邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: 疑问是不是25端口被人控制了？ [打印本页]

作者: 412233312 时间: 2010-4-29 13:27
标题: 疑问是不是25端口被人控制了？
04:28 23:55 SMTP-(4b5a0174000007e3) 220 mx.google.com ESMTP 39si1519635iwn.4
04:28 23:55 SMTP-(4b5a0174000007e3) Connect gmail.com [209.85.223.99:25] (1)
04:28 23:55 SMTP-(4b5a0174000007e3) >EHLO 我的域名
04:28 23:55 SMTP-(4b5d01e4000007eb) 550 5.1.1 <brookelada@walla.com>... User unknown
04:28 23:55 SMTP-(4b5d01e4000007eb) >QUIT
04:28 23:55 SMTP-(4b5a0174000007e3) 250-mx.google.com at your service, [我的ip]
04:28 23:55 SMTP-(4b5a0174000007e3) 250-SIZE 35651584
04:28 23:55 SMTP-(4b5a0174000007e3) 250-8BITMIME
04:28 23:55 SMTP-(4b5a0174000007e3) 250-ENHANCEDSTATUSCODES
04:28 23:55 SMTP-(4b5a0174000007e3) 250 PIPELINING
04:28 23:55 SMTP-(4b5a0174000007e3) >MAIL FROM:<recruitment@secretshopper.com>
04:28 23:55 SMTP-(4ae6008c0000074d) 421 4.7.0 [TS01] Messages from 我的ip  temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
04:28 23:55 SMTP-(4ae6008c0000074d) Connection returned error - skipping 66.94.236.34 421 4.7.0 [TS01] Messages from 我的ip temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
04:28 23:55 SMTP-(4b5a0174000007e3) 250 2.1.0 OK 39si1519635iwn.4
04:28 23:55 SMTP-(4b5a0174000007e3) >RCPT To:<brittany0608@gmail.com>
04:28 23:55 SMTP-(4b5d01e4000007eb) 221 2.0.0 fmail14.walla.co.il closing connection
04:28 23:55 SMTP-(4b5d01e4000007eb) Trying live.com (0)
04:28 23:55 SMTP-(4abd01a800000736) 421 4.7.1 : (DNS:NR) http://postmaster.info.aol.com/errors/421dnsnr.html
04:28 23:55 SMTP-(4abd01a800000736) Connection returned error - skipping 64.12.222.197 421 4.7.1 : (DNS:NR) http://postmaster.info.aol.com/errors/421dnsnr.html
04:28 23:55 SMTP-(4ae9016800000754) 421 4.7.0 [TS01] Messages from 我的ip temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
04:28 23:55 SMTP-(4ae9016800000754) Connection returned error - skipping 209.191.88.254 421 4.7.0 [TS01] Messages from 我的ip temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
04:28 23:55 SMTP-(4ae7018c0000074f) 421 4.7.1 : (DNS:NR) http://postmaster.info.aol.com/errors/421dnsnr.html
04:28 23:55 SMTP-(4ae7018c0000074f) Connection returned error - skipping 205.188.103.1 421 4.7.1 : (DNS:NR) http://postmaster.info.aol.com/errors/421dnsnr.html
04:28 23:55 SMTP-(4b5a0174000007e3) 250 2.1.5 OK 39si1519635iwn.4
04:28 23:55 SMTP-(4b5a0174000007e3) >RCPT To:<brittanybrye@gmail.com>
04:28 23:55 SMTP-(4b5901de000007e1) 554 5.7.1 - Connection refused. IP name lookup failed for 我的IP

04:28 23:55 SMTP-(4b5901de000007e1) Connection returned error - skipping 71.74.56.243 554 5.7.1 - Connection refused. IP name lookup failed for 我的IP
04:28 23:55 SMTP-(4b5d01e4000007eb) 220 snt0-mc2-f44.Snt0.hotmail.com Sending unsolicited commercial or bulk e-mail to Microsoft's computer network is prohibited. Other restrictions are found at http://privacy.msn.com/Anti-spam/. Violations will result in use of equipment located in California and other states. Wed, 28 Apr 2010 08:55:07 -0700
04:28 23:55 SMTP-(4b5d01e4000007eb) Connect live.com [65.55.92.152:25] (1)
04:28 23:55 SMTP-(4b5d01e4000007eb) >EHLO 我的域名
04:28 23:55 SMTPD(5a390184000024d7) [41.27.201.68] RCPT TO:<rodgers@okczoo.com>
04:28 23:55 SMTPD(5a3901a1000024d8) [41.27.201.68] RCPT TO:<rodney_mllr@yahoo.com>
04:28 23:55 SMTPD(5a3a01f0000024db) [41.27.201.68] RCPT TO:<rogers@cswnet.com>
04:28 23:55 SMTPD(5a3901ea000024d5) [41.27.201.68] RCPT TO:<rocox@bellsouth.net>
04:28 23:55 SMTPD(5a3a01fc000024dc) [41.27.201.68] RCPT TO:<rogesdj@hotmail.com>
04:28 23:55 SMTPD(5a5a02170000250d) [我的IP] connect 41.27.201.68 port 1881
04:28 23:55 SMTPD(5a3a021d000024dd) [41.27.201.68] RCPT TO:<roibaker@yahoo.com>
04:28 23:55 SMTPD(5a2901d8000024b7) [82.128.84.23] RCPT TO:<germaine_francois@yahoo.com>
04:28 23:55 SMTPD(5a4b026a000024f9) [41.27.201.68] RCPT TO:<rosieruffz@hotmail.com>
04:28 23:55 SMTPD(5a4c008c000024fd) [41.27.201.68] RCPT TO:<rosygirl@yahoo.com>
04:28 23:55 SMTPD(5a4e01c700002500) [41.27.201.68] RCPT TO:<rott@telfair.k12.ga.us>
04:28 23:55 SMTPD(5a54017400002507) [41.27.201.68] RCPT TO:<roy_kowlessar2003@yahoo.com>
04:28 23:55 SMTPD(5a3a016d000024df) [41.27.201.68] RCPT TO:<roldan0164@bellsouth.net>
04:28 23:55 SMTPD(5a4b0243000024f5) [41.27.201.68] RCPT TO:<roseofmi34@aol.com>
04:28 23:55 SMTPD(5a3101ca000024c2) [82.128.84.23] RCPT TO:<gflores@cox-internet.com>
04:28 23:55 SMTPD(5a5401a900002508) [41.27.201.68] RCPT TO:<roybal8@yahoo.com>
04:28 23:55 SMTPD(5a44022f000024e7) [82.128.84.23] RCPT TO:<ghazal_s_poetry19@hotmail.com>
04:28 23:55 SMTPD(5a37018c000024d2) [82.128.84.23] RCPT TO:<ggallegos71@yahoo.com>
04:28 23:55 SMTPD(5a52028b00002505) [82.128.84.23] RCPT TO:<giants258@aol.com>
04:28 23:55 SMTPD(5a360223000024cb) [41.27.201.68] RCPT TO:<robynmills@hotmail.com>
04:28 23:55 SMTPD(5a23022c000024ac) [82.128.84.23] RCPT TO:<georgiaraemoore@yahoo.com>
04:28 23:55 SMTPD(5a2b0220000024b9) [82.128.84.23] RCPT TO:<getattami@yahoo.com>
04:28 23:55 SMTPD(5a3901d1000024d6) [41.27.201.68] RCPT TO:<roddy1@bellsouth.net>
04:28 23:55 SMTPD(5a3901bf000024d9) [41.27.201.68] RCPT TO:<rodonnell@hotmail.com>
04:28 23:55 SMTPD(5a39019c000024da) [41.27.201.68] RCPT TO:<rodriguezeric30@gmail.com>
04:28 23:55 SMTPD(5a420091000024e5) [41.27.201.68] RCPT TO:<ronnietuck@aol.com>
04:28 23:55 SMTPD(5a3a01ae000024e0) [41.27.201.68] RCPT TO:<rolliegt@yahoo.com>
04:28 23:55 SMTPD(5a3800dd000024d3) [82.128.84.23] RCPT TO:<ggnzack@mac.com>
04:28 23:55 SMTPD(5a46023a000024e8) [41.27.201.68] RCPT TO:<roscoshdiamonds@aol.com>
04:28 23:55 SMTPD(5a4a0208000024f2) [41.27.201.68] RCPT TO:<rosedew46@aol.com>
04:28 23:55 SMTPD(5a4a0160000024f3) [41.27.201.68] RCPT TO:<roselocklear@google.com>
04:28 23:55 SMTPD(5a4b0191000024f7) [41.27.201.68] RCPT TO:<rosesareread@hotmail.com>
04:28 23:55 SMTPD(5a3a00c4000024de) [41.27.201.68] RCPT TO:<roklimb@hotmail.com>
04:28 23:55 SMTPD(5a4b021a000024f8) [41.27.201.68] RCPT TO:<roseyredlips4@hotmail.com>
04:28 23:55 SMTPD(5a4b0229000024fa) [41.27.201.68] RCPT TO:<rosie177611@yahoo.com>
04:28 23:55 SMTPD(5a3a01fc000024dc) [41.27.201.68] RCPT TO:<rogge311@yahoo.com>
04:28 23:55 SMTPD(5a3901ea000024d5) [41.27.201.68] RCPT TO:<rocpb@aol.com>
04:28 23:55 SMTPD(5a390184000024d7) [41.27.201.68] RCPT TO:<rodgers_deidra@yahoo.com>
04:28 23:55 SMTPD(5a3901a1000024d8) [41.27.201.68] RCPT TO:<rodney_robinson@hotmail.com>
04:28 23:55 SMTPD(5a3a01f0000024db) [41.27.201.68] RCPT TO:<rogers@mindspring.com>
04:28 23:55 SMTPD(5a50024000002501) Authenticated [email=recruit@我的域名]recruit@我的域名[/email], session treated as local.
04:28 23:55 SMTPD(5a2901d8000024b7) [82.128.84.23] RCPT TO:<germaine44105@yahoo.com>
04:28 23:55 SMTPD(5a3101ca000024c2) [82.128.84.23] RCPT TO:<gflorez@globetechdesigns.com>
04:28 23:55 SMTPD(5a44022f000024e7) [82.128.84.23] RCPT TO:<ghazouly3@aol.com>
04:28 23:55 SMTPD(5a5a02170000250d) [41.27.201.68] EHLO User
04:28 23:55 SMTPD(5a3a021d000024dd) [41.27.201.68] RCPT TO:<roider@cndata.com>
04:28 23:55 SMTP-(4b5d01e4000007eb) 250-snt0-mc2-f44.Snt0.hotmail.com (3.10.0.73) Hello [我的IP]
04:28 23:55 SMTP-(4b5d01e4000007eb) 250-SIZE 29696000
04:28 23:55 SMTP-(4b5d01e4000007eb) 250-PIPELINING
04:28 23:55 SMTP-(4b5d01e4000007eb) 250-8bitmime
04:28 23:55 SMTP-(4b5d01e4000007eb) 250-BINARYMIME
04:28 23:55 SMTP-(4b5d01e4000007eb) 250-CHUNKING
04:28 23:55 SMTP-(4b5d01e4000007eb) 250-AUTH LOGIN
04:28 23:55 SMTP-(4b5d01e4000007eb) 250-AUTH=LOGIN
04:28 23:55 SMTP-(4b5d01e4000007eb) 250 OK
04:28 23:55 SMTP-(4b5d01e4000007eb) >MAIL FROM:<recruitment@secretshopper.com>
04:28 23:55 SMTP-(4b53017d000007cf) 421 4.7.0 [TS01] Messages from 我的ip  temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
04:28 23:55 SMTP-(4b53017d000007cf) Connection returned error - skipping 209.191.88.254 421 4.7.0 [TS01] Messages from 我的ip temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
04:28 23:55 SMTP-(4b53017d000007cf) Trying yahoo.com (0)
04:28 23:55 SMTP-(4b5d01e4000007eb) 250 recruitment@secretshopper.com....Sender OK
04:28 23:55 SMTP-(4b5d01e4000007eb) >RCPT To:<brookeketter@live.com>
04:28 23:55 SMTP-(4b5a0174000007e3) 250 2.1.5 OK 39si1519635iwn.4
04:28 23:55 SMTP-(4b5a0174000007e3) >DATA
04:28 23:55 SMTP-(4b5a0174000007e3) 354  Go ahead 39si1519635iwn.4
04:28 23:55 SMTP-(4b5a0174000007e3) >.
04:28 23:55 SMTP-(4abb021400000734) 421 4.7.0 [TS01] Messages from 我的IP  temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
04:28 23:55 SMTP-(4abb021400000734) Connection returned error - skipping 206.190.54.127 421 4.7.0 [TS01] Messages from 我的ip temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
04:28 23:55 SMTP-(4b5d01e4000007eb) 250 brookeketter@live.com
04:28 23:55 SMTP-(4b5d01e4000007eb) >DATA
04:28 23:55 SMTP-(4b5d01e4000007eb) 354 Start mail input; end with <CRLF>.<CRLF>
04:28 23:55 SMTP-(4b5d01e4000007eb) >.
04:28 23:55 SMTP-(4b53017d000007cf) 421 4.7.0 [TS01] Messages from 我的ip  temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
04:28 23:55 SMTP-(4b53017d000007cf) Connection returned error - skipping 98.137.54.237 421 4.7.0 [TS01] Messages from 我的ip temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html

[ 本帖最后由 412233312 于 2010-4-29 13:33 编辑 ]

作者: 412233312 时间: 2010-4-29 14:16
好像是我的账号外泄了

作者: lgj858 时间: 2010-4-29 16:08
筛选分析

作者: ineedrmb 时间: 2010-5-19 17:07
还没听说过IMAIL的25端口被控制，日志分析器给分析下吧。

欢迎光临邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.cn/)