip-location-db/tree/main/asn-country) IP to country +- [asn](https://github.com/sapics/ip-location-db/tree/main/asn) IP to ASN/ASO + +### Performance Tuning + +For high-volume mail servers, consider the following optimizations: + +- **Memory allocation**: Ensure adequate RAM for log processing +- **Timer intervals**: Adjust based on log volume and processing requirements +- **Database maintenance**: Regular cleanup of old CSV and SQL files + +### Integration with Monitoring Systems + +**MailLogSentinel** can be integrated with existing monitoring solutions: + +- **Log aggregation**: Forward alerts to centralized logging systems +- **Metrics collection**: Export statistics to monitoring dashboards +- **Alerting**: Configure threshold-based notifications + +--- + +## πŸ› Troubleshooting + +### Common Issues + +#### Service Startup Failures + +If **MailLogSentinel** services fail to start: + +1. Check service status: + ```bash + sudo systemctl status maillogsentinel-extract.service + ``` + +2. Review logs: + ```bash + sudo journalctl -u maillogsentinel-extract.service + ``` + +3. Verify file permissions: + ```bash + ls -l /usr/local/bin/maillogsentinel.py + ls -l /usr/local/lib/maillogsentinel/ + ``` + +#### Log Processing Issues + +If log analysis is not working: + +1. Verify log file access: + ```bash + sudo ls -l /var/log/mail.log + ``` + +2. Check rsyslog configuration: + ```bash + sudo systemctl status rsyslog + ``` + +3. Test manual execution: + ```bash + python3 /usr/local/bin/maillogsentinel.py --debug + ``` + +### Log Analysis + +For debugging purposes, check MailLogSentinel's own logs: + +```bash +# View application logs +sudo tail -f /var/log/mail.log +``` + +--- + +## πŸ”’ Security Considerations + +### File Permissions + +Ensure proper file permissions for security: + +```bash +# Secure configuration files +sudo chmod 600 /etc/maillogsentinel.conf + +# Verify log directory permissions +sudo ls -ld /var/log/maillogsentinel/ +``` + +### Network Security + +- **Firewall rules**: Ensure appropriate access controls +- **SMTP authentication**: Use secure credentials for email reporting +- **Log retention**: Implement appropriate log rotation and cleanup + +### Data Privacy + +**MailLogSentinel** processes potentially sensitive log data: + +- **Access controls**: Limit access to authorized personnel only +- **Data retention**: Implement appropriate retention policies +- **Anonymization**: Consider log sanitization for compliance + +### Production Deployment + +For production environments: + +1. **Backup configuration**: Maintain secure backups of configuration files +2. **Monitor resource usage**: Track CPU and memory consumption +3. **Regular updates**: Keep MailLogSentinel and dependencies updated +4. **Security audits**: Periodic review of access logs and configurations + +--- + +## πŸ“š Additional Resources + +### Documentation +- **API Reference**: [Programming interface documentation](https://github.com/monozoide/MailLogSentinel/tree/main/docs/api) +- **Configuration Guide**: [Advanced configuration options](https://github.com/monozoide/MailLogSentinel/wiki/Configuration) + +### Support +- **GitHub Repository**: [MailLogSentinel Issues](https://github.com/monozoide/MailLogSentinel) +- **Community Forums**: [Discussions](https://github.com/monozoide/MailLogSentinel/discussions) + +### Related Tools +- **Postfix Documentation**: [Official Postfix SASL Guide](https://www.postfix.org/SASL_README.html) +- **Systemd Timers**: [ArchWiki Systemd/Timers](https://wiki.archlinux.org/title/Systemd/Timers) + +--- + +## πŸ“ Frequently Asked Questions + +### Installation Questions + +**Q: How do I install MailLogSentinel with a database backend?** +[Install MailLogSentinel with a database backend](https://github.com/monozoide/MailLogSentinel/wiki/database-backend) + +**Q: Can MailLogSentinel work with journald instead of rsyslog?** +Currently, as of 10/15/2025, journald support is still in development. Stay tuned to be notified as soon as the feature is available. + +**Q: How do I use MailLogSentinel on a production Postfix server?** +It all depends on the type of server you have and its configuration. Full documentation is currently being written. + +For additional questions and answers, consult the project's [FAQ documentation.](https://github.com/monozoide/MailLogSentinel/wiki/FAQ.md) + +## πŸ“š Additional Resources + +- [Official Repository](https://github.com/monozoide/MailLogSentinel) +- [systemd Documentation](https://www.freedesktop.org/software/systemd/man/) +- [Debian Administrator's Handbook](https://www.debian.org/doc/) + +--- + +**Last Updated**: October 2025 +**Version**: Compatible with Debian 12/13 + +*This guide provides comprehensive instructions for installing and configuring **MailLogSentinel** on Debian 12/13 systems. For the most current information and updates, always refer to the official project repository and documentation.* \ No newline at end of file diff --git a/docs/man/ipinfo.8.md b/docs/man/ipinfo.8.md new file mode 100644 index 0000000..38b21d3 --- /dev/null +++ b/docs/man/ipinfo.8.md @@ -0,0 +1,113 @@ +# NAME + +ipinfo - IP address information lookup utility + +# SYNOPSIS + +```shell +ipinfo.py [-h] [--update] [--country-db-path PATH] [--asn-db-path PATH] [--country-db-url URL] [--asn-db-url URL] [--data-dir DIR] [--config FILE] [ip_address] +``` + +# DESCRIPTION + +**`ipinfo.py`** is a command-line utility for looking up geographical and network information about IP addresses. It uses local databases for country and ASN (Autonomous System Number) information, providing fast offline lookups without requiring external API calls. + +The utility can download and update its databases from public IP location repositories, making it suitable for integration into logging and monitoring systems like MailLogSentinel. + +# OPTIONS + +**`ip_address`** +IP address to look up (e.g., 8.8.8.8). If not provided, the utility displays usage information. + +**`-h`**, **`--help`** +Display help message and exit. + +**`--update`** +Download or update both IP databases (Country and ASN). This fetches the latest versions from the configured URLs and stores them in the appropriate locations. + +**`--country-db-path`** `PATH` +Path to store or load the country database. Default: `ipinfo/country_aside.csv` + +**`--asn-db-path`** `PATH` +Path to store or load the ASN database. Default: `ipinfo/ip2asn-lite.csv` + +**`--country-db-url`** `URL` +URL for downloading the country database. Default: https://raw.githubusercontent.com/sapics/ip-location-db/main/asn-country/asn-country-ipv4-num.csv + +**`--asn-db-url`** `URL` +URL for downloading the ASN database. Default: https://raw.githubusercontent.com/sapics/ip-location-db/refs/heads/main/asn/asn-ipv4-num.csv + +**`--data-dir`** `DIR` +Directory to store or load all IP database files. If specified, this overrides the default directory component of **`--country-db-path` and **`--asn-db-path` unless they are specified as absolute paths. + +**--config`** `FILE` +Path to maillogsentinel.conf configuration file. When specified, database paths and URLs can be read from the configuration file instead of using command-line options. + +# FILES + +`ipinfo/country_aside.csv` +Default location for the country database. + +`ipinfo/ip2asn-lite.csv` +Default location for the ASN database. + +`maillogsentinel.conf` +Optional configuration file for setting database paths and URLs. + +# EXAMPLES + +Look up information for a specific IP address: + +```shell +ipinfo.py 8.8.8.8 +``` + +Update both databases to their latest versions: + +```shell +ipinfo.py --update +``` + +Look up an IP using a custom data directory: + +```shell +ipinfo.py --data-dir /var/lib/ipinfo 1.1.1.1 +``` + +Use a custom configuration file: + +```shell +ipinfo.py --config /etc/maillogsentinel.conf 8.8.4.4 +``` + +Specify custom database paths: + +```shell +ipinfo.py --country-db-path /opt/db/country.csv --asn-db-path /opt/db/asn.csv 192.168.1.1 +``` + +# EXIT STATUS + +**`0`** +Successful execution. + +**`1`** +General error (invalid IP address, database not found, network error during update). + +# SEE ALSO + +**`whois`**(1), **`dig`**(1), **`host`**(1), **`geoiplookup`**(1) + +# BUGS + +Report bugs at: https://github.com/monozoide/MailLogSentinel/issues + +# AUTHOR + +MailLogSentinel Project + +# COPYRIGHT + +This utility is part of the MailLogSentinel project. + +Database sources: IP location databases by sapics https://github.com/sapics/ip-location-db \ No newline at end of file diff --git a/docs/man/log_anonymizer.8.md b/docs/man/log_anonymizer.8.md new file mode 100644 index 0000000..c118e29 --- /dev/null +++ b/docs/man/log_anonymizer.8.md @@ -0,0 +1,110 @@ +# NAME + +log_anonymizer - anonymize sensitive information in log files + +# SYNOPSIS + +```shell +log_anonymizer.py [-h] -i INPUT_FILE -o OUTPUT_FILE [-t TEMP_DIR] [--config CONFIG] [--log-level LEVEL] [--script-log-file SCRIPT_LOG_FILE] +``` + +# DESCRIPTION + +**`log_anonymizer`** is a tool designed to anonymize sensitive information contained in email log files. It processes input log files and generates anonymized output files by applying configurable anonymization rules to protect private data while maintaining the utility of the logs for debugging and analysis purposes. + +The tool supports customizable anonymization rules through configuration files and provides comprehensive logging capabilities to track the anonymization process. + +# OPTIONS + +**`-h`**, **`--help`** +Display help message and exit. + +**`-i`**, **`-input-file`** **`INPUT_FILE`** +Specify the input log file to be anonymized. This option is mandatory. + +**`-o`**, **`--output-file`** **`OUTPUT_FILE`** +Specify the output file where the anonymized log will be written. This option is mandatory. + +**`-t`**, **`--temp-dir`** **`TEMP_DIR`** +Specify an optional temporary directory to use during processing. If not provided, the system default temporary directory will be used. + +**`--config`** **`CONFIG`** +Specify a configuration file containing custom anonymization rules. This allows fine-tuning of the anonymization behavior to match specific requirements. + +**`--log-level`** **`LEVEL`** +Set the logging level for the script execution. Valid values are: **`DEBUG`**, **`INFO`**, **`WARNING`**, **`ERROR`**, and **`CRITICAL`**. This controls the verbosity of diagnostic output during execution. + +**`--script-log-file`** **`SCRIPT_LOG_FILE`** +Specify an optional path to a file where script execution logs will be saved. If not provided, logs are output to standard error only. + +# EXAMPLES + +Basic anonymization of a log file: + +```shell +python3 log_anonymizer.py -i /var/log/mail.log -o /tmp/mail_anonymized.log +``` + +Anonymization with custom configuration and debug logging: + +```shell +python3 log_anonymizer.py -i /var/log/mail.log -o /tmp/safe.log --config /etc/anonymizer/rules.conf --log-level DEBUG --script-log-file /var/log/anonymizer_execution.log +``` + +Using a custom temporary directory: + +```shell +python3 log_anonymizer.py -i input.log -o output.log -t /tmp +``` + +# FILES + +**`/etc/anonymizer/rules.conf`** +Default location for system-wide anonymization rules configuration (if applicable). + +**`config/anonymizer/config`** +User-specific configuration file (if applicable). + +# EXIT STATUS + +**`0`** +Successful completion. + +**`1`** +General error occurred during execution. + +**`2`** +Invalid command-line arguments or missing required options. + +# NOTES + +The script requires Python3 to run. Ensure that all required Python3 dependencies are installed before execution. + +Large log files may require significant temporary disk space during processing. Use the **-t** option to specify a temporary directory with adequate space if needed. + +The quality of anonymization depends on the rules defined in the configuration file. Review and test your configuration thoroughly before processing sensitive production logs. + +# SECURITY CONSIDERATIONS + +While this tool anonymizes data according to configured rules, it is the administrator's responsibility to: + +- Verify that all sensitive data types are properly covered by anonymization rules +- Securely handle both input and output files +- Properly dispose of temporary files +- Review anonymized output before sharing with untrusted parties + +# BUGS + +Report bugs at: https://github.com/monozoide/MailLogSentinel/issues + +# AUTHOR + +MailLogSentinel Project + +# COPYRIGHT + +This utility is part of the MailLogSentinel project. + +# SEE ALSO + +**`maillogsentinel`**(8), **`sed`**(1), **`awk`**(1), **`grep`**(1), **`logrotate`**(8) \ No newline at end of file diff --git a/docs/man/maillogsentinel.8.md b/docs/man/maillogsentinel.8.md new file mode 100644 index 0000000..3456dfa --- /dev/null +++ b/docs/man/maillogsentinel.8.md @@ -0,0 +1,231 @@ +# NAME + +maillogsentinel - monitor Postfix SASL authentication failures + +# SYNOPSIS + +```shell + maillogsentinel [options] + maillogsentinel --setup [--config FILE] +``` + +# DESCRIPTION + +MailLogSentinel parses Postfix SASL authentication logs, records failed login attempts, and emails daily reports. The utility keeps persistent CSV and state files so subsequent runs only process new log lines. + +Normal operation must be executed as an unprivileged service user; root access is only required for the initial setup workflow. + +The program reads configuration values from an INI file (see Configuration). When invoked without command options, it processes the configured mail log, updates the persistent dataset, and generates progress messages on stdout. Dedicated subcommands are available for reporting, state resets, SQL export/import, and non-interactive setup. + +# OPTIONS + +**`--config FILE`** +Override the default configuration file path (`/etc/maillogsentinel.conf`). When combined with `--setup` the supplied file is treated as the source template for automated provisioning. + +**`--setup`** +Create or refresh configuration, directories, and systemd units. Run this command with root privileges. Without `--config` the setup wizard runs interactively and writes `/etc/maillogsentinel.conf`. When `--config` is supplied, the wizard performs an automated deployment using that template. + +**`--report`** +Send the email summary immediately using the currently persisted dataset. Requires mail transport configuration in the config file. + +**`--reset`** +Back up the CSV, operational log, and offset state into `~/maillogsentinel_backup_XXXXXX`, then remove the originals so the next execution reprocesses all historical logs. Cron/systemd timers must be managed manually afterwards. + +**`--purge`** +Perform the same archival workflow as `--reset` but is intended for complete environment refreshes. All persisted artefacts are moved into a timestamped directory beneath the invoking user's home. + +**`--sql-export`** +Append newly discovered events to SQL files located in the configured s`ql_export_dir`. Use this for long-term storage or downstream analytics systems that ingest SQL statements. + +**`--sql-import`** +Read .sql files from `sql_export_dir` and replay them against the database described in the `[database\]` section of the configuration. + +# PREREQUISITES + +- Python 3.10 or later. +- Access to the Postfix log files defined in the configuration. +- A functional local mail transfer agent for dispatching summary emails. +- Root privileges for the setup command; day-to-day execution should use a +dedicated service account. + +# CONFIGURATION + +Settings are stored in an INI file (default `etc/maillogsentinel.conf`). +Only keys that persist between executions or affect operations are +documented below. Developer-oriented tuning options are described in the +project documentation. + +## `[paths]` + +**`working_dir`** +Location for the persistent CSV (`maillogsentinel.csv`) and operational log (`maillogsentinel.log`). Ensure the service account can read and write this directory. + +**`state_dir`** +Directory containing `tate.offset`, which tracks the last processed position within the mail log. + +**`mail_log`** +Absolute path to the mail log file to monitor, typically `/var/log/mail.log`. + +## `[report]` + +**`email`** +Recipient address for the daily summary email. The message body lists top sources, usernames, and other aggregated indicators derived from the CSV. + +## `[general]` + +**`log_level`** +Logging verbosity for maillogsentinel.log. Accepts `DEBUG`, `INFO`, `WARNING`, `ERROR`, or `CRITICAL`. + +## `[dns_cache]` + +**`enabled`** +Toggle cached reverse DNS lookups to reduce latency and repeated resolver traffic. + +**`size`** +Maximum number of entries retained in the DNS cache. + +**ttl_seconds** +Expiration time for cached DNS entries. + +## `[ipinfo]` + +**`country_db_path`** +Path to the country database used for IP geolocation. + +**`asn_db_path`** +Path to the ASN database used for enrichment. + +**`db_update_url_country`** +Download URL for refreshing the country database. + +**`db_update_url_asn`** +Download URL for refreshing the ASN database. + +## `[database]` + +**`sql_export_dir`** +Directory that stores generated SQL export files and the source material for `--sql-import`. + +**`db_type`** +Database backend used for imports (for example postgresql or mysql). + +**`db_host`** +Hostname or address of the database service. + +**`db_name`** +Target database schema. + +**`db_user`** +Credential name for database access. + +**`db_password`** +Password used by db_user. Protect this file with restrictive permissions. + +# FILES + +**`/etc/maillogsentinel.conf`** +Primary configuration file created by `--setup`. + +**`/maillogsentinel.csv`** +Persistent datastore containing failed authentication events. + +**`/maillogsentinel.log`** +Operational log capturing runtime diagnostics. + +**`/state.offset`** +Offset tracker that prevents reprocessing of previously parsed log lines. + +**`/*.sql`** +Incremental SQL export batches generated by `--sql-export`. + +**`./maillogsentinel_setup.log`** +Transcript of the last setup session, useful for troubleshooting provisioning issues. + +# DIAGNOSTICS + +Runtime messages are written to stdout and to maillogsentinel.log using the configured log level. When deployed as a systemd service, inspect progress with: + +```shell + journalctl -u maillogsentinel.service + journalctl -u maillogsentinel-report.service +``` + +Failures during setup are documented in maillogsentinel_setup.log. SQL import/export issues are logged alongside the operational log file. + +# SYSTEMD INTEGRATION + +The setup wizard installs sample units named maillogsentinel.service, maillogsentinel-extract.timer, maillogsentinel-report.service, and maillogsentinel-report.timer. Review and adjust the User= directive and paths before copying them to /etc/systemd/system, then reload systemd and enable the timers. + +# SECURITY + +Do not run the main extraction workflow as root. Grant the service user read access to mail logs and write access to the working/state directories. Protect `/etc/maillogsentinel.conf` because it may contain SMTP credentials and database passwords. Network downloads performed by `ipinfo.py` should be executed with appropriate firewalls and TLS validation in place. + +# AUXILIARY UTILITIES + +**`bin/log_anonymizer.py`** +Redacts sensitive fields within mail logs to support troubleshooting without leaking credentials or addresses. + +**`bin/ipinfo.py`** +Maintains the geolocation databases referenced by `[ipinfo]` settings and can query IP metadata on demand. Use `bin/ipinfo.py --update` to refresh the datasets. + +# EXAMPLES + +Initial interactive deployment + +```shell +sudo python3 maillogsentinel.py --setup +``` + +Automated deployment from a prepared configuration + +```shell +sudo python3 maillogsentinel.py --config /opt/bootstrap/maillogsentinel.conf --setup +``` + +Daily processing from a custom configuration + +```shell +python3 maillogsentinel.py --config /srv/maillogsentinel/maillogsentinel.conf +``` + +Force immediate email delivery for the accumulated dataset + +```shell +python3 maillogsentinel.py --report +``` + +Archive existing state and restart ingestion + +```shell +python3 maillogsentinel.py --reset +``` + +# EXIT STATUS + +**`0`** +Successful execution. + +**`1`** +A recoverable error occurred (for example missing configuration, permission errors, or setup cancellation). Inspect maillogsentinel.log or maillogsentinel_setup.log for details. + +# REPORTING BUGS + +Report issues at https://github.com/monozoide/MailLogSentinel/issues. + +# AUTHOR + +Written by monozoide. Project home page: https://github.com/monozoide/MailLogSentinel. + +# SEE ALSO + +**`fail2ban(1)`** + +**`journalctl(1)`** + +**`systemd.service(5)`** + +**`systemd.timer(5)`** + +**`rsyslog.conf(5)`** + +**`syslog-ng.conf(5)`** diff --git a/docs/wiki/FAQ.md b/docs/wiki/FAQ.md new file mode 100644 index 0000000..1204a48 --- /dev/null +++ b/docs/wiki/FAQ.md @@ -0,0 +1,464 @@ +# MailLogSentinel - Frequently Asked Questions (FAQ) + +## Table of Contents + +- [πŸš€ Installation and Configuration](#-installation-and-configuration) +- [βš™οΈ Daily Usage](#-daily-usage) +- [πŸ”§ Maintenance and Administration](#-maintenance-and-administration) +- [πŸ”— Advanced Integrations](#-advanced-integrations) +- [🚨 Troubleshooting and Errors](#-troubleshooting-and-errors) +- [πŸ“Š Data and Reports](#-data-and-reports) +- [πŸ” Security and Permissions](#-security-and-permissions) +- [πŸ› οΈ Development](#-development) + +*** + +## πŸš€ Installation and Configuration + +### Q1: How to install MailLogSentinel on Debian 12/13? + +**Step-by-step installation:** + +```bash +# 1. Clone the repository +git clone https://github.com/monozoide/MailLogSentinel.git +cd MailLogSentinel + +# 2. Copy binaries to system +chmod +x bin/*.py +sudo cp bin/*.py /usr/local/bin/ + +# 3. Copy libraries +sudo cp -r lib/ /usr/local/bin/ + +# 4. Run interactive setup +sudo python3 /usr/local/bin/maillogsentinel.py --setup --interactive +``` + +**πŸ“– Reference:** [Getting Started Guide](../wiki/) + +### Q2: What's the difference between `--setup --interactive` and `--setup --automated`? + +| Mode | Usage | When to use | +| :-- | :-- | :-- | +| `--interactive` | Asks questions step by step | First installation, custom config | +| `--automated` | Uses existing config file | Multiple deployments, CI/CD | + +```bash +# Interactive mode (recommended for first time) +sudo python3 /usr/local/bin/maillogsentinel.py --setup --interactive + +# Automated mode (uses /etc/maillogsentinel.conf) +sudo python3 /usr/local/bin/maillogsentinel.py --setup --automated +``` + +### Q3: How to disable email reports? + +Simply stop & disable `maillogsentinel-report.timer` and `maillogsentinel-report.service` : + +```bash +systemctl list-timers --all |grep maillogsentinel +Mon 2025-10-13 16:20:00 CEST 3min 33s Mon 2025-10-13 16:16:17 CEST 8s ago maillogsentinel-sql-export.timer maillogsentinel-sql-export.service +Mon 2025-10-13 16:20:00 CEST 3min 33s Mon 2025-10-13 16:15:09 CEST 1min 16s ago maillogsentinel-sql-import.timer maillogsentinel-sql-import.service +Mon 2025-10-13 17:00:00 CEST 43min Mon 2025-10-13 16:00:18 CEST 16min ago maillogsentinel-extract.timer maillogsentinel.service +Mon 2025-10-13 23:59:59 CEST 7h Mon 2025-10-13 00:00:18 CEST 8h ago maillogsentinel-report.timer maillogsentinel-report.service +``` + +```bash +sudo systemctl stop maillogsentinel-report.timer && sudo systemctl stop maillogsentinel-report.service +sudo systemctl disable maillogsentinel-report.service && sudo systemctl disable maillogsentinel-report.timer + +``` + +```bash +systemctl list-timers --all |grep maillogsentinel +Mon 2025-10-13 16:25:00 CEST 10s Mon 2025-10-13 16:20:09 CEST 4min 40s ago maillogsentinel-sql-import.timer maillogsentinel-sql-import.service +Mon 2025-10-13 16:28:00 CEST 3min 10s Mon 2025-10-13 16:24:01 CEST 48s ago maillogsentinel-sql-export.timer maillogsentinel-sql-export.service +Mon 2025-10-13 17:00:00 CEST 35min Mon 2025-10-13 16:00:18 CEST 24min ago maillogsentinel-extract.timer maillogsentinel.service +``` + +## βš™οΈ Daily Usage + +### Q4: How does MailLogSentinel manage sending reports by email? + +MailLogSentinel requires the Postfix MTA to be installed and configured to send reports via email with the CSV attachment. + +Command line utilities such as mailx do not support sending attachments. + +### Q5: How to check if MailLogSentinel is working? + +```bash +# Check service status +systemctl status maillogsentinel.service + +# View recent logs +journalctl -u maillogsentinel.service -f + +# Check data files +ls -la /var/log/maillogsentinel/ +tail -20 /var/log/maillogsentinel/maillogsentinel.csv +``` + + +### Q6: How to generate a manual report? + +```bash +# Generate and send report immediately +python3 /usr/local/bin/maillogsentinel-report.py --report +``` + + +### Q7: Where are the data and log files stored? + +| File Type | Location | Description | +| :-- | :-- | :-- | +| CSV Data | `/var/log/maillogsentinel/maillogsentinel.csv` | Parsed email logs | +| Application Logs | `/var/log/maillogsentinel/maillogsentinel.log` | Service logs | +| State File | `/var/lib/maillogsentinel/maillogsentinel.state` | Processing state | +| Configuration | `/etc/maillogsentinel.conf` | Main config file | + +## πŸ”§ Maintenance and Administration + +### Q8: How to backup MailLogSentinel data? + +```bash +#!/bin/bash +# Complete backup script +BACKUP_DIR="$HOME/backup/maillogsentinel/$(date +%Y%m%d)" +mkdir -p $BACKUP_DIR + +# Backup data files +cp /var/log/maillogsentinel/* $BACKUP_DIR/ + +# Backup configuration +cp /etc/maillogsentinel.conf $BACKUP_DIR/ + +# Backup state +cp /var/lib/maillogsentinel/* $BACKUP_DIR/ + +# Create archive +tar -czf $BACKUP_DIR.tar.gz $BACKUP_DIR +``` + + +### Q9: How to setup log rotation? + +Create `/etc/logrotate.d/maillogsentinel`: + +```bash +/var/log/maillogsentinel/*.log { + daily + rotate 30 + compress + delaycompress + missingok + notifempty + postrotate + systemctl reload maillogsentinel.service + endscript +} + +/var/log/maillogsentinel/*.csv { + weekly + rotate 52 + compress + delaycompress + missingok + notifempty +} +``` + + +### How to update MailLogSentinel? + +```bash +# 1. Stop service +sudo systemctl stop maillogsentinel.service + +# 2. Backup current installation +BACKUP_DIR="$HOME/backup/maillogsentinel/$(date +%Y%m%d)" +mkdir -p $BACKUP_DIR +sudo cp -r /usr/local/bin/maillogsentinel* $BACKUP_DIR/ + +# 3. Update from Git +cd MailLogSentinel +git pull origin main + +# 4. Update installation +chmod +x bin/*.py +sudo cp bin/*.py /usr/local/bin/ + +# 3. Copy libraries +sudo cp -r lib/ /usr/local/bin/ + +# 5. Restart service +sudo systemctl start maillogsentinel.service +``` + + +### How to migrate data to a new server? + +```bash +# On old server - Export data +python3 /usr/local/bin/maillogsentinel.py --sql-export --output=/tmp/maillog_export.sql + +# Transfer files to new server +scp /tmp/maillog_export.sql newserver:/tmp/ +scp /etc/maillogsentinel.conf newserver:/tmp/ + +# On new server - Import data +python3 /usr/local/bin/maillogsentinel.py --sql-import --input=/tmp/maillog_export.sql +sudo cp /tmp/maillogsentinel.conf /etc/ +``` + + +*** + +## πŸ”— Advanced Integrations + +### How to integrate with Metabase? + +**1. Export data to SQL format:** + +```bash +python3 /usr/local/bin/maillogsentinel.py --sql-export --output=/tmp/maillog_data.sql +``` + +**2. Import into PostgreSQL/MySQL:** + +```sql +-- PostgreSQL example +CREATE DATABASE maillogsentinel; +\c maillogsentinel +\i /tmp/maillog_data.sql +``` + +**3. Connect Metabase:** + +- Database type: PostgreSQL/MySQL +- Host: localhost +- Database: maillogsentinel +- Username/Password: your DB credentials + +**4. Example Metabase queries:** + +```sql +-- Top domains by email volume +SELECT domain, COUNT(*) as email_count +FROM mail_logs +WHERE timestamp >= NOW() - INTERVAL '30 days' +GROUP BY domain +ORDER BY email_count DESC; + +-- SASL authentication failures +SELECT COUNT(*) as failures, DATE(timestamp) as day +FROM mail_logs +WHERE message LIKE '%SASL%authentication%failed%' +GROUP BY DATE(timestamp) +ORDER BY day DESC; +``` + +**πŸ“– Reference:** [Metabase Integration Guide](https://github.com/monozoide/MailLogSentinel/wiki/metabase-integration-guide) + +### How to setup automated SQL exports? + +There are two ways to do this: + +1. The native method: + - Install SQLite3 `sudo apt install sqlite3` + - Enable the `maillogsentinel-sql-import.service` and `maillogsentinel-sql-import.timer` services + +And that's it, the service takes care of everything! + +2. The manual method: you must: + - Install, configure and secure an SQL Server (Mariadb, PostgreSQL) + - Create a script to import the SQL file into your database + +You can find the [SQL column mapping file](https://github.com/monozoide/MailLogSentinel/blob/main/config/maillogsentinel_sql_column_mapping.json) + +**πŸ“– Reference:**: + - [Using MailLogSentinel's native SQL tools](https://github.com/monozoide/MailLogSentinel/wiki/maillogsentinel-and-sqlite3) + - [Using RDBMS with MailLogSentinel](https://github.com/monozoide/MailLogSentinel/wiki/maillogsentinel-and-rdbms) + +## 🚨 Troubleshooting and Errors + +### Error "Permission denied" on /var/log/mail.log + +**Problem:** MailLogSentinel can't read mail logs. + +**Solution:** + +```bash +# Add user to syslog group +sudo usermod -a -G syslog $USER + +# Or add maillogsentinel user to adm group +sudo usermod -a -G adm maillogsentinel + +# Alternative: Change log file permissions +sudo chmod 644 /var/log/mail.log + +# Restart service +sudo systemctl restart maillogsentinel.service +``` + + +### Service fails to start + +**Check service status:** + +```bash +sudo systemctl status maillogsentinel.service -l +journalctl -u maillogsentinel.service --no-pager +``` + +**Common issues and solutions:** + + +| Error | Cause | Solution | +| :-- | :-- | :-- | +| `Config file not found` | Missing configuration | Run `sudo maillogsentinel.py --setup --interactive` | +| `Python module not found` | Incomplete installation | Reinstall libraries: `sudo cp -r lib/ /usr/local/bin/` | + +### No emails in reports + +**Diagnostic steps:** + +```bash +# 1. Check if parsing is working +tail -50 /var/log/maillogsentinel/maillogsentinel.csv + +# 2. Check mail log format +tail -20 /var/log/mail.log + +# 3. Test email sending +echo "Test" | mail -s "Test Report" admin@domain.com + +# 5. Check or occurrences of authentication failures +grep -hoP 'sasl_username=\K[^, ]+' /var/log/mail.log | sort | uniq -c | sort -nr | awk '{print $2 " : " $1}' +``` + +## πŸ“Š Data and Reports + +### How to analyze CSV data manually? + +**Basic analysis with command-line tools:** + +```bash +# Count total emails +wc -l /var/log/maillogsentinel/maillogsentinel.csv + +# Top 10 senders +awk -F',' '{print $4}' /var/log/maillogsentinel/maillogsentinel.csv | sort | uniq -c | sort -nr | head -10 + +# Emails by hour +awk -F',' '{print substr($1,12,2)}' /var/log/maillogsentinel/maillogsentinel.csv | sort | uniq -c + +# SASL failures +grep -i "sasl.*fail" /var/log/mail.log | wc -l +``` + +## πŸ” Security and Permissions + +### What are the recommended security settings? + +**File permissions:** + +```bash +# Configuration file (sensitive data) +sudo chmod 600 /etc/maillogsentinel.conf +sudo chown root:root /etc/maillogsentinel.conf + +# Data directory +sudo chmod 750 /var/log/maillogsentinel/ +sudo chown maillogsentinel:syslog /var/log/maillogsentinel/ + +# State files +sudo chmod 640 /var/lib/maillogsentinel/ +sudo chown maillogsentinel:maillogsentinel /var/lib/maillogsentinel/ +``` + +### How to run with minimal privileges? + +**Create dedicated user:** + +```bash +# Create system user +sudo useradd --system --no-create-home --shell /bin/false maillogsentinel + +# Add to necessary groups +sudo usermod -a -G syslog maillogsentinel + +# Update service file +sudo systemctl edit maillogsentinel.service +``` + +**Service configuration:** + +```ini +[Service] +User=maillogsentinel +Group=syslog +# Remove sudo requirements +ExecStart=/usr/local/bin/maillogsentinel.py --no-root +``` + +## πŸ› οΈ Development + +### How to contribute to MailLogSentinel? + +**Development setup:** + +```bash +# Fork and clone +git clone https://github.com/monozoide/MailLogSentinel.git +cd MailLogSentinel + +# Create development environment +python3 -m venv venv +source venv/bin/activate +pip install -r requirements.txt + +# Install in development mode +pip install -e . + +# Run tests +python -m pytest tests/ +``` + +**Code style:** + +```bash +# Format code +black . +isort . + +# Lint code +flake8 . +pylint . + +# Type checking +mypy . +``` + +**πŸ“– Reference:** [Contributing Guide](../CONTRIBUTING.md) + +## πŸ†˜ Getting More Help + +- **πŸ“š Documentation:** [Project Wiki](https://github.com/monozoide/MailLogSentinel/wiki) +- **πŸ› Bug Reports:** [GitHub Issues](https://github.com/monozoide/MailLogSentinel/issues) +- **πŸ’¬ Discussions:** [GitHub Discussions](https://github.com/monozoide/MailLogSentinel/discussions) +- **πŸ“§ Contact:** [Project Maintainer](https://github.com/monozoide) + +**Before asking for help:** + +1. βœ… Check this FAQ +2. βœ… Search existing [GitHub issues](https://github.com/monozoide/MailLogSentinel/issues) +3. βœ… Run diagnostic commands from this FAQ +4. βœ… Include relevant logs and configuration (sanitized) + +*** + +*This FAQ is maintained by the community. [Contribute improvements](https://github.com/monozoide/MailLogSentinel/blob/main/docs/wiki/FAQ.md) to help other users!* + +*** \ No newline at end of file diff --git a/lib/maillogsentinel/parser.py b/lib/maillogsentinel/parser.py index 1d4239e..3749de0 100644 --- a/lib/maillogsentinel/parser.py +++ b/lib/maillogsentinel/parser.py @@ -18,7 +18,6 @@ Callable, ) import logging -import sys # Add bin directory to sys.path to allow importing ipinfo # sys.path.append(str(Path(__file__).resolve().parent.parent.parent / "bin")) # Removed for cleaner path management diff --git a/lib/maillogsentinel/sql_exporter.py b/lib/maillogsentinel/sql_exporter.py index 88b6312..f6812f2 100644 --- a/lib/maillogsentinel/sql_exporter.py +++ b/lib/maillogsentinel/sql_exporter.py @@ -8,14 +8,14 @@ import csv import datetime -import hashlib import json import logging -import os from pathlib import Path from typing import Optional, List, Dict, Any import importlib.resources # Added for loading bundled data +import tempfile +import shutil from lib.maillogsentinel.config import AppConfig # Import AppConfig # Constants @@ -608,7 +608,7 @@ def run_sql_export(config: AppConfig, output_log_level: str = "INFO") -> bool: if sql_file_path.exists(): sql_file_path.unlink(missing_ok=True) # cleanup return False - except CSVSchemaError as e: # Already logged by validate_csv_header + except CSVSchemaError: # Already logged by validate_csv_header # Cleanup already handled in validate_csv_header's calling block return False except Exception as e: @@ -663,10 +663,6 @@ def run_sql_export(config: AppConfig, output_log_level: str = "INFO") -> bool: return True -import tempfile -import shutil - - # Test configuration class class DummyTestConfig: def __init__(self, mapping_file_path_str="", base_dir_name=None): diff --git a/lib/maillogsentinel/sql_importer.py b/lib/maillogsentinel/sql_importer.py index 77bd264..d61192a 100644 --- a/lib/maillogsentinel/sql_importer.py +++ b/lib/maillogsentinel/sql_importer.py @@ -10,10 +10,9 @@ import logging import sqlite3 import time -import datetime # For handling imported file records import os # For os.getpid() in FileLock from pathlib import Path -from typing import List, Tuple, Dict, Any, Optional +from typing import Optional import fcntl # For file locking on POSIX systems import importlib.resources # Added for loading bundled data @@ -714,6 +713,3 @@ def __init__(self, base_path: Path): print("\nsql_importer.py direct test finished.") # Note: For a real test, you'd use pytest and mock AppConfig, Path.is_file(), open(), etc. # This direct run is just for very basic flow checking. - -# Required for FileLock to get PID (if not already imported by another module like logging) -import os diff --git a/tests/bin/test_maillogsentinel_setup.py b/tests/bin/test_maillogsentinel_setup.py index b6610bb..7dc467f 100644 --- a/tests/bin/test_maillogsentinel_setup.py +++ b/tests/bin/test_maillogsentinel_setup.py @@ -6,7 +6,6 @@ import tempfile import os import io # For mock_log_fh spec -import locale # For mocking in specific test import re @@ -413,7 +412,6 @@ def test_path_management_creation(self): try: original_backed_up_items = mls_setup.backed_up_items - original_created_final_paths = mls_setup.created_final_paths mls_setup.backed_up_items = [] mls_setup.created_final_paths = [] @@ -433,7 +431,6 @@ def test_path_management_creation(self): finally: os.remove(config_path_str) mls_setup.backed_up_items = original_backed_up_items - mls_setup.created_final_paths = original_created_final_paths def test_path_management_backup_existing(self): """Test backup of workdir and statedir when they already exist.""" @@ -475,7 +472,6 @@ def test_path_management_backup_existing(self): try: original_backed_up_items = mls_setup.backed_up_items - original_created_final_paths = mls_setup.created_final_paths mls_setup.backed_up_items = [] mls_setup.created_final_paths = [] @@ -502,7 +498,6 @@ def test_path_management_backup_existing(self): finally: os.remove(config_path_str) mls_setup.backed_up_items = original_backed_up_items - mls_setup.created_final_paths = original_created_final_paths # User/Group Management Tests def test_user_verification_non_existent(self): @@ -946,7 +941,6 @@ def path_exists_side_effect(*args_passed): config.read_string(VALID_CONFIG_CONTENT) try: - original_created_final_paths = mls_setup.created_final_paths mls_setup.created_final_paths = [] with patch( "configparser.ConfigParser.read", return_value=[config_path_str_val] @@ -1374,7 +1368,7 @@ def test_systemd_control_commands_success(self): "bin.maillogsentinel_setup.subprocess.run" ) as mock_subprocess_run, patch( "bin.maillogsentinel_setup._setup_print_and_log" - ) as mock_setup_print, patch( + ), patch( "bin.maillogsentinel_setup.sys.exit" ) as mock_sys_exit: # noqa: F841 @@ -1405,7 +1399,7 @@ def test_systemd_control_commands_success(self): # Expected calls to systemd-analyze for calendar validation # These come from the VALID_CONFIG_CONTENT and the defaults in non_interactive_setup # Order matters here as they are called before systemctl daemon-reload. - expected_calendar_validation_calls = [ + [ unittest.mock.call( [ "/usr/bin/systemd-analyze", diff --git a/tests/lib/maillogsentinel/test_log_utils.py b/tests/lib/maillogsentinel/test_log_utils.py index 49b5980..a722b23 100644 --- a/tests/lib/maillogsentinel/test_log_utils.py +++ b/tests/lib/maillogsentinel/test_log_utils.py @@ -6,7 +6,6 @@ # Import the function to be tested from lib.maillogsentinel.log_utils import ( _parse_log_line, - MONTHS, ) # MONTHS needed for test_parse_log_line_invalid_month by implication # --- Mocks and Fixtures --- diff --git a/tests/lib/maillogsentinel/test_progress.py b/tests/lib/maillogsentinel/test_progress.py index 3baf40f..45dfae3 100644 --- a/tests/lib/maillogsentinel/test_progress.py +++ b/tests/lib/maillogsentinel/test_progress.py @@ -1,11 +1,10 @@ # tests/lib/maillogsentinel/test_progress.py import unittest -from unittest.mock import patch, MagicMock +from unittest.mock import patch import io import sys from lib.maillogsentinel.progress import ( ProgressTracker, # Import the class - get_terminal_width, GREEN, RED, ORANGE, diff --git a/tests/lib/maillogsentinel/test_report.py b/tests/lib/maillogsentinel/test_report.py index 89bdf1c..cc39d63 100644 --- a/tests/lib/maillogsentinel/test_report.py +++ b/tests/lib/maillogsentinel/test_report.py @@ -299,7 +299,7 @@ def test_send_report_success( assert len(attachments) == 1 assert attachments[0].get_filename() == mock_app_config.csv_filename mock_logger.info.assert_any_call( - f"Report sent from testuser@my.server.com to recipient@example.com" + "Report sent from testuser@my.server.com to recipient@example.com" ) @@ -376,7 +376,7 @@ def test_send_report_sender_override( sent_msg: EmailMessage = mock_smtp_instance.send_message.call_args[0][0] assert sent_msg["From"] == "override@sender.com" mock_logger.info.assert_any_call( - f"Report sent from override@sender.com to recipient@example.com" + "Report sent from override@sender.com to recipient@example.com" ) diff --git a/tests/lib/maillogsentinel/test_sql_exporter.py b/tests/lib/maillogsentinel/test_sql_exporter.py index 617129d..0a8d7ea 100644 --- a/tests/lib/maillogsentinel/test_sql_exporter.py +++ b/tests/lib/maillogsentinel/test_sql_exporter.py @@ -6,6 +6,7 @@ import json from pathlib import Path import datetime +from unittest.mock import patch from lib.maillogsentinel.sql_exporter import ( load_column_mapping, @@ -16,7 +17,6 @@ format_sql_value, generate_insert_statement, run_sql_export, - SQLExportError, CSVSchemaError, ) from lib.maillogsentinel.config import AppConfig # For mocking config @@ -66,9 +66,10 @@ def now(cls, tz=None): @pytest.fixture -def mock_logger(mocker): +def mock_logger(): """Fixture to mock the logger.""" - return mocker.patch("lib.maillogsentinel.sql_exporter.logger") + with patch("lib.maillogsentinel.sql_exporter.logger") as mock_log: + yield mock_log @pytest.fixture @@ -285,7 +286,6 @@ def test_generate_insert_statement(sample_column_mapping_content): # Adjust mapping for this test: "id" is auto-increment, so it shouldn't be in INSERT # "status" is ENUM - expected_sql = "INSERT INTO logs (server, event_time, ip, username, hostname, status) VALUES ('mail.example.com', '2023-01-01 12:00:00', '192.168.1.1', 'testuser', 'client.local', 'OK');" # Note: The order of columns in the output SQL depends on the iteration order of sample_column_mapping_content. # For robust testing, parse the generated SQL or compare sets of (column, value) pairs. # For simplicity here, we rely on dict iteration order (Python 3.7+). @@ -302,7 +302,6 @@ def test_generate_insert_statement(sample_column_mapping_content): # The columns will be: server, event_time, ip, username, hostname, status # Reconstruct the expected string based on the order in sample_column_mapping_content, skipping 'id' - cols_ordered = [k for k in sample_column_mapping_content if k != "id"] # This test is a bit fragile due to string matching. # A more robust test would parse the SQL. @@ -408,91 +407,87 @@ def test_run_sql_export_empty_csv( def test_run_sql_export_basic_flow( - mock_app_config, sample_column_mapping_content, mock_logger, mocker + mock_app_config, sample_column_mapping_content, mock_logger ): - csv_file = mock_app_config.working_dir / mock_app_config.csv_filename - offset_file = mock_app_config.state_dir / "sql_state.offset" - sql_output_dir = mock_app_config.working_dir / "sql" - - if offset_file.exists(): - offset_file.unlink() - - # Prepare CSV data - # Get header from mapping, skipping placeholder for auto-increment ID - csv_headers = [ - info["csv_column_name"] - for _, info in sample_column_mapping_content.items() - if info["csv_column_name"] != "csv_id_placeholder" - ] - - csv_content = ";".join(csv_headers) + "\n" - csv_content += "srv1;2023-01-01 10:00:00;1.1.1.1;user1;host1.com;OK\n" - csv_content += "srv2;2023-01-02 11:00:00;2.2.2.2;user2;host2.net;FAIL\n" - csv_file.write_text(csv_content) - - # Mock datetime.datetime class in the sql_exporter module - mocker.patch( - "lib.maillogsentinel.sql_exporter.datetime.datetime", MockFixedDatetime - ) - - # Set specific times for each run - # First run - MockFixedDatetime.set_now(datetime.datetime(2023, 1, 1, 10, 0, 0)) - assert run_sql_export(mock_app_config) - exported_files1 = list(sql_output_dir.glob("*.sql")) - assert len(exported_files1) == 1 - expected_filename1 = sql_output_dir / "20230101_1000_maillogsentinel_export.sql" - assert expected_filename1 in exported_files1 - sql_content1 = expected_filename1.read_text() - assert ( - "INSERT INTO test_log_events (server, event_time, ip, username, hostname, status) VALUES ('srv1', '2023-01-01 10:00:00', '1.1.1.1', 'user1', 'host1.com', 'OK');" - in sql_content1 - ) - assert ( - "INSERT INTO test_log_events (server, event_time, ip, username, hostname, status) VALUES ('srv2', '2023-01-02 11:00:00', '2.2.2.2', 'user2', 'host2.net', 'FAIL');" - in sql_content1 - ) - assert "BEGIN TRANSACTION;" in sql_content1 - assert "COMMIT;" in sql_content1 - - original_offset = len(csv_content.encode("utf-8")) - assert int(offset_file.read_text()) == original_offset - - # Second run (no new data) - MockFixedDatetime.set_now(datetime.datetime(2023, 1, 1, 10, 1, 0)) # Different time - assert run_sql_export(mock_app_config) - current_sql_files = list(sql_output_dir.glob("*.sql")) - assert len(current_sql_files) == 1 - assert expected_filename1 in current_sql_files - - # Add new data - new_line = "srv3;2023-01-03 12:00:00;3.3.3.3;user3;host3.org;OK\n" - with open(csv_file, "a") as f: - f.write(new_line) - - # Third run - MockFixedDatetime.set_now( - datetime.datetime(2023, 1, 1, 10, 2, 0) - ) # Different time again - assert run_sql_export(mock_app_config) - exported_files3 = list(sql_output_dir.glob("*.sql")) - assert len(exported_files3) == 2 - expected_filename3 = sql_output_dir / "20230101_1002_maillogsentinel_export.sql" - assert expected_filename3 in exported_files3 - sql_content3 = expected_filename3.read_text() - assert ( - "INSERT INTO test_log_events (server, event_time, ip, username, hostname, status) VALUES ('srv3', '2023-01-03 12:00:00', '3.3.3.3', 'user3', 'host3.org', 'OK');" - in sql_content3 - ) - assert "BEGIN TRANSACTION;" in sql_content3 - assert "COMMIT;" in sql_content3 - - assert int(offset_file.read_text()) == original_offset + len( - new_line.encode("utf-8") - ) - mock_logger.info.assert_any_call( - "sql_export: SQL export process finished. Processed: 1 lines. Exported: 1 records." - ) + with patch("lib.maillogsentinel.sql_exporter.datetime.datetime", MockFixedDatetime): + csv_file = mock_app_config.working_dir / mock_app_config.csv_filename + offset_file = mock_app_config.state_dir / "sql_state.offset" + sql_output_dir = mock_app_config.working_dir / "sql" + + if offset_file.exists(): + offset_file.unlink() + + # Prepare CSV data + # Get header from mapping, skipping placeholder for auto-increment ID + csv_headers = [ + info["csv_column_name"] + for _, info in sample_column_mapping_content.items() + if info["csv_column_name"] != "csv_id_placeholder" + ] + + csv_content = ";".join(csv_headers) + "\n" + csv_content += "srv1;2023-01-01 10:00:00;1.1.1.1;user1;host1.com;OK\n" + csv_content += "srv2;2023-01-02 11:00:00;2.2.2.2;user2;host2.net;FAIL\n" + csv_file.write_text(csv_content) + + # Set specific times for each run + # First run + MockFixedDatetime.set_now(datetime.datetime(2023, 1, 1, 10, 0, 0)) + assert run_sql_export(mock_app_config) + exported_files1 = list(sql_output_dir.glob("*.sql")) + assert len(exported_files1) == 1 + expected_filename1 = sql_output_dir / "20230101_1000_maillogsentinel_export.sql" + assert expected_filename1 in exported_files1 + sql_content1 = expected_filename1.read_text() + assert ( + "INSERT INTO test_log_events (server, event_time, ip, username, hostname, status) VALUES ('srv1', '2023-01-01 10:00:00', '1.1.1.1', 'user1', 'host1.com', 'OK');" + in sql_content1 + ) + assert ( + "INSERT INTO test_log_events (server, event_time, ip, username, hostname, status) VALUES ('srv2', '2023-01-02 11:00:00', '2.2.2.2', 'user2', 'host2.net', 'FAIL');" + in sql_content1 + ) + assert "BEGIN TRANSACTION;" in sql_content1 + assert "COMMIT;" in sql_content1 + + original_offset = len(csv_content.encode("utf-8")) + assert int(offset_file.read_text()) == original_offset + + # Second run (no new data) + MockFixedDatetime.set_now(datetime.datetime(2023, 1, 1, 10, 1, 0)) # Different time + assert run_sql_export(mock_app_config) + current_sql_files = list(sql_output_dir.glob("*.sql")) + assert len(current_sql_files) == 1 + assert expected_filename1 in current_sql_files + + # Add new data + new_line = "srv3;2023-01-03 12:00:00;3.3.3.3;user3;host3.org;OK\n" + with open(csv_file, "a") as f: + f.write(new_line) + + # Third run + MockFixedDatetime.set_now( + datetime.datetime(2023, 1, 1, 10, 2, 0) + ) # Different time again + assert run_sql_export(mock_app_config) + exported_files3 = list(sql_output_dir.glob("*.sql")) + assert len(exported_files3) == 2 + expected_filename3 = sql_output_dir / "20230101_1002_maillogsentinel_export.sql" + assert expected_filename3 in exported_files3 + sql_content3 = expected_filename3.read_text() + assert ( + "INSERT INTO test_log_events (server, event_time, ip, username, hostname, status) VALUES ('srv3', '2023-01-03 12:00:00', '3.3.3.3', 'user3', 'host3.org', 'OK');" + in sql_content3 + ) + assert "BEGIN TRANSACTION;" in sql_content3 + assert "COMMIT;" in sql_content3 + + assert int(offset_file.read_text()) == original_offset + len( + new_line.encode("utf-8") + ) + mock_logger.info.assert_any_call( + "sql_export: SQL export process finished. Processed: 1 lines. Exported: 1 records." + ) # (More tests for run_sql_export: mapping file issues, header validation on resume, etc.) diff --git a/tests/sample_data/logs_en_test/mail_sample_en_test.log b/tests/sample_data/logs_en_test/mail_sample_en_test.log new file mode 100644 index 0000000..ff6d5b9 --- /dev/null +++ b/tests/sample_data/logs_en_test/mail_sample_en_test.log @@ -0,0 +1,3 @@ +Feb 2 02:00:00 hostB postfix/smtpd[200]: client=unknown[4.4.4.4], sasl_method=PLAIN, sasl_username=user_en1@example.com +Feb 2 02:00:01 hostB postfix/smtpd[201]: client=unknown[5.5.5.5], sasl_method=LOGIN, sasl_username=user_en2@example.com +Feb 2 02:00:02 hostB postfix/smtpd[202]: client=unknown[6.6.6.6], sasl_method=PLAIN, sasl_username=user_en3@example.com diff --git a/tests/sample_data/logs_ft/mail_sample_ft.log b/tests/sample_data/logs_ft/mail_sample_ft.log new file mode 100644 index 0000000..f3c4879 --- /dev/null +++ b/tests/sample_data/logs_ft/mail_sample_ft.log @@ -0,0 +1,3 @@ +Jan 1 01:00:00 hostA postfix/smtpd[100]: client=unknown[1.1.1.1], sasl_method=PLAIN, sasl_username=user1@example.com +Jan 1 01:00:01 hostA postfix/smtpd[101]: client=unknown[2.2.2.2], sasl_method=LOGIN, sasl_username=user2@example.com +Jan 1 01:00:02 hostA postfix/smtpd[102]: client=unknown[3.3.3.3], sasl_method=PLAIN, sasl_username=user3@example.com diff --git a/usr/share/man/man8/ipinfo.8 b/usr/share/man/man8/ipinfo.8 new file mode 100644 index 0000000..f44523a --- /dev/null +++ b/usr/share/man/man8/ipinfo.8 @@ -0,0 +1,125 @@ +.TH IPINFO 8 "2025-10-13" "MailLogSentinel" "System Administration Commands" +.SH NAME +ipinfo \- IP address information lookup utility +.SH SYNOPSIS +.B ipinfo.py +[\fB\-h\fR] +[\fB\-\-update\fR] +[\fB\-\-country-db-path\fR \fIPATH\fR] +[\fB\-\-asn-db-path\fR \fIPATH\fR] +[\fB\-\-country-db-url\fR \fIURL\fR] +[\fB\-\-asn-db-url\fR \fIURL\fR] +[\fB\-\-data-dir\fR \fIDIR\fR] +[\fB\-\-config\fR \fIFILE\fR] +[\fIip_address\fR] +.SH DESCRIPTION +.B ipinfo.py +is a command-line utility for looking up geographical and network information about IP addresses. +It uses local databases for country and ASN (Autonomous System Number) information, +providing fast offline lookups without requiring external API calls. +.PP +The utility can download and update its databases from public IP location repositories, +making it suitable for integration into logging and monitoring systems like MailLogSentinel. +.SH OPTIONS +.TP +.I ip_address +IP address to look up (e.g., 8.8.8.8). If not provided, the utility displays usage information. +.TP +.BR \-h ", " \-\-help +Display help message and exit. +.TP +.BR \-\-update +Download or update both IP databases (Country and ASN). This fetches the latest versions +from the configured URLs and stores them in the appropriate locations. +.TP +.BI \-\-country-db-path " PATH" +Path to store or load the country database. +.br +Default: \fI~/.ipinfo/country_aside.csv\fR +.TP +.BI \-\-asn-db-path " PATH" +Path to store or load the ASN database. +.br +Default: \fI~/.ipinfo/ip2asn-lite.csv\fR +.TP +.BI \-\-country-db-url " URL" +URL for downloading the country database. +.br +Default: \fIhttps://raw.githubusercontent.com/sapics/ip-location-db/main/asn-country/asn-country-ipv4-num.csv\fR +.TP +.BI \-\-asn-db-url " URL" +URL for downloading the ASN database. +.br +Default: \fIhttps://raw.githubusercontent.com/sapics/ip-location-db/refs/heads/main/asn/asn-ipv4-num.csv\fR +.TP +.BI \-\-data-dir " DIR" +Directory to store or load all IP database files. If specified, this overrides the default +directory component of \fB\-\-country-db-path\fR and \fB\-\-asn-db-path\fR unless they are +specified as absolute paths. +.TP +.BI \-\-config " FILE" +Path to maillogsentinel.conf configuration file. When specified, database paths and URLs +can be read from the configuration file instead of using command-line options. +.SH FILES +.TP +.I ~/.ipinfo/country_aside.csv +Default location for the country database. +.TP +.I ~/.ipinfo/ip2asn-lite.csv +Default location for the ASN database. +.TP +.I maillogsentinel.conf +Optional configuration file for setting database paths and URLs. +.SH EXAMPLES +.TP +Look up information for a specific IP address: +.EX +ipinfo.py 8.8.8.8 +.EE +.TP +Update both databases to their latest versions: +.EX +ipinfo.py --update +.EE +.TP +Look up an IP using a custom data directory: +.EX +ipinfo.py --data-dir /var/lib/ipinfo 1.1.1.1 +.EE +.TP +Use a custom configuration file: +.EX +ipinfo.py --config /etc/maillogsentinel.conf 8.8.4.4 +.EE +.TP +Specify custom database paths: +.EX +ipinfo.py --country-db-path /opt/db/country.csv \\ + --asn-db-path /opt/db/asn.csv 192.168.1.1 +.EE +.SH EXIT STATUS +.TP +.B 0 +Successful execution. +.TP +.B 1 +General error (invalid IP address, database not found, network error during update). +.SH SEE ALSO +.BR whois (1), +.BR dig (1), +.BR host (1), +.BR geoiplookup (1) +.SH BUGS +Report bugs at: +.UR https://github.com/monozoide/MailLogSentinel/issues +.UE +.SH AUTHOR +MailLogSentinel Project +.SH COPYRIGHT +This utility is part of the MailLogSentinel project. +.PP +Database sources: +.br +IP location databases by sapics +.UR https://github.com/sapics/ip-location-db +.UE \ No newline at end of file diff --git a/usr/share/man/man8/log_anonymizer.8 b/usr/share/man/man8/log_anonymizer.8 new file mode 100644 index 0000000..84b86cc --- /dev/null +++ b/usr/share/man/man8/log_anonymizer.8 @@ -0,0 +1,135 @@ +.TH LOG_ANONYMIZER 8 "2025-10-13" "1.0" "System Administration Commands" +.SH NAME +log_anonymizer \- anonymize sensitive information in log files +.SH SYNOPSIS +.B log_anonymizer.py +.RB [ \-h ] +.B \-i +.I INPUT_FILE +.B \-o +.I OUTPUT_FILE +.RB [ \-t +.IR TEMP_DIR ] +.RB [ \-\-config +.IR CONFIG ] +.RB [ \-\-log\-level +.IR LEVEL ] +.RB [ \-\-script\-log\-file +.IR SCRIPT_LOG_FILE ] +.SH DESCRIPTION +.B log_anonymizer +is a tool designed to anonymize sensitive information contained in email log files. +It processes input log files and generates anonymized output files by applying +configurable anonymization rules to protect private data while maintaining +the utility of the logs for debugging and analysis purposes. +.PP +The tool supports customizable anonymization rules through configuration files +and provides comprehensive logging capabilities to track the anonymization process. +.SH OPTIONS +.TP +.BR \-h ", " \-\-help +Display help message and exit. +.TP +.BR \-i ", " \-\-input\-file " " \fIINPUT_FILE\fR +Specify the input log file to be anonymized. This option is mandatory. +.TP +.BR \-o ", " \-\-output\-file " " \fIOUTPUT_FILE\fR +Specify the output file where the anonymized log will be written. This option is mandatory. +.TP +.BR \-t ", " \-\-temp\-dir " " \fITEMP_DIR\fR +Specify an optional temporary directory to use during processing. If not provided, +the system default temporary directory will be used. +.TP +.BR \-\-config " " \fICONFIG\fR +Specify a configuration file containing custom anonymization rules. This allows +fine-tuning of the anonymization behavior to match specific requirements. +.TP +.BR \-\-log\-level " " \fILEVEL\fR +Set the logging level for the script execution. Valid values are: +.BR DEBUG ", " INFO ", " WARNING ", " ERROR ", and " CRITICAL . +This controls the verbosity of diagnostic output during execution. +.TP +.BR \-\-script\-log\-file " " \fISCRIPT_LOG_FILE\fR +Specify an optional path to a file where script execution logs will be saved. +If not provided, logs are output to standard error only. +.SH EXAMPLES +.PP +Basic anonymization of a log file: +.PP +.nf +.RS +python3 log_anonymizer.py \-i /var/log/mail.log \-o /tmp/mail_anonymized.log +.RE +.fi +.PP +Anonymization with custom configuration and debug logging: +.PP +.nf +.RS +python3 log_anonymizer.py \-i /var/log/mail.log \-o /tmp/safe.log \\ + \-\-config /etc/anonymizer/rules.conf \\ + \-\-log\-level DEBUG \\ + \-\-script\-log\-file /var/log/anonymizer_execution.log +.RE +.fi +.PP +Using a custom temporary directory: +.PP +.nf +.RS +python3 log_anonymizer.py \-i input.log \-o output.log \-t /mnt/fast_storage/tmp +.RE +.fi +.SH FILES +.TP +.I /etc/anonymizer/rules.conf +Default location for system-wide anonymization rules configuration (if applicable). +.TP +.I ~/.config/anonymizer/config +User-specific configuration file (if applicable). +.SH EXIT STATUS +.TP +.B 0 +Successful completion. +.TP +.B 1 +General error occurred during execution. +.TP +.B 2 +Invalid command-line arguments or missing required options. +.SH NOTES +The script requires Python 3 to run. Ensure that all required Python dependencies +are installed before execution. +.PP +Large log files may require significant temporary disk space during processing. +Use the +.B \-t +option to specify a temporary directory with adequate space if needed. +.PP +The quality of anonymization depends on the rules defined in the configuration file. +Review and test your configuration thoroughly before processing sensitive production logs. +.SH SECURITY CONSIDERATIONS +While this tool anonymizes data according to configured rules, it is the +administrator's responsibility to: +.IP \(bu 3 +Verify that all sensitive data types are properly covered by anonymization rules +.IP \(bu 3 +Securely handle both input and output files +.IP \(bu 3 +Properly dispose of temporary files +.IP \(bu 3 +Review anonymized output before sharing with untrusted parties +.SH BUGS +Report bugs at: +.UR https://github.com/monozoide/MailLogSentinel/issues +.UE +.SH AUTHOR +MailLogSentinel Project +.SH COPYRIGHT +This utility is part of the MailLogSentinel project. +.SH SEE ALSO +.BR maillogsentinel (8), +.BR sed (1), +.BR awk (1), +.BR grep (1), +.BR logrotate (8) \ No newline at end of file diff --git a/usr/share/man/man8/maillogsentinel.8 b/usr/share/man/man8/maillogsentinel.8 index 438e1ff..9b6350e 100644 --- a/usr/share/man/man8/maillogsentinel.8 +++ b/usr/share/man/man8/maillogsentinel.8 @@ -1,350 +1,233 @@ -.\" Man page for MailLogSentinel -.\" Contact monozoide on GitHub for issues. -.TH MAILLOGSENTINEL 8 "2025-06-27" "5.14.13" "MailLogSentinel Manual" +.TH MAILLOGSENTINEL 8 "October 2025" "MailLogSentinel" "System Administration" .SH NAME -maillogsentinel \- monitors and analyzes mail server authentication logs for intrusion attempts. +maillogsentinel - monitor Postfix SASL authentication failures .SH SYNOPSIS -.B maillogsentinel -[\fB\-\-config\fR \fIconfig_file\fR] -[\fB\-\-setup\fR [\fB\-\-interactive\fR | \fB\-\-automated\fR \fIsource_config_file\fR]] -[\fB\-\-report\fR] -[\fB\-\-reset\fR] -[\fB\-\-purge\fR] -[\fB\-\-sql-export\fR] -[\fB\-\-sql-import\fR] -[\fB\-\-help\fR] -[\fB\-\-version\fR] +.nf +.RS 4 +maillogsentinel [options] +maillogsentinel --setup [--config FILE] + +.RE +.fi .SH DESCRIPTION -.P -\fBMailLogSentinel\fR is a Python-based tool designed to monitor and analyze SASL (Simple Authentication and Security Layer) authentication logs from Postfix/Dovecot mail servers. Its primary goal is to detect and report potential intrusion attempts by identifying failed login events. It operates using Python 3 and standard libraries, making it lightweight and easy to integrate into existing server environments. -.P -Key functionalities include parsing SASL logs, incremental processing with offset tracking, handling of rotated and gzipped log files, storing detected attempts in a CSV file, performing reverse DNS lookups (with caching) and IP geolocation (Country, ASN, ASO) for source IPs, generating daily email summaries with statistics and CSV attachment, and offering multiple setup modes. +MailLogSentinel parses Postfix SASL authentication logs, records failed login attempts, and emails daily reports. The utility keeps persistent CSV and state files so subsequent runs only process new log lines. Normal operation must be executed as an unprivileged service user; root access is only required for the initial setup workflow. + +The program reads configuration values from an INI file (see Configuration). When invoked without command options, it processes the configured mail log, updates the persistent dataset, and generates progress messages on stdout. Dedicated subcommands are available for reporting, state resets, SQL export/import, and non-interactive setup. .SH OPTIONS + .TP -\fB\-\-config\fR \fIconfig_file\fR -Specify the path to the configuration file. Defaults to \fI/etc/maillogsentinel.conf\fR. -.TP -\fB\-\-setup\fR [\fB\-\-interactive\fR | \fB\-\-automated\fR \fIsource_config_file\fR] -Run the setup process. Requires root (sudo) privileges. This process is also triggered automatically if the configuration file is not found. -.RS -.TP -\fB\-\-interactive\fR -Run the interactive first-time setup wizard. This mode guides you through the configuration process step-by-step. Recommended for first-time users. Console output is logged to \fBmaillogsentinel_setup.log\fR in the current working directory. -.TP -\fB\-\-automated\fR \fIsource_config_file\fR -Run the automated/silent setup using a pre-configured source file. Useful for deployments. Progress is primarily logged to \fBmaillogsentinel_setup.log\fR. -.RE -.TP -\fB\-\-report\fR -Generate and send the daily email summary report based on the data in the CSV file. +\fB--config FILE\fR +Override the default configuration file path (/etc/maillogsentinel.conf). When combined with --setup the supplied file is treated as the source template for automated provisioning. .TP -\fB\-\-reset\fR -Archive existing data (CSV, state file, operational log) to a timestamped backup directory in the user's home directory and reset the log processing offset. The next run will process logs from the beginning. +\fB--setup\fR +Create or refresh configuration, directories, and systemd units. Run this command with root privileges. Without --config the setup wizard runs interactively and writes /etc/maillogsentinel.conf. When --config is supplied, the wizard performs an automated deployment using that template. .TP -\fB\-\-purge\fR -Similar to \fB\-\-reset\fR, but intended for a more complete fresh start by archiving all data. +\fB--report\fR +Send the daily email summary immediately using the currently persisted dataset. Requires mail transport configuration in the config file. .TP -\fB\-\-sql-export\fR -Export new log entries from the CSV file (\fImaillogsentinel.csv\fR) to an SQL file. The SQL files are created in a directory specified in the configuration (\fBsql_export_dir\fR under the \fB[database]\fR section). This allows for incremental backups or feeding data into an external SQL database. +\fB--reset\fR +Back up the CSV, operational log, and offset state into ~/maillogsentinel_backup_XXXXXX, then remove the originals so the next execution reprocesses all historical logs. Cron/systemd timers must be managed manually afterwards. .TP -\fB\-\-sql-import\fR -Import \fB.sql\fR files (typically generated by \fB\-\-sql-export\fR) from the directory specified by \fBsql_export_dir\fR into a configured database. Database connection parameters (type, host, name, user, password) must be set in the \fB[database]\fR section of the configuration file. +\fB--purge\fR +Perform the same archival workflow as --reset but is intended for complete environment refreshes. All persisted artefacts are moved into a timestamped directory beneath the invoking user's home. .TP -\fB\-\-help\fR -Show a help message and exit. +\fB--sql-export\fR +Append newly discovered events to SQL files located in the configured sql_export_dir. Use this for long-term storage or downstream analytics systems that ingest SQL statements. .TP -\fB\-\-version\fR -Show the script's version number and exit. +\fB--sql-import\fR +Read .sql files from sql_export_dir and replay them against the database described in the [database] section of the configuration. +.SH PREREQUISITES +.PP +Python 3.10 or later. -.SH "PROGRESS DISPLAY" -.TP -\fBSetup Process\fR -.RS -.IP "\(bu" 2 -\fBInteractive Setup (\-\-setup \-\-interactive)\fR: Progress messages are printed to the console at each major step. A detailed log is also saved to \fBmaillogsentinel_setup.log\fR in the current working directory. -.IP "\(bu" 2 -\fBAutomated Setup (\-\-setup \-\-automated)\fR: Minimal console output. Detailed progress is logged in \fBmaillogsentinel_setup.log\fR. -.RE -.TP -\fBLog Extraction & Reporting\fR -.RS -.IP "\(bu" 2 -\fBDirect Execution\fR: Progress and errors are printed to the console based on the configured log level. -.IP "\(bu" 2 -\fBSystemd Service\fR: All output (stdout and stderr) is directed to the Systemd journal (view with \fBjournalctl -u maillogsentinel.service\fR or \fBjournalctl -u maillogsentinel-report.service\fR). -.IP "\(bu" 2 -\fBOperational Log File\fR: Detailed logs are written to the file specified in the configuration (e.g., \fI/maillogsentinel.log\fR). -.RE +.PP +Access to the Postfix log files defined in the configuration. -.SH FILES -.TP -\fI/etc/maillogsentinel.conf\fR -The default configuration file. -.TP -\fI/maillogsentinel.csv\fR -CSV file where detected authentication attempts are stored. \fI\fR is defined in the configuration file. -The columns are: \fBserver, date, ip, user, hostname, reverse_dns_status, country_code, asn, aso\fR. -.TP -\fI/maillogsentinel.log\fR -Operational log file for MailLogSentinel. \fI\fR is defined in the configuration file. -.TP -\fI/state.offset\fR -State file that stores the last processed log offset. \fI\fR is defined in the configuration file. -.TP -\fI./maillogsentinel_setup.log\fR -Log file created in the current working directory when \fB\-\-setup\fR is run, containing the transcript of the setup process. +.PP +A functional local mail transfer agent for dispatching summary emails. + +.PP +Root privileges for the setup command; day-to-day execution should use a dedicated service account. .SH CONFIGURATION -MailLogSentinel is configured via an INI-style file, typically located at \fB/etc/maillogsentinel.conf\fR. The \fB\-\-setup --interactive\fR option is the recommended way to create this file. -.SS "[paths]" +Settings are stored in an INI file (default /etc/maillogsentinel.conf). Only keys that persist between executions or affect operations are documented below. Developer-oriented tuning options are described in the project documentation. + +.SS [paths] .TP \fBworking_dir\fR -Directory for CSV output (\fBmaillogsentinel.csv\fR) and the script's operational log (\fBmaillogsentinel.log\fR). -.br -Example: \fI/var/log/maillogsentinel\fR +Location for the persistent CSV (maillogsentinel.csv) and operational log (maillogsentinel.log). Ensure the service account can read and write this directory. .TP \fBstate_dir\fR -Directory for the state file (\fBstate.offset\fR) which tracks the log processing position. -.br -Example: \fI/var/lib/maillogsentinel\fR +Directory containing state.offset, which tracks the last processed position within the mail log. .TP \fBmail_log\fR -Full path to the mail server log file (e.g., Postfix/Dovecot SASL logs). -.br -Example: \fI/var/log/mail.log\fR -.SS "[report]" +Absolute path to the mail log file to monitor, typically /var/log/mail.log. +.SS [report] .TP \fBemail\fR -Recipient email address for daily summary reports. -.br -Example: \fIsecurity-alerts@example.com\fR -.SS "[general]" +Recipient address for the daily summary email. The message body lists top sources, usernames, and other aggregated indicators derived from the CSV. +.SS [general] .TP \fBlog_level\fR -Logging verbosity for \fBmaillogsentinel.log\fR. Options: DEBUG, INFO, WARNING, ERROR, CRITICAL. -.br -Default: INFO -.SS "[dns_cache]" +Logging verbosity for maillogsentinel.log. Accepts DEBUG, INFO, WARNING, ERROR, or CRITICAL. +.SS [dns_cache] .TP \fBenabled\fR -Enable (`true`) or disable (`false`) DNS reverse lookup caching. -.br -Default: `true` +Toggle cached reverse DNS lookups to reduce latency and repeated resolver traffic. .TP \fBsize\fR -Maximum number of DNS entries in the cache. -.br -Default: 128 +Maximum number of entries retained in the DNS cache. .TP \fBttl_seconds\fR -Time-to-live for cached DNS entries, in seconds. -.br -Default: 3600 (1 hour) -.SS "[ipinfo]" +Expiration time for cached DNS entries. +.SS [ipinfo] .TP \fBcountry_db_path\fR -Path to the IP geolocation country database (e.g., GeoLite2-Country.mmdb). +Path to the country database used for IP geolocation. .TP \fBasn_db_path\fR -Path to the IP geolocation ASN database (e.g., GeoLite2-ASN.mmdb). +Path to the ASN database used for enrichment. .TP \fBdb_update_url_country\fR -URL to download/update the country database. +Download URL for refreshing the country database. .TP \fBdb_update_url_asn\fR -URL to download/update the ASN database. -.P -(Note: These \fBipinfo\fR settings are typically configured by \fBipinfo.py --update\fR or can be set up if using custom database locations/sources.) -.SS "[database]" +Download URL for refreshing the ASN database. +.SS [database] .TP \fBsql_export_dir\fR -Directory where SQL files generated by the \fB\-\-sql-export\fR command are stored. -.br -Example: \fI/var/lib/maillogsentinel/sql_exports\fR +Directory that stores generated SQL export files and the source material for --sql-import. .TP \fBdb_type\fR -The type of database to use for import (e.g., \fBpostgresql\fR, \fBmysql\fR). This determines the database connector/driver to be used. -.br -Example: \fIpostgresql\fR +Database backend used for imports (for example postgresql or mysql). .TP \fBdb_host\fR -Hostname or IP address of the database server. -.br -Example: \fIlocalhost\fR +Hostname or address of the database service. .TP \fBdb_name\fR -Name of the database to import data into. -.br -Example: \fImaillogsentinel_db\fR +Target database schema. .TP \fBdb_user\fR -Username for connecting to the database. -.br -Example: \fImls_user\fR +Credential name for database access. .TP \fBdb_password\fR -Password for the database user. -.br -Example: \fIsecretpassword\fR -.P -(Note: Ensure appropriate database drivers like \fBpsycopg2-binary\fR for PostgreSQL or \fBmysql-connector-python\fR for MySQL are installed if using the \fB\-\-sql-import\fR feature.) +Password used by db_user. Protect this file with restrictive permissions. +.SH FILES +.TP +\fI/etc/maillogsentinel.conf\fR +Primary configuration file created by --setup. +.TP +\fI/maillogsentinel.csv\fR +Persistent datastore containing failed authentication events. +.TP +\fI/maillogsentinel.log\fR +Operational log capturing runtime diagnostics. +.TP +\fI/state.offset\fR +Offset tracker that prevents reprocessing of previously parsed log lines. +.TP +\fI/*.sql\fR +Incremental SQL export batches generated by --sql-export. +.TP +\fI./maillogsentinel_setup.log\fR +Transcript of the last setup session, useful for troubleshooting provisioning issues. -.SH PREREQUISITES -.IP "1." 4 -Python 3.6 or newer. -.IP "2." 4 -An active Postfix/Dovecot mail server generating SASL authentication logs. -.IP "3." 4 -A functional local MTA (e.g., Postfix, Sendmail) for sending email reports. -.IP "4." 4 -Appropriate permissions: +.SH DIAGNOSTICS +Runtime messages are written to stdout and to maillogsentinel.log using the configured log level. When deployed as a systemd service, inspect progress with: + +.nf .RS 4 -.IP \(bu 2 -Read access to mail log files for the operational user. -.IP \(bu 2 -Write access to \fIworking_dir\fR and \fIstate_dir\fR for the operational user. -.IP \(bu 2 -Root (`sudo`) privileges for the \fB\-\-setup\fR command. +journalctl -u maillogsentinel.service +journalctl -u maillogsentinel-report.service + .RE +.fi +Failures during setup are documented in maillogsentinel_setup.log. SQL import/export issues are logged alongside the operational log file. + +.SH SYSTEMD INTEGRATION +The setup wizard installs sample units named maillogsentinel.service, maillogsentinel-extract.timer, maillogsentinel-report.service, and maillogsentinel-report.timer. Review and adjust the User= directive and paths before copying them to /etc/systemd/system, then reload systemd and enable the timers. + +.SH SECURITY +Do not run the main extraction workflow as root. Grant the service user read access to mail logs and write access to the working/state directories. Protect /etc/maillogsentinel.conf because it may contain SMTP credentials and database passwords. +Network downloads performed by ipinfo.py should be executed with appropriate firewalls and TLS validation in place. -.SH "EMAIL REPORTS" -.P -Triggered by the \fB\-\-report\fR option, daily email reports include: -.IP \(bu 2 -Header with MailLogSentinel version, extraction interval, report timestamp, and server details. -.IP \(bu 2 -Total failed attempts for the reporting period. -.IP \(bu 2 -Top 10 failed authentications (user, IP, hostname, country, number of times). -.IP \(bu 2 -Top 10 usernames involved in failed attempts. -.IP \(bu 2 -Top 10 countries from which attempts originated. -.IP \(bu 2 -Top 10 ASNs (Autonomous System Numbers) associated with source IPs. -.IP \(bu 2 -Top 10 ASOs (Autonomous System Organizations) associated with source IPs. -.IP \(bu 2 -Summary of reverse DNS lookup failures, broken down by error type. -.IP \(bu 2 -Overall CSV file size and total line count. -.IP \(bu 2 -The full \fBmaillogsentinel.csv\fR file as an attachment. - -.SH "AUTOMATED EXECUTION (SYSTEMD)" -.P -The \fB\-\-setup\fR process (especially \fB\-\-interactive\fR) generates example Systemd unit files: -.IP \(bu 2 -\fBmaillogsentinel.service\fR: Runs log extraction. -.IP \(bu 2 -\fBmaillogsentinel-extract.timer\fR: Schedules log extraction (e.g., hourly). -.IP \(bu 2 -\fBmaillogsentinel-report.service\fR: Runs email reporting. -.IP \(bu 2 -\fBmaillogsentinel-report.timer\fR: Schedules email reporting (e.g., daily). -.P -Users must review, customize (especially the `User=` directive and paths), and then deploy these files to \fI/etc/systemd/system/\fR. After deployment, reload Systemd (`sudo systemctl daemon-reload`) and enable/start the timers (`sudo systemctl enable --now maillogsentinel-extract.timer maillogsentinel-report.timer`). +.SH AUXILIARY UTILITIES +.TP +\fBbin/log_anonymizer.py\fR +Redacts sensitive fields within mail logs to support troubleshooting without leaking credentials or addresses. +.TP +\fBbin/ipinfo.py\fR +Maintains the geolocation databases referenced by [ipinfo] settings and can query IP metadata on demand. Use bin/ipinfo.py --update to refresh the datasets. .SH EXAMPLES -.P -1. Run interactive setup (as root): -.EX -sudo maillogsentinel --setup --interactive -.EE -.P -2. Run automated setup using a source configuration file (as root): -.EX -sudo maillogsentinel --setup --automated /path/to/source_maillogsentinel.conf -.EE -.P -3. Process logs using a specific configuration file: -.EX -maillogsentinel --config /opt/custom/maillog.conf -.EE -.P -4. Generate and send the daily email report: -.EX -maillogsentinel --report -.EE -.P -5. Reset log processing state, archiving old data: -.EX -maillogsentinel --reset -.EE -.P -6. Export new CSV entries to SQL files: -.EX -maillogsentinel --sql-export -.EE -.P -7. Import SQL files from the export directory into the configured database: -.EX -maillogsentinel --sql-import -.EE - -.SH "EXIT STATUS" +Initial interactive deployment + +.nf +.RS 4 +sudo python3 maillogsentinel.py --setup + +.RE +.fi +Automated deployment from a prepared configuration + +.nf +.RS 4 +sudo python3 maillogsentinel.py --config /opt/bootstrap/maillogsentinel.conf --setup + +.RE +.fi +Daily processing from a custom configuration + +.nf +.RS 4 +python3 maillogsentinel.py --config /srv/maillogsentinel/maillogsentinel.conf + +.RE +.fi +Force immediate email delivery for the accumulated dataset + +.nf +.RS 4 +python3 maillogsentinel.py --report + +.RE +.fi +Archive existing state and restart ingestion + +.nf +.RS 4 +python3 maillogsentinel.py --reset + +.RE +.fi +.SH EXIT STATUS .TP \fB0\fR Successful execution. + .TP \fB1\fR -An error occurred (e.g., configuration file not found, permission issues, error during setup). Specific error messages are typically printed to stderr or the script's log file. - -.SH AUXILIARY SCRIPTS -.P -MailLogSentinel includes several auxiliary scripts located in the \fBbin/\fR directory of the installation. These scripts provide additional functionalities related to log management and data enrichment. -.SS log_anonymizer.py -.P -A utility script designed to anonymize sensitive data within log files, with a particular focus on Postfix mail logs. This is useful for sharing log excerpts for troubleshooting purposes or for archiving logs while minimizing privacy concerns. -.P -Basic usage: -.EX -\fBbin/log_anonymizer.py\fR \fI\fR \fI\fR [\fIoptions\fR] -.EE -.P -For more detailed options, refer to the script's help message (\fBbin/log_anonymizer.py --help\fR) or the project's Wiki. -.SS ipinfo.py -.P -A command-line tool and library for looking up IP address geolocation information such as country, ASN (Autonomous System Number), and ASO (Autonomous System Organization). It utilizes local databases which can be downloaded and updated. MailLogSentinel uses this utility for enriching its reports. -.P -The default IP geolocation databases (country and ASN) utilized by \fBipinfo.py\fR are sourced from the \fIsapics/ip-location-db\fR project on GitHub by user 'sapics'. These databases are provided under the Creative Commons Zero (CC0) license. The project can be found at \fIhttps://github.com/sapics/ip-location-db\fR. -.P -Primary command-line operations: -.IP "\(bu" 2 -\fBbin/ipinfo.py --update\fR: Downloads or updates the IP geolocation databases. Configuration for database paths and URLs can be managed in \fBmaillogsentinel.conf\fR under the `[ipinfo]` section or overridden by command-line arguments. -.IP "\(bu" 2 -\fBbin/ipinfo.py\fR \fI\fR: Looks up information for a specific IP address. -.IP "\(bu" 2 -\fBbin/ipinfo.py --config\fR \fI\fR: Explicitly uses database paths and download URLs specified in the MaillogSentinel configuration file for its operations. -.P -Database paths and download URLs can be configured via command-line arguments or by reading settings from \fBmaillogsentinel.conf\fR (see CONFIGURATION section). +A recoverable error occurred (for example missing configuration, permission errors, or setup cancellation). Inspect maillogsentinel.log or maillogsentinel_setup.log for details. + +.SH REPORTING BUGS +Report issues at https://github.com/monozoide/MailLogSentinel/issues. .SH AUTHOR -Written by monozoide. See . +Written by monozoide. Project home page: https://github.com/monozoide/MailLogSentinel. -.SH "REPORTING BUGS" -Report bugs to the GitHub issues page: . +.SH SEE ALSO +\fBfail2ban(1)\fR -.SH DOCUMENTATION -.TP -\fBProject Wiki\fR -For full user and administrator documentation, please visit the MailLogSentinel Wiki: . -.TP -\fBAPI Documentation\fR -For developers, API documentation is available at: (adjust path if served locally from docs/api/maillogsentinel.html). +\fBjournalctl(1)\fR + +\fBsystemd.service(5)\fR +\fBsystemd.timer(5)\fR -.SH "SEE ALSO" -.BR fail2ban (1), -.BR rsyslog.conf (5), -.BR syslog-ng.conf (5), -.BR systemd.service (5), -.BR systemd.timer (5), -.BR crontab (5), -.BR ipinfo.py (1) (if installed as a separate command) +\fBrsyslog.conf(5)\fR -.\" END OF MAN PAGE +\fBsyslog-ng.conf(5)\fR \ No newline at end of file