YTH Pak Syafril Mohon analisa email log berikut, apakah email ini berbahaya atau tidak?
Bagaimana cara memblok email tersebut agar tidak bisa kirim ke kami lagi? Mohon bantuan dan pencerahannya Pak.. Thu 2017-02-09 07:15:07.659: 01: ---------- Thu 2017-02-09 07:16:16.188: 05: [665148] Session 665148; child 0001 Thu 2017-02-09 07:16:16.188: 05: [665148] Accepting SMTP connection from [210.229.226.120:36728] to [202.78.202.4:25] Thu 2017-02-09 07:16:16.189: 03: [665148] --> 220 mail.os-selnajaya.com ESMTP Thu, 09 Feb 2017 07:16:16 +0700 Thu 2017-02-09 07:16:16.283: 02: [665148] <-- EHLO deer-blue-521a4e94a094a855.znlc.jp Thu 2017-02-09 07:16:16.283: 03: [665148] --> 250-mail.os-selnajaya.com Hello deer-blue-521a4e94a094a855.znlc.jp, pleased to meet you Thu 2017-02-09 07:16:16.283: 03: [665148] --> 250-ETRN Thu 2017-02-09 07:16:16.283: 03: [665148] --> 250-AUTH LOGIN CRAM-MD5 PLAIN Thu 2017-02-09 07:16:16.283: 03: [665148] --> 250-8BITMIME Thu 2017-02-09 07:16:16.283: 03: [665148] --> 250-ENHANCEDSTATUSCODES Thu 2017-02-09 07:16:16.283: 03: [665148] --> 250-STARTTLS Thu 2017-02-09 07:16:16.283: 03: [665148] --> 250 SIZE 25600000 Thu 2017-02-09 07:16:16.373: 02: [665148] <-- STARTTLS Thu 2017-02-09 07:16:16.374: 03: [665148] --> 220 2.7.0 Ready to start TLS Thu 2017-02-09 07:16:16.565: 01: [665148] SSL negotiation successful (TLS 1.2, 3072 bit key exchange, 128 bit AES encryption) Thu 2017-02-09 07:16:16.658: 02: [665148] <-- EHLO deer-blue-521a4e94a094a855.znlc.jp Thu 2017-02-09 07:16:16.658: 03: [665148] --> 250-mail.os-selnajaya.com Hello deer-blue-521a4e94a094a855.znlc.jp, pleased to meet you Thu 2017-02-09 07:16:16.658: 03: [665148] --> 250-ETRN Thu 2017-02-09 07:16:16.658: 03: [665148] --> 250-AUTH LOGIN CRAM-MD5 PLAIN Thu 2017-02-09 07:16:16.658: 03: [665148] --> 250-8BITMIME Thu 2017-02-09 07:16:16.658: 03: [665148] --> 250-ENHANCEDSTATUSCODES Thu 2017-02-09 07:16:16.658: 03: [665148] --> 250 SIZE 25600000 Thu 2017-02-09 07:16:16.749: 02: [665148] <-- MAIL FROM:<agvadan...@zebra.lt> SIZE=369460 Thu 2017-02-09 07:16:16.751: 05: [665148] Performing PTR lookup (120.226.229.210.IN-ADDR.ARPA) Thu 2017-02-09 07:16:16.767: 05: [665148] * D=120.226.229.210.IN-ADDR.ARPA TTL=(9) PTR=[deer-blue-521a4e94a094a855.znlc.jp] Thu 2017-02-09 07:16:16.767: 05: [665148] * Gathering A records... Thu 2017-02-09 07:16:16.784: 05: [665148] * D=deer-blue-521a4e94a094a855.znlc.jp TTL=(43) A=[210.229.226.120] Thu 2017-02-09 07:16:16.784: 05: [665148] ---- End PTR results Thu 2017-02-09 07:16:16.785: 09: [665148] Performing SPF lookup (zebra.lt / 210.229.226.120) Thu 2017-02-09 07:16:16.804: 09: [665148] * Policy: v=spf1 include:_mail1.zebra.lt include:_mail2.zebra.lt ~all Thu 2017-02-09 07:16:16.804: 09: [665148] * Evaluating include:_mail1.zebra.lt: performing lookup Thu 2017-02-09 07:16:17.140: 09: [665148] * Policy: v=spf1 ip4:212.59.0.7/32 ip4:212.59.31.119/32 ip4:212.59.31.87/32 ip4:212.59.31.115/32 ip4:195.12.167.68/32 ip4:195.12.167.69/32 ip4:195.12.167.70/32 ip4:212.59.31.76/32 ip4:212.59.31.84/32 ip4:212.59.31.85/32 ip4:212.59.31.91/32 ip4: Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:212.59.0.7/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:212.59.31.119/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:212.59.31.87/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:212.59.31.115/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:195.12.167.68/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:195.12.167.69/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:195.12.167.70/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:212.59.31.76/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:212.59.31.84/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:212.59.31.85/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:212.59.31.91/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ip4:212.59.31.94/32: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating ~all: match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating include:_mail1.zebra.lt: no match Thu 2017-02-09 07:16:17.140: 09: [665148] * Evaluating include:_mail2.zebra.lt: performing lookup Thu 2017-02-09 07:16:17.158: 09: [665148] * Policy: v=spf1 ip4:212.59.0.7/32 ip4:82.135.235.4/32 ip4:82.135.235.5/32 ip4:82.135.235.6/32 ip4:82.135.235.7/32 ?all Thu 2017-02-09 07:16:17.158: 09: [665148] * Evaluating ip4:212.59.0.7/32: no match Thu 2017-02-09 07:16:17.158: 09: [665148] * Evaluating ip4:82.135.235.4/32: no match Thu 2017-02-09 07:16:17.158: 09: [665148] * Evaluating ip4:82.135.235.5/32: no match Thu 2017-02-09 07:16:17.158: 09: [665148] * Evaluating ip4:82.135.235.6/32: no match Thu 2017-02-09 07:16:17.158: 09: [665148] * Evaluating ip4:82.135.235.7/32: no match Thu 2017-02-09 07:16:17.158: 09: [665148] * Evaluating ?all: match Thu 2017-02-09 07:16:17.158: 09: [665148] * Evaluating include:_mail2.zebra.lt: no match Thu 2017-02-09 07:16:17.158: 09: [665148] * Evaluating ~all: match Thu 2017-02-09 07:16:17.158: 09: [665148] * Result: softfail Thu 2017-02-09 07:16:17.158: 09: [665148] ---- End SPF results Thu 2017-02-09 07:16:17.158: 03: [665148] --> 250 2.1.0 Sender OK Thu 2017-02-09 07:16:17.250: 02: [665148] <-- RCPT TO:<nicodemus.arha...@os-selnajaya.com> Thu 2017-02-09 07:16:17.251: 05: [665148] Performing DNS-BL lookup (210.229.226.120 - connecting IP) Thu 2017-02-09 07:16:17.576: 05: [665148] * zen.spamhaus.org - passed Thu 2017-02-09 07:16:17.576: 05: [665148] ---- End DNS-BL results Thu 2017-02-09 07:16:17.577: 03: [665148] --> 250 2.1.5 Recipient OK Thu 2017-02-09 07:16:17.668: 02: [665148] <-- DATA Thu 2017-02-09 07:16:17.668: 01: [665148] Creating temp file (SMTP): d:\mdaemon\queues\temp\md50000136448.tmp Thu 2017-02-09 07:16:17.668: 03: [665148] --> 354 Enter mail, end with <CRLF>.<CRLF> Thu 2017-02-09 07:16:21.022: 01: [665148] Message size: 369679 bytes Thu 2017-02-09 07:16:21.023: 10: [665148] Performing DKIM lookup Thu 2017-02-09 07:16:21.023: 10: [665148] * File: d:\mdaemon\queues\temp\md50000136448.tmp Thu 2017-02-09 07:16:21.023: 10: [665148] * Message-ID: n/a Thu 2017-02-09 07:16:21.023: 10: [665148] * Result: neutral Thu 2017-02-09 07:16:21.023: 10: [665148] ---- End DKIM results Thu 2017-02-09 07:16:21.025: 19: [665148] Performing DMARC processing Thu 2017-02-09 07:16:21.025: 19: [665148] * File: d:\mdaemon\queues\temp\md50000136448.tmp Thu 2017-02-09 07:16:21.025: 19: [665148] * Message-ID: n/a Thu 2017-02-09 07:16:21.025: 19: [665148] * Author domain: zebra.lt Thu 2017-02-09 07:16:21.025: 19: [665148] * Organizational domain: zebra.lt Thu 2017-02-09 07:16:21.025: 19: [665148] * Query domain: _dmarc.zebra.lt Thu 2017-02-09 07:16:22.653: 19: [665148] * No DMARC policy record found Thu 2017-02-09 07:16:22.653: 19: [665148] * Action taken: none Thu 2017-02-09 07:16:22.653: 19: [665148] * Result: none Thu 2017-02-09 07:16:22.653: 19: [665148] ---- End DMARC results Thu 2017-02-09 07:16:22.654: 06: [665148] Passing message through AntiVirus (Size: 369679)... Thu 2017-02-09 07:16:22.770: 06: [665148] * Message is clean (no viruses found) Thu 2017-02-09 07:16:22.770: 06: [665148] ---- End AntiVirus results Thu 2017-02-09 07:16:22.770: 07: [665148] Spam filter scan skipped; message size (369679) exceeds spam filter configured max size of (102400) Thu 2017-02-09 07:16:22.771: 01: [665148] Message creation successful: d:\mdaemon\queues\inbound\md50002062442.msg Thu 2017-02-09 07:16:22.771: 03: [665148] --> 250 2.6.0 Ok, message saved Thu 2017-02-09 07:16:22.862: 02: [665148] <-- QUIT Thu 2017-02-09 07:16:22.863: 03: [665148] --> 221 2.0.0 See ya in cyberspace Thu 2017-02-09 07:16:22.863: 01: [665148] SMTP session successful (Bytes in/out: 377236/2392) Thu 2017-02-09 07:16:22.863: 01: ---------- Terima kasih Best regards, Agus Tarpindo IT Junior Supervisor PT. OS Selnajaya Indonesia Total Integrated Support Address: 19th Floor Mid Plaza I Bld, Jl. Jend. Sudirman Kav. 10-11, Jakarta, Indonesia Mobile: - Tel: +62 21-572 7214 Fax: +62 21-573 9482 Email: <mailto:agus.tarpi...@os-selnajaya.com> agus.tarpi...@os-selnajaya.com Website: <http://www.os-selnajaya.com/> www.os-selnajaya.com Part of : Outsourcing Inc - <http://www.outsourcing.co.jp/> www.outsourcing.co.jp ********** This message and any attachments are confidential and intended solely for the addressees. If you receive this message in error, please delete it and immediately notify the sender. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized use, copying or dissemination is prohibited. E-mails are susceptible to alteration. Neither Outsourcing Inc nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified.
