Iis-6

SMTP ,他們正在攻擊我的伺服器發送垃圾郵件?

  • April 15, 2013
2013-04-15 18:12:55 217.119.50.209 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 250-blue-ld-242.synserver.de 0 0 28 0 359 SMTP - - - -
2013-04-15 18:12:55 217.119.50.209 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 MAIL - FROM:<ptxbgl@nrwaf.com>+SIZE=817 0 0 4 0 359 SMTP - - - -
2013-04-15 18:12:55 217.119.50.209 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 250+2.1.0+Ok 0 0 12 0 499 SMTP - - - -
2013-04-15 18:12:55 217.119.50.209 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 RCPT - TO:<info@phitecs.com> 0 0 4 0 499 SMTP - - - -
2013-04-15 18:14:56 217.119.50.209 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 450+4.1.8+<ptxbgl@nrwaf.com>:+Sender+address+rejected:+Domain+not+found 0 0 71 0 120994 SMTP - - - -
2013-04-15 18:14:56 217.119.50.209 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 RSET - - 0 0 4 0 120994 SMTP - - - -
2013-04-15 18:14:56 217.119.50.209 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 250+2.0.0+Ok 0 0 12 0 121119 SMTP - - - -
2013-04-15 18:15:00 217.119.50.204 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 220+blue-ld-246.synserver.de+ESMTP+SynServer 0 0 44 0 3791 SMTP - - - -
2013-04-15 18:15:00 217.119.50.204 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 EHLO - adserver 0 0 4 0 3791 SMTP - - - -
2013-04-15 18:15:00 217.119.50.204 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 250-blue-ld-246.synserver.de 0 0 28 0 3916 SMTP - - - -
2013-04-15 18:15:00 217.119.50.204 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 MAIL - FROM:<ptxbgl@nrwaf.com>+SIZE=817 0 0 4 0 3916 SMTP - - - -
2013-04-15 18:15:00 217.119.50.204 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 250+2.1.0+Ok 0 0 12 0 4041 SMTP - - - -
2013-04-15 18:15:00 217.119.50.204 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 RCPT - TO:<info@phitecs.com> 0 0 4 0 4041 SMTP - - - -
2013-04-15 18:17:00 217.119.50.204 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 450+4.1.8+<ptxbgl@nrwaf.com>:+Sender+address+rejected:+Domain+not+found 0 0 71 0 124317 SMTP - - - -
2013-04-15 18:17:00 217.119.50.204 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 RSET - - 0 0 4 0 124317 SMTP - - - -
2013-04-15 18:17:00 217.119.50.204 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 250+2.0.0+Ok 0 0 12 0 124442 SMTP - - - -
2013-04-15 18:17:00 217.119.50.249 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 220+blue-ld-241.synserver.de+ESMTP+SynServer 0 0 44 0 125 SMTP - - - -
2013-04-15 18:17:00 217.119.50.249 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 EHLO - adserver 0 0 4 0 125 SMTP - - - -
2013-04-15 18:17:00 217.119.50.249 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 250-blue-ld-241.synserver.de 0 0 28 0 250 SMTP - - - -
2013-04-15 18:17:00 217.119.50.249 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 MAIL - FROM:<ptxbgl@nrwaf.com>+SIZE=817 0 0 4 0 250 SMTP - - - -
2013-04-15 18:17:00 217.119.50.249 OutboundConnectionResponse SMTPSVC1 ADSERVER - 25 -    - 250+2.1.0+Ok 0 0 12 0 374 SMTP - - - -
2013-04-15 18:17:00 217.119.50.249 OutboundConnectionCommand  SMTPSVC1 ADSERVER - 25 RCPT - TO:<info@phitecs.com> 0 0 4 0 374 SMTP - - - -

如何輸入登錄密碼?伺服器現在拒絕我的連接,但這會繼續向我的伺服器日誌發送垃圾郵件

他們試圖利用錯誤的配置,但在發現錯誤配置時沒有收到停止嘗試的消息(這些是 450 狀態消息)。這是正常的後台黑客攻擊,並且正在正確處理。

引用自:https://serverfault.com/questions/499585