Re: Что это? Спамеры резвятся?

От: Roman Prokhorov <CGatePro_at_mx_ru>
Дата: Fri 23 Apr 2004 - 17:11:28 MSD


on 23.4.04 5:01 PM, (Даниил Харун) at CGatePro@mx.ru wrote:

> Что это? Спамеры резвятся?

Угу. Называется "dictionary attack".  

> 18:54:01.82 1 ROUTER pr@chirt.ru rejected by SYSTEM: Error Code=unknown
> user account
> 18:54:01.82 1 SMTPI-02508([217.70.21.42]) Recipient pr@chirt.ru
> rejected: unknown user account
> 18:54:01.88 1 ROUTER marketing@chirt.ru rejected by SYSTEM: Error
> Code=unknown user account
> 18:54:01.88 1 SMTPI-02508([217.70.21.42]) Recipient marketing@chirt.ru
> rejected: unknown user account
> 18:54:01.95 1 ROUTER market@chirt.ru rejected by SYSTEM: Error
> Code=unknown user account
> 18:54:01.95 1 SMTPI-02508([217.70.21.42]) Recipient market@chirt.ru
> rejected: unknown user account

> 18:54:25.30 1 SMTPI-02508([217.70.21.42]) Too many protocol errors,
> aborting. [217.70.21.42] is blacklisted for 900 seconds

Имеет смысл уменьшить кол-во ошибок протокола до разрыва сессии, см. SETTINGS->SMTP  
> а это что?
>
> 18:56:06.61 3 SMTPI-02517([201.129.131.169]) read failed. Error
> Code=connection closed by peer

а это просто ошибки соединения.

> 18:56:18.27 3 SMTPI-02518([160.36.5.222]) read failed. Error
> Code=connection closed by peer
> 18:56:18.88 3 SMTPI-02519([67.163.134.133]) read failed. Error
> Code=connection closed by peer
> 18:56:20.20 3 SMTPI-02520([68.38.103.157]) read failed. Error
> Code=connection closed by peer
> 18:56:21.37 3 SMTPI-02521([24.52.86.166]) read failed. Error
> Code=connection closed by peer
> 18:56:35.67 3 SMTPI-02522([67.97.201.46]) read failed. Error
> Code=connection closed by peer
> 18:56:40.89 3 SMTPI-02523([66.169.121.212]) read failed. Error
> Code=connection closed by peer
> 18:56:59.72 3 SMTPI-02524([67.82.178.241]) read failed. Error
> Code=connection closed by peer
> 18:57:00.78 3 SMTPI-02525([24.50.203.124]) read failed. Error
> Code=connection closed by peer
> 18:57:06.95 3 SMTPI-02526([12.214.39.234]) read failed. Error
> Code=connection closed by peer
> 18:57:14.61 3 SMTPI-02527([4.8.0.93]) read failed. Error Code=connection
> closed by peer
> 18:57:20.21 3 SMTPI-02528([66.168.173.179]) read failed. Error
> Code=connection closed by peer
> 18:58:55.78 3 SMTPI-02529([24.164.51.51]) read failed. Error
> Code=connection closed by peer
> 18:59:48.51 3 SMTPI-02530([68.61.13.22]) read failed. Error
> Code=connection closed by peer
> 18:59:52.27 3 SMTPI-02531([66.25.210.123]) read failed. Error
> Code=connection closed by peer
> 18:59:59.55 3 SMTPI-02532([66.25.255.16]) read failed. Error
> Code=connection closed by peer
> 19:00:14.05 3 SMTPI-02533([24.13.244.240]) read failed. Error
> Code=connection closed by peer
> 19:00:22.07 3 SMTPI-02534([24.14.222.255]) read failed. Error
> Code=connection closed by peer
> 19:00:25.09 3 SMTPI-02535([24.14.62.17]) read failed. Error
> Code=connection closed by peer
> 19:00:25.69 3 SMTPI-02536([24.190.58.219]) read failed. Error
> Code=connection closed by peer

-- 

Roman
Получено Fri Apr 23 13:12:00 2004

Этот архив был сгенерирован hypermail 2.1.8 : Fri 24 Apr 2015 - 16:13:04 MSK