邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: 老被攻击 [打印本页]

作者: freewind 时间: 2009-5-20 09:03
标题: 老被攻击
日志中有大量攻击日志,郁闷...怎么找不到这个账号呢?

2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beandbr@cytanet.com.cy 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beal1253@yahoo.com 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 bealan.naurak@yahoo.no 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beaconplate@xsinet.co.za 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beaconsfield@guardianpharm.net 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beaker@ekno.com 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beale@best.com 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beahive@aol.com 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beamofsun14@aol.com 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beandbr@blueyonder.co.uk 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beacon@networksmm.com.au 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beaconbaptist@bellnet.ca 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beacy.h@bigpond.net.au 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beagles9@bigpond.net.au 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beacon@planet.net.au 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beadingram@mac.com 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beads@integra.net 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 bealiban@netconnect.com.au 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beagirls@bigpond.com.au 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 beales2@bigpond.com.au 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -
2009-5-20 0:9:47 GMT 68.34.227.137 User - MAIL 192.168.0.16 bealmond@bigpond.com.au 1030 MAILeSJIEoPXCFbN4TZ0000071a@MAIL.weiyuan.com 3 0 7844 50 2009-5-20 0:9:29 GMT 0 Version: 6.0.3790.3959 -  Notification from Commonwealth Bank commonwealth@email.commonwealth.com -

作者: freewind 时间: 2009-5-20 09:04
怎么办?怎么办?怎么办?

作者: tarian 时间: 2009-5-20 09:42
联邦共和国银行的邮件？你的服务器在国外吗？那IP是你的还是对方的啊。如果有中继暂停一下

作者: ceeo123456 时间: 2009-5-20 10:29
标题: 估计是中继的问题哦
估计是中继的问题哦

作者: freewind 时间: 2009-5-20 11:05
中继我关了啊

作者: neil.fu 时间: 2009-5-20 11:17
隐藏您的服务器吧，关闭您的25端口，防攻击！

作者: freewind 时间: 2009-5-20 13:50
关了外部邮件就收不到了啊

作者: tarian 时间: 2009-5-20 14:13
如果只是方便总部与分部的通信，您可以把25修改为别的端口号，那样别人就要猜你的端口啦

作者: tarian 时间: 2009-5-20 14:16
另外查一下anonymous 用户是不是也有发送邮件的权限，试着把这个用户的发邮件权限删除了吧。这个你看看TDK发过的“自己给自己发垃圾邮件”的帖子上面有提到如何删除某个用户某些权限的方法

作者: freewind 时间: 2009-5-22 08:07
找不到anonymous这个用户

作者: tarian 时间: 2009-5-24 19:47
您试着更改25端口为别的端口还能收到垃圾邮件吗？如果确认那很有可能是“自己给自己发垃圾邮件”因为我不知道你的地址是不是就是上面你帖出来的地址

作者: tarian 时间: 2009-5-24 19:49

原帖由 freewind 于 2009-5-22 08:07 发表
找不到anonymous这个用户

那我可能记错了，您到微软查一下联机帮助文档中“如何查询用户邮件权限----中的发送权限”我有空也找一下。

作者: freewind 时间: 2009-5-25 09:11
改了25端口能不能收发外部邮件?

作者: tarian 时间: 2009-5-25 10:03
标题: 回复 13楼 freewind 的帖子
发送是肯定没有问题的，收外部邮件困难，因为默认都使用的25

现在要发现问题所在：是你内部原因还是外部在使用你的中继

作者: freewind 时间: 2009-5-26 10:31
郁闷啊，找不到谁发的啊？

欢迎光临邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.net/)