ivan levente

Member
Apr 4, 2015
13
1
53
Romania
cPanel Access Level
Root Administrator
This is what I see in my /var/log/maillog/ every 5 minutes:

Code:
Jul 15 19:23:03 server spamd[21193]: spamd: connection from localhost [127.0.0.1]:55673 to port 783, fd 5
Jul 15 19:23:03 server spamd[21193]: spamd: setuid to cpanel succeeded
Jul 15 19:23:03 server spamd[21193]: spamd: processing message <[email protected]> for cpanel:32001
Jul 15 19:23:03 server spamd[21193]: spamd: identified spam (1000.0/5.0) for cpanel:32001 in 0.5 seconds, 834 bytes.
Jul 15 19:23:03 server spamd[21193]: spamd: result: Y 999 - GTUBE,NO_RECEIVED,NO_RELAYS scantime=0.5,size=834,user=cpanel,uid=32001,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=55673,mid=<[email protected]>,autolearn=no autolearn_force=no,shortcircuit=no
Jul 15 19:23:03 server spamd[21192]: prefork: child states: II
Jul 15 19:23:05 server dovecot: pop3-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<gICiXuwaFAB/AAAB>
Jul 15 19:23:12 server dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__xczmxoe5kkczvpbnywfz5lfa2p1a_2mtfbr5v9ij4t2oia...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=21323, secured, session=<paUGX+warQB/AAAB>
Jul 15 19:23:12 server dovecot: imap(__cpanel__service__auth__imap__xczmxoe5kkczvpbnywfz5lfa2p1a_2mtfbr5v9ij4t2oiaotoymgagjy8xjgtaqp): Disconnected: Logged out in=11, out=434, bytes=11/434



Jul 15 19:28:03 server dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=21578, secured, session=</9xccOwangAAAAAAAAAAAAAAAAAAAAAB>
Jul 15 19:28:03 server dovecot: imap([email protected]): Disconnected: Logged out in=94, out=942, bytes=94/942
Jul 15 19:28:05 server spamd[21193]: spamd: connection from localhost [127.0.0.1]:55697 to port 783, fd 5
Jul 15 19:28:05 server spamd[21193]: spamd: setuid to cpanel succeeded
Jul 15 19:28:05 server spamd[21193]: spamd: processing message <[email protected]> for cpanel:32001
Jul 15 19:28:05 server spamd[21193]: spamd: identified spam (1000.0/5.0) for cpanel:32001 in 0.4 seconds, 834 bytes.
Jul 15 19:28:05 server spamd[21193]: spamd: result: Y 999 - GTUBE,NO_RECEIVED,NO_RELAYS scantime=0.4,size=834,user=cpanel,uid=32001,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=55697,mid=<[email protected]>,autolearn=no autolearn_force=no,shortcircuit=no
Jul 15 19:28:05 server spamd[21192]: prefork: child states: II
Jul 15 19:28:07 server dovecot: pop3-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<StyhcOwaLAB/AAAB>
Jul 15 19:28:14 server dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__huxjmx1tov1crcioys0ymuf658sevsyw3bayjobct6sjt5...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=21610, secured, session=<JO4FcewaxQB/AAAB>
Jul 15 19:28:14 server dovecot: imap(__cpanel__service__auth__imap__huxjmx1tov1crcioys0ymuf658sevsyw3bayjobct6sjt5woqyzuuuyxsl8gastc): Disconnected: Logged out in=11, out=434, bytes=11/434
Can't this be stopped somehow?
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,227
463
Hello :)

Could you elaborate on why you would like this activity stopped? It's the Chkservd service verifying the service is running as expected.

Thank you.