素大,我的伺服器最近不知怎麼了，狂當，好像被入侵還是怎麼了？救救我。

 
發表新主題   回覆主題    尊龍佈告欄 首頁 -> 雷電MAILD (mail server)
上一篇文章 :: 下一篇文章  
發表人 內容
台北ANDY
一級


註冊時間: 2008-05-25
文章: 6
發表發表於: 星期五 一月 14, 2011 9:01 pm    文章標題: 素大,我的伺服器最近不知怎麼了，狂當，好像被入侵還是怎麼了？� 引言回覆
以下是今日的一小部分log檔內容
前幾天一開始是發現有一個帳號會狂寄信出去
寄到當機，我就將該帳號砍掉，就稍微停一會
今天又發現好幾個ip會猛寄信到我同事的一個帳號
收到2~3萬封信...
alex@office104.com.tw這個帳號我已砍掉，但好像是會一直回寄退信出去
65.54.190.*會一直用不同的尾段ip不停要寄信到alex@office104.com.tw
以致於雷電maild狂當
影響同事收發信件，請求協助！
我本想寄今日整個log檔給素大，但發覺光log檔就30幾mb，所以貼一小段給素大看一下，請求支援！

2011/01/14:20:18:55 SMTP 127.0.0.1 RF alex@office104.com.tw abel@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:18:58 SMTP 65.54.190.39 DN
2011/01/14:20:19:00 SMTP 127.0.0.1 RF alex@office104.com.tw al-fahad@maktoob.com "After 550 al-fahad@maktoob.com unknown user account"
2011/01/14:20:19:00 SMTP 192.168.1.10 CN
2011/01/14:20:19:03 SMTP 127.0.0.1 RF alex@office104.com.tw abelh@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:05 SMTP 127.0.0.1 RF alex@office104.com.tw august438@genie.de "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:05 SMTP 127.0.0.1 RF alex@office104.com.tw admin@7olm.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:07 SMTP 127.0.0.1 RF alex@office104.com.tw augustbabe@web.de "After 550 Protocol violation"
2011/01/14:20:19:08 SMTP 127.0.0.1 RF alex@office104.com.tw abelardog@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:10 SMTP 192.168.1.10 DC
2011/01/14:20:19:14 SMTP 65.54.190.34 CN
2011/01/14:20:19:19 SMTP 127.0.0.1 RF alex@office104.com.tw augusta@hotbot.de "Socket Error # 10061 Connection refused."
2011/01/14:20:19:19 SMTP 127.0.0.1 RF alex@office104.com.tw abel@3a-grupo.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:20 SMTP 65.54.190.29 CN
2011/01/14:20:19:22 SMTP 65.54.190.14 CN
2011/01/14:20:19:24 SMTP 127.0.0.1 RF alex@office104.com.tw abela@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:24 SMTP 65.54.190.34 DN
2011/01/14:20:19:26 SMTP 127.0.0.1 RF alex@office104.com.tw admin@7olm.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:29 SMTP 65.54.190.28 CN
2011/01/14:20:19:29 SMTP 65.54.190.15 CN
2011/01/14:20:19:30 SMTP 127.0.0.1 RF alex@office104.com.tw abelincoln@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:30 SMTP 65.54.190.29 DN
2011/01/14:20:19:32 SMTP 65.54.190.14 DN
2011/01/14:20:19:39 SMTP 127.0.0.1 RF alex@office104.com.tw golfm4@nbtx.com "After 451 4.1.8 Domain of sender address alex@office104.com.tw does not resolve"
2011/01/14:20:19:39 SMTP 65.54.190.28 DN
2011/01/14:20:19:40 SMTP 65.54.190.15 DN
2011/01/14:20:19:40 SMTP 127.0.0.1 RF alex@office104.com.tw abelicious@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:41 SMTP 127.0.0.1 RF alex@office104.com.tw augusta@extended.de "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:43 POP3 114.32.57.10 CN
2011/01/14:20:19:43 POP3 114.32.57.10 LI andy
2011/01/14:20:19:43 POP3 114.32.57.10 LO andy
2011/01/14:20:19:45 SMTP 127.0.0.1 RF alex@office104.com.tw abelha@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:47 SMTP 127.0.0.1 RF alex@office104.com.tw admin@7olm.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:19:51 SMTP 127.0.0.1 RF alex@office104.com.tw abelcom@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:20:01 SMTP 127.0.0.1 RF alex@office104.com.tw abelch@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:20:04 SMTP 127.0.0.1 RF alex@office104.com.tw augusta@wwwclub.de "Socket Error # 10060 Connection timed out."
2011/01/14:20:20:05 SMTP 65.54.190.25 CN
2011/01/14:20:20:07 SMTP 65.54.190.22 CN
2011/01/14:20:20:09 SMTP 127.0.0.1 RF alex@office104.com.tw augusteen@gespac.ch "Socket Error # 11004"
2011/01/14:20:20:12 SMTP 127.0.0.1 RF alex@office104.com.tw abelardoh@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:20:13 SMTP 65.54.190.30 CN
2011/01/14:20:20:15 SMTP 65.54.190.25 DN
2011/01/14:20:20:15 SMTP 65.54.190.20 CN
2011/01/14:20:20:17 SMTP 65.54.190.27 CN
2011/01/14:20:20:17 SMTP 65.54.190.21 CN
2011/01/14:20:20:17 SMTP 65.54.190.22 DN
2011/01/14:20:20:21 SMTP 65.54.190.36 CN
2011/01/14:20:20:22 SMTP 65.54.190.26 CN
2011/01/14:20:20:23 SMTP 127.0.0.1 RF alex@office104.com.tw abelardoe@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:20:23 SMTP 65.54.190.30 DN
2011/01/14:20:20:25 SMTP 65.54.190.20 DN
2011/01/14:20:20:27 SMTP 65.54.190.27 DN
2011/01/14:20:20:27 SMTP 65.54.190.21 DN
2011/01/14:20:20:31 SMTP 65.54.190.36 DN
2011/01/14:20:20:32 SMTP 65.54.190.26 DN
2011/01/14:20:20:33 SMTP 127.0.0.1 RF alex@office104.com.tw abelincon@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:20:44 SMTP 127.0.0.1 RF alex@office104.com.tw abelincln@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:20:54 SMTP 127.0.0.1 RF alex@office104.com.tw abelderan@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:21:04 SMTP 65.54.190.32 CN
2011/01/14:20:21:14 SMTP 65.54.190.32 DN
2011/01/14:20:21:15 SMTP 127.0.0.1 RF alex@office104.com.tw abeldfall@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:21:36 SMTP 127.0.0.1 RF alex@office104.com.tw abelding@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:21:39 SMTP 65.54.190.24 CN
2011/01/14:20:21:49 SMTP 65.54.190.24 DN
2011/01/14:20:21:50 SMTP 65.54.190.13 CN
2011/01/14:20:21:57 SMTP 127.0.0.1 RF alex@office104.com.tw abeldmen@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:22:00 SMTP 65.54.190.13 DN
2011/01/14:20:22:00 SMTP 65.54.190.38 CN
2011/01/14:20:22:04 SMTP 65.54.190.12 CN
2011/01/14:20:22:11 SMTP 65.54.190.38 DN
2011/01/14:20:22:11 SMTP 65.54.190.35 CN
2011/01/14:20:22:11 POP3 114.32.57.10 CN
2011/01/14:20:22:11 POP3 114.32.57.10 LI mandy
2011/01/14:20:22:12 POP3 114.32.57.10 LO mandy
2011/01/14:20:22:14 SMTP 65.54.190.12 DN
2011/01/14:20:22:18 SMTP 127.0.0.1 RF alex@office104.com.tw abeldog@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:22:20 SMTP 203.74.210.129 CN
2011/01/14:20:22:21 SMTP 65.54.190.35 DN
2011/01/14:20:22:30 SMTP 203.74.210.129 DC
2011/01/14:20:22:40 SMTP 127.0.0.1 RF alex@office104.com.tw abele@2men.com "Socket Error # 10060 Connection timed out."
2011/01/14:20:22:48 SMTP 65.54.190.18 CN
2011/01/14:20:22:48 SMTP 65.54.190.37 CN
2011/01/14:20:22:58 SMTP 65.54.190.18 DN
2011/01/14:20:22:58 SMTP 65.54.190.39 CN
2011/01/14:20:22:58 SMTP 65.54.190.37 DN
2011/01/14:20:23:08 SMTP 65.54.190.39 DN
2011/01/14:20:23:24 SMTP 65.54.190.34 CN
2011/01/14:20:23:29 SMTP 203.188.200.62 DC
2011/01/14:20:23:30 SMTP 127.0.0.1 NM andy _20110114201321-290440541-4032.eml 5940617
2011/01/14:20:23:30 SMTP 65.54.190.29 CN
2011/01/14:20:23:32 SMTP 65.54.190.14 CN
2011/01/14:20:23:34 SMTP 65.54.190.34 DN
2011/01/14:20:23:39 SMTP 65.54.190.28 CN
2011/01/14:20:23:39 SMTP 65.54.190.15 CN
2011/01/14:20:23:40 SMTP 65.54.190.29 DN
2011/01/14:20:23:42 SMTP 65.54.190.14 DN
2011/01/14:20:23:49 SMTP 65.54.190.28 DN
2011/01/14:20:23:49 SMTP 65.54.190.15 DN
2011/01/14:20:24:17 SMTP 65.54.190.22 CN
2011/01/14:20:24:18 SMTP 65.54.190.25 CN
2011/01/14:20:24:23 SMTP 65.54.190.30 CN
2011/01/14:20:24:27 SMTP 65.54.190.27 CN
2011/01/14:20:24:27 SMTP 65.54.190.21 CN
2011/01/14:20:24:27 SMTP 65.54.190.22 DN
2011/01/14:20:24:29 SMTP 65.54.190.25 DN
2011/01/14:20:24:30 SMTP 65.54.190.20 CN
2011/01/14:20:24:30 SMTP 65.54.190.36 CN
2011/01/14:20:24:33 SMTP 65.54.190.26 CN
2011/01/14:20:24:33 SMTP 65.54.190.30 DN
2011/01/14:20:24:37 SMTP 65.54.190.27 DN
2011/01/14:20:24:37 SMTP 65.54.190.21 DN
2011/01/14:20:24:40 SMTP 65.54.190.20 DN
2011/01/14:20:24:40 SMTP 65.54.190.36 DN
2011/01/14:20:24:43 SMTP 65.54.190.26 DN
2011/01/14:20:24:45 POP3 114.32.57.10 CN
2011/01/14:20:24:45 POP3 114.32.57.10 LI andy
2011/01/14:20:25:15 SMTP 65.54.190.32 CN
2011/01/14:20:25:25 SMTP 65.54.190.32 DN
2011/01/14:20:25:30 POP3 114.32.57.10 RV andy _20110114201321-290440541-4032.eml 5940574
2011/01/14:20:25:31 POP3 114.32.57.10 LO andy
2011/01/14:20:25:49 SMTP 65.54.190.24 CN
2011/01/14:20:25:59 SMTP 65.54.190.24 DN
2011/01/14:20:26:09 SMTP 65.54.190.13 CN
2011/01/14:20:26:10 SMTP 65.54.190.38 CN
2011/01/14:20:26:14 SMTP 65.54.190.12 CN
2011/01/14:20:26:19 SMTP 65.54.190.13 DN
2011/01/14:20:26:20 SMTP 65.54.190.38 DN
2011/01/14:20:26:21 SMTP 65.54.190.35 CN
2011/01/14:20:26:24 SMTP 65.54.190.12 DN
2011/01/14:20:26:31 SMTP 65.54.190.35 DN
2011/01/14:20:26:58 SMTP 65.54.190.37 CN
2011/01/14:20:27:01 SMTP 65.54.190.18 CN
回頂端
檢視會員個人資料 發送私人訊息
Arnor
究極の素還尊
究極の素還尊


註冊時間: 2001-11-07
文章: 13008
來自: TAIWAN
發表發表於: 星期日 一月 16, 2011 12:22 pm    文章標題: 引言回覆
請參考置頂文章處理
http://www.raidenhttpd.com/jlbb/viewtopic.php?t=17009
_________________
*若是想問問題的話, 請務必不要塗改任何 IP, 網域資料, 您若不願貼上IP或網域, 請改以電子郵件來詢問. 謝謝您的配合.*
*若是回報疑似軟體的運行或邏輯或資料處理有誤的問題, 小弟很樂意去了解您的情況, 但請務必以最新版來做回報, 如果以郵件詢問, 請參考 http://www.raidenmaild.com/tw/feedback.html 的說明, 最好標題加個 RaidenMAILD 字樣, 才不致會遺漏了您的信唷. 謝謝您的配合^^*
*在版上發文請遵守網路禮儀, 並請持著虛心敘述問題請教他人, 凡發現違反的文, 均一律刪除為優先, 不另行通知喔.
*與使用者教學相長腦力激盪是我輩成就感的來源, 誠心希望您能不吝指教.
*雷電MAILD 知識庫文件 http://www.raidenmaild.com/tw/kb/

素還尊
Team John Long.
Email: arnor@raidenmaild.com
公司網站 http://www.raidenmaild.com/company/
回頂端
檢視會員個人資料 發送私人訊息 發送電子郵件
從之前的文章開始顯示:   
發表新主題   回覆主題    尊龍佈告欄 首頁 -> 雷電MAILD (mail server) 所有的時間均為 台北時間 (GMT + 8 小時)
第1頁(共1頁)

 
前往:  
您 無法 在這個版面發表文章
您 無法 在這個版面回覆文章
您 無法 在這個版面編輯文章
您 無法 在這個版面刪除文章
您 無法 在這個版面進行投票


Powered by phpBB © 2001-2007 phpBB Group