Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

spamd issues

Discussion in 'E-mail Discussion' started by ivan levente, Jul 15, 2015.

  1. ivan levente

    ivan levente Member

    Joined:
    Apr 4, 2015
    Messages:
    7
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Romania
    cPanel Access Level:
    Root Administrator
    This is what I see in my /var/log/maillog/ every 5 minutes:

    Code:
    Jul 15 19:23:03 server spamd[21193]: spamd: connection from localhost [127.0.0.1]:55673 to port 783, fd 5
    Jul 15 19:23:03 server spamd[21193]: spamd: setuid to cpanel succeeded
    Jul 15 19:23:03 server spamd[21193]: spamd: processing message <GTUBE1.1010101@example.net> for cpanel:32001
    Jul 15 19:23:03 server spamd[21193]: spamd: identified spam (1000.0/5.0) for cpanel:32001 in 0.5 seconds, 834 bytes.
    Jul 15 19:23:03 server spamd[21193]: spamd: result: Y 999 - GTUBE,NO_RECEIVED,NO_RELAYS scantime=0.5,size=834,user=cpanel,uid=32001,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=55673,mid=<GTUBE1.1010101@example.net>,autolearn=no autolearn_force=no,shortcircuit=no
    Jul 15 19:23:03 server spamd[21192]: prefork: child states: II
    Jul 15 19:23:05 server dovecot: pop3-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<gICiXuwaFAB/AAAB>
    Jul 15 19:23:12 server dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__xczmxoe5kkczvpbnywfz5lfa2p1a_2mtfbr5v9ij4t2oia...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=21323, secured, session=<paUGX+warQB/AAAB>
    Jul 15 19:23:12 server dovecot: imap(__cpanel__service__auth__imap__xczmxoe5kkczvpbnywfz5lfa2p1a_2mtfbr5v9ij4t2oiaotoymgagjy8xjgtaqp): Disconnected: Logged out in=11, out=434, bytes=11/434
    
    
    
    Jul 15 19:28:03 server dovecot: imap-login: Login: user=<admin@mydomain.com>, method=PLAIN, rip=::1, lip=::1, mpid=21578, secured, session=</9xccOwangAAAAAAAAAAAAAAAAAAAAAB>
    Jul 15 19:28:03 server dovecot: imap(admin@mydomain.com): Disconnected: Logged out in=94, out=942, bytes=94/942
    Jul 15 19:28:05 server spamd[21193]: spamd: connection from localhost [127.0.0.1]:55697 to port 783, fd 5
    Jul 15 19:28:05 server spamd[21193]: spamd: setuid to cpanel succeeded
    Jul 15 19:28:05 server spamd[21193]: spamd: processing message <GTUBE1.1010101@example.net> for cpanel:32001
    Jul 15 19:28:05 server spamd[21193]: spamd: identified spam (1000.0/5.0) for cpanel:32001 in 0.4 seconds, 834 bytes.
    Jul 15 19:28:05 server spamd[21193]: spamd: result: Y 999 - GTUBE,NO_RECEIVED,NO_RELAYS scantime=0.4,size=834,user=cpanel,uid=32001,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=55697,mid=<GTUBE1.1010101@example.net>,autolearn=no autolearn_force=no,shortcircuit=no
    Jul 15 19:28:05 server spamd[21192]: prefork: child states: II
    Jul 15 19:28:07 server dovecot: pop3-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<StyhcOwaLAB/AAAB>
    Jul 15 19:28:14 server dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__huxjmx1tov1crcioys0ymuf658sevsyw3bayjobct6sjt5...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=21610, secured, session=<JO4FcewaxQB/AAAB>
    Jul 15 19:28:14 server dovecot: imap(__cpanel__service__auth__imap__huxjmx1tov1crcioys0ymuf658sevsyw3bayjobct6sjt5woqyzuuuyxsl8gastc): Disconnected: Logged out in=11, out=434, bytes=11/434
    
    Can't this be stopped somehow?
     
    #1 ivan levente, Jul 15, 2015
    Last edited by a moderator: Jul 15, 2015
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,897
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello :)

    Could you elaborate on why you would like this activity stopped? It's the Chkservd service verifying the service is running as expected.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice